The Zed Attack Proxy (ZAP) is an easy to use integrated penetration testing tool for finding vulnerabilities in web applications.

Note that this project is no longer used for hosting the ZAP downloads.
You should download ZAP via
Please see the homepage for more information about OWASP ZAP


  • Intercepting Proxy
  • Traditional and AJAX Spiders
  • Active and Passive scanners
  • Fuzzing
  • .. and much more

Project Samples

Project Activity

See All Activity >



Follow OWASP Zed Attack Proxy

OWASP Zed Attack Proxy Web Site

Other Useful Business Software

ManageEngine now lets you patch computers from cloud ManageEngine now lets you patch computers from cloud Icon
ManageEngine now lets you patch computers from cloud Icon

ManageEngine Patch Manager Plus offers patching capabilities on cloud - Patch all OS updates and 550 third party apps on-demand and stay secure!

Last year saw the hackers unleash their expertise in skills for a ransom - targeting those unpatched computers in data-critical institutions. Only if the computers were patched on time, billions of dollars could have been saved. ManageEngine’s Patch Manager Plus comes to your rescue, offering you an automated patching solution, now on cloud, for latest hotfixes of Windows updates and a wide range of third-party applications (over 550 of them).
Automate patching with Patch Manager Plus, sit back & relax!
Patch On Cloud Now

Rate This Project

Login To Rate This Project

User Reviews

Be the first to post a review of OWASP Zed Attack Proxy!

Additional Project Details

Intended Audience

Developers, Quality Engineers, Testers, Security Professionals, Security

User Interface

Java Swing

Programming Language