This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
OWASP Zed Attack Proxy Project
The Zed Attack Proxy (ZAP) is an easy to use integrated penetration testing tool for finding vulnerabilities in web applications.
It is designed to be used by people with a wide range of security experience and as such is ideal for developers and functional testers who are new to penetration testing.
ZAP provides automated scanners as well as a set of tools that allow you to find security vulnerabilities manually.
And you can now buy ZAP related gear in the, er, ZAP Gear Store!
ZAP 2.0.0 is now available via the above link!
For more details about 2.0.0 see the OWASP Blog post
You can also get cross platform weekly releases which include all of the latest changes.
For a quick overview of ZAP see this tutorial video on YouTube:
For more videos see the links on the wiki videos page.
Want a very quick introduction? See the project pamphlet.
For a slightly longer introduction see the project presentation.
For more details about ZAP, including the full user guide, see the wiki.
<paypal>Zed Attack Proxy</paypal>
