ZAP

Web application security scanner

zaproxy
 
Open source

Third-party software from public repositories. bestappfor.me does not host it, does not verify it and is not responsible for its use. Download only from the official source and check the license. Terms and disclaimer

Stars
15.9K
GitHub
Health
Fair
8 of 11 checks passed
License
Apache-2.0
Open source
Version
2.17.0
10 months ago
Category
Privacy & security
App
Language
Java

About

ZAP helps you find security weaknesses in a web application while you build and test it. You can run automatic scans to spot vulnerabilities, or use it by hand to probe a site step by step.

It works as a proxy between your browser and the application, which lets it observe and test the traffic. It is free and open source, written in Java, and open to community contributions. Beginners can use it during development, and experienced pentesters can rely on it for manual security testing.

Highlights

  • Automatic scans for web app vulnerabilities
  • Proxy for manual security testing
  • Free, open source and available on Flathub

Who it's for

Good for web developers and pentesters who want to check an app for security flaws before it goes live.

This description was written by our editors with automated assistance, not by the developer, and has not been reviewed yet.

Why it is here

  • Code changed 6 days ago

Official channels

Official channels only. We never host or repackage downloads.

Flathub
Linux
2.17.0
flatpak install flathub org.zaproxy.ZAP
winget
Windows
2.17.0
winget install --id ZAP.ZAP -e

Verified: installer URL on github.com/zaproxy/zaproxy

GitHub release
Linux, Windows, macOS
v2.17.0

You might also like

See all