Zap
A free, open-source web application security scanner for finding vulnerabilities during development and testing.
What is Zap?
ZAP (Zed Attack Proxy) is an open-source web application security scanner that automatically finds security vulnerabilities in web applications during development and testing. It helps developers integrate security into their workflow and provides tools for manual penetration testing by security professionals.
Web developers, DevOps engineers, and security professionals (including penetration testers) who need to identify and fix security vulnerabilities in web applications.
Developers choose ZAP because it's completely free, open-source, and widely trusted, offering both automated scanning for efficiency and manual tools for deep security analysis, all within an active community-driven project.
Overview
The ZAP by Checkmarx Core project
Use Cases
Best For
- Automated security scanning in CI/CD pipelines
- Manual penetration testing of web applications
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
