ZP
OWASP ZAP
Web application security scanner. Find vulnerabilities in your web apps during development and testing.
About OWASP ZAP
OWASP ZAP (Zed Attack Proxy) is the world's most widely used web app security scanner. It helps you automatically find security vulnerabilities in your web applications while you are developing and testing.
Key Features
✓ Automated vulnerability scanning
✓ Active & passive scanning
✓ Spider/crawler for discovery
✓ Fuzzer for input testing
✓ REST API for CI/CD integration
✓ Marketplace for add-ons
Why choose OWASP ZAP?
OWASP ZAP is an open source alternative to Burp Suite, Acunetix. Licensed under Apache-2.0, it gives you full access to the source code and the freedom to modify, self-host, and contribute. It is available as a desktop or web application.