Zed Attack Proxy (ZAP) Alternatives

Zed Attack Proxy (ZAP) is described as 'The Zed Attack Proxy (ZAP) is an easy to use integrated penetration testing tool for finding vulnerabilities in web applications' and is a penetration testing tool in the network & admin category. There are more than 25 alternatives to Zed Attack Proxy (ZAP) for a variety of platforms, including Windows, Linux, Mac, Web-based and SaaS apps. The best Zed Attack Proxy (ZAP) alternative is Fiddler, which is free. Other great apps like Zed Attack Proxy (ZAP) are mitmproxy, HTTP Toolkit, Charles and Burp Suite.

Copy a direct link to this comment to your clipboard
Get a badge for your siteZed Attack Proxy (ZAP) alternatives page was last updated

Alternatives list

  1. Weer icon
     1 like

    A HTTP protocol debugger with Chrome DevTools frontend interface.

    Cost / License

    • Free Personal
    • Proprietary

    Platforms

    • Mac
    • Windows
    • Linux
     
  2. Vulners API icon
     1 like

    Vulners is a high-quality correlated database of software vulnerabilities. Users can create a custom VM solution using our consolidated database through API, multiple vulnerability scanners, plugins, and many other security tools and integrations.

    24 Vulners API alternatives

    Cost / License

    • Freemium
    • Proprietary

    Application type

    Platforms

    • Linux
    • Online
    • Software as a Service (SaaS)
     
  3. IEWatch icon
     Like

    IEWatch is a plug-in for Microsoft Internet Explorer that helps you achieve your web development and web analysis tasks more efficiently.

    Cost / License

    • Paid
    • Proprietary

    Platforms

    • Windows
     
  4. Stop breaches before they happen. RogueSight protects your Web Applications and APIs with continuous scanning, actionable insights and clear remediation guidance.

    Cost / License

    • Paid
    • Proprietary

    Platforms

    • Software as a Service (SaaS)
     
  5. HTTPeep icon
     Like

    Modern HTTP debugging tool, Debug, mock, and rewrite HTTP/HTTPS traffic with composable rules.

    Cost / License

    • Freemium
    • Proprietary

    Platforms

    • Mac
    • Windows
    • Linux
     
  6. At Nikto Online Scanner, we are dedicated to providing a comprehensive solution for assessing the security of web servers. Our platform offers a powerful tool that conducts extensive tests to identify potential vulnerabilities, misconfigurations, and security risks associated...

    Cost / License

    • Freemium
    • Proprietary

    Platforms

    • Online
     
  7. Scan your APIs for prompt injection and 12 security checks in less than a minute, MCP, CLI and GH Action ready to CI/DI integration.

    Cost / License

    • Freemium
    • Proprietary

    Platforms

    • Online
    • Software as a Service (SaaS)
     
  8. Xalgorix icon
     Like

    Xalgorix is an Apache-2.0 open-source autonomous AI pentester for web applications and source repositories. It runs a structured 22-phase methodology, orchestrates security tools and browser-assisted testing, then sends candidate findings to an independent verifier that attempts...

    Cost / License

    Platforms

    • Online
    • Self-Hosted
    • Software as a Service (SaaS)
    • Docker
     
  9. Interceptor is a local-first desktop HTTP/HTTPS proxy for authorized security testing, traffic capture, replay, diagnostics, and evidence-ready reporting.

    Cost / License

    • Paid
    • Proprietary

    Platforms

    • Linux
     
You are at page 4 of Zed Attack Proxy (ZAP) alternatives