OWASP ZAP Node API

The ZAP Node API is the official Node.js implementation for interacting with the OWASP Zed Attack Proxy (ZAP) API. It enables developers to integrate ZAP's powerful web application security testing capabilities directly into their Node.js applications, automating security scans and vulnerability assessments.

Key Features

• Official API Client — Provides a dedicated, officially supported Node.js interface for the ZAP API.
• Automated Security Testing — Allows programmatic execution of ZAP's security scanning, spidering, and active attack functionalities.
• Promise-Based Interface — Uses modern async/await patterns with detailed error handling via ApiClientError objects.
• API Key Integration — Automatically handles ZAP's API key security requirement in requests.
• Full API Coverage — Supports all endpoints documented in the official ZAP API reference.

Philosophy

The project aims to make ZAP's security testing capabilities seamlessly accessible within Node.js ecosystems, promoting automation and integration into development and CI/CD workflows.