Zed Attack Proxy (ZAP) icon
Zed Attack Proxy (ZAP) icon

Zed Attack Proxy (ZAP)

The Zed Attack Proxy (ZAP) is an easy to use integrated penetration testing tool for finding vulnerabilities in web applications.

Zed Attack Proxy (ZAP) screenshot 1

Cost / License

Application type

Platforms

  • Mac
  • Windows
  • Linux
  • Java
31likes
0articles
Save

Features

Highlights All activities

Zed Attack Proxy (ZAP) News & Activities

Recent News

No news, maybe you know any news worth sharing?

Share a News Tip

Recent activities

Zed Attack Proxy (ZAP) information

AlternativeTo Categories

Network & Admin, Development

GitHub repository

  •  15,950 Stars
  •  2,667 Forks
  •  866 Open Issues
  •   Updated  
View on GitHub
Zed Attack Proxy (ZAP) was added to AlternativeTo by wavenator on and this page was last updated . Zed Attack Proxy (ZAP) is sometimes referred to as ZAP. 

No comments or reviews, maybe you want to be first?

Featured in Lists

Best Tools of Penetration Test for Noobies

A list with 10 apps by ulyanov92 without a description.
By Kirill Ulyanov10 appsUpdated

Cyber security list

A list with 21 apps by MartinO without a description.
By MartinO21 appsUpdated

Xenmaster's 2026 DevSecOps Tools Catalog

This list is an update to the list I created seven years ago https://alternativeto.net/lists/8013/devops-systems/ which focused on the SRE/DevOps component of infrastructure for web applications. The web and development world has changed a lot since then and rather than re-write history, decided to create a new list based on current patters and shifts in enterprise environments. These details are based on both what I've seen in the professional world as well as for hobbyists and web development enthusiasts who run their own projects. The general pattern for these tools will cover three main points for each function: Self Hosted Option Third-Party Service Option AWS Option I also cover any GUI interfaces available for folks who don't want to interact with these services using a terminal. In addition to consulting the documentation for each of the tools below, I'd like to shout out the following projects which also played a big part in informing the overall structure of this list: Jeff Delaney's 100 Second Videos: https://www.youtube.com/@Fireship Kamran Ahmed's Roadmaps: https://roadmap.sh Stack Overflow's Developer Survey: https://survey.stackoverflow.co/2025/ Arjay the Dev's Videos and Website: https://www.arjaythedev.com/ This is a no-AI zone since I am unfamiliar with these tools. Nor do I wish to change that.
By Xen Master85 appsUpdated

Official Links

Install from the command line

  • winget install -e --id ZAP.ZAP
  • flatpak install flathub org.zaproxy.ZAP

Be careful what you paste into a terminal. Check what a command installs before running it.

What is Zed Attack Proxy (ZAP)?

The Zed Attack Proxy (ZAP) is an easy to use integrated penetration testing tool for finding vulnerabilities in web applications. It is designed to be used by people with a wide range of security experience and as such is ideal for developers and functional testers who are new to penetration testing. ZAP provides automated scanners as well as a set of tools that allow you to find security vulnerabilities manually.

Zed Attack Proxy (ZAP) Videos