OWASP ZAP
The world’s most widely used web application security scanner.
Why consider OWASP ZAP?
OWASP ZAP (Zed Attack Proxy) is an open-source web application security scanner. It acts as a "man-in-the-middle" proxy to intercept and inspect HTTP messages and automatically audit vulnerabilities in CI/CD.
Learn OWASP ZAP by building
Practical setup notes, real use cases, and copy-ready examples in one focused guide.
In this guide2 sections
Overview of OWASP ZAP
OWASP ZAP provides automated baseline security scans, active spiders, and WebSocket fuzzing for development teams.
Running with Docker
docker run -t zaproxy/zap-stable zap-baseline.py -t https://example.comOWASP ZAP is licensed under the Apache License Version 2.0.
Related tools
More options with a similar category or technology profile.
diskus
Minimal, fast alternative to du -sh written in Rust using multi-threaded directory traversal.
peco
Simplistic interactive filtering tool for Unix pipelines, process lists, and file trees.
Dapr CLI
Command-line tool for managing Dapr distributed application runtime environments and sidecars.
Freeze
Generate beautiful image screenshots and SVGs of code snippets and terminal outputs.