New releaseSep 4, 2026
zaproxy w2026-09-03
Open-source web application security scanner for automated vulnerability detection, manual penetration testing, and API security testing with a proxy-based interception engine.
The Zed Attack Proxy (ZAP) by Checkmarx is the world’s most widely used web app scanner. Free and open source. A community based GitHub Top 1000 project that anyone can contribute to.
It can help you automatically find security vulnerabilities in your web applications while you are developing and testing your applications. It's also a great tool for experienced pentesters to use for manual security testing.
For more details about ZAP see the website: zaproxy.org
Categories
Android SecurityPhishing ToolsVulnerability ScannersWeb Vulnerability ScannersDynamic Analysis (Sandboxing)Vulnerability AnalysisWeb Proxies & InterceptionDynamic Code Analysis (DAST)Web Application ExploitationAPI Security TestingPhishingWAF BypassWeb SecurityPenetration TestingDevSecOpsCrawlerAPI SecurityDatabase Security