About OWASP ZAP
Free, community-maintained web app security scanner: proxies traffic, fuzzes inputs, and flags common vulnerabilities.
Good default for teams without a dedicated pentest budget; integrates into CI as a baseline scan.
Community rating
3.4
Based on 20 votes
70% positive · 14 up
The star score moves every time someone votes this tool up or down.
Step-by-step installation
Download the installer/cross-platform package from zaproxy.org, or run via Docker: `docker pull zaproxy/zap-stable`.
Video walkthrough
No video is linked yet. Browse walkthroughs on YouTube.
Community knowledge
Discussion
Sign in to read the discussion, add comments, reply, and vote.