# ZAP (software)

> Mediated Wiki article. Canonical URL: https://mediated.wiki/source/ZAP_(software)
> Markdown URL: https://mediated.wiki/source/ZAP_(software).md
> Source: https://en.wikipedia.org/wiki/ZAP_(software)
> Source revision: 1331406314
> License: Creative Commons Attribution-ShareAlike 4.0 International (https://creativecommons.org/licenses/by-sa/4.0/)

**ZAP** (**Zed Attack Proxy**) is a [dynamic application security testing](/source/Dynamic_application_security_testing) tool published under the [Apache License](/source/Apache_License). When used as a [proxy server](/source/Proxy_server) it allows the user to manipulate all of the traffic that passes through it, including [HTTPS](/source/HTTPS) encrypted traffic. It can also run in a [daemon](/source/Daemon_(computing)) mode, which is then controlled via a [REST](/source/Representational_state_transfer)-based [API](/source/Application_programming_interface).

## History

ZAP was originally forked from Paros which was developed by Chinotec Technologies Company.[2] Simon Bennetts, the project lead, stated in 2014 that only 20% of ZAP's source code was still from Paros.[3]

The first release was announced on [Bugtraq](/source/Bugtraq) in September 2010, and became an [OWASP](/source/OWASP) project a few months later.[4][5] In 2023, ZAP developers moved to the [Linux Foundation](/source/Linux_Foundation), where they became a part of the Software Security Project.[6][7][8] As of September 24, 2024, all of the main developers joined [Checkmarx](/source/Checkmarx) as employees, and ZAP was rebranded as ZAP by Checkmarx.[9]

ZAP was listed in the 2015 [InfoWorld](/source/InfoWorld) Bossie award for "The best open source networking and security software".[10]

## Features

Some of the built-in features include:

- An intercepting [proxy server](/source/Proxy_server),
- Traditional and [AJAX](/source/Ajax_(programming)) [Web crawlers](/source/Web_crawler)
- An automated scanner
- A passive scanner
- Forced browsing
- A [fuzzer](/source/Fuzzing)
- [WebSocket](/source/WebSocket) support
- [Scripting languages](/source/Scripting_language)
- Plug-n-Hack support

## See also

- [Web application security](/source/Web_application_security)
- [Burp suite](/source/Burp_suite)
- [W3af](/source/W3af)
- [Fiddler (software)](/source/Fiddler_(software))

## Further reading

- Soper, Ryan; N Torres, Nestor; Almoailu, Ahmed (10 March 2023). *Zed Attack Proxy Cookbook*. [Packt Publishing](/source/Packt_Publishing). ISBN 9781801810159.

## References

1. ["OWASP ZAP"](https://crowdin.com/project/owasp-zap). Crowdin.com. Retrieved 3 November 2014.

1. ["ZAP – Paros Proxy"](https://www.zaproxy.org/docs/desktop/paros/). *zaproxy.org*. Retrieved 2024-10-18.

1. Bennetts, Simon (2014). ["Security Testing for Developers Using OWASP ZAP"](https://www.youtube.com/watch?v=_MmDWenz-6U&t=23m30s). JavaOne San Francisco 2014. Oracle. pp. 23:30. Retrieved 2 June 2015.

1. Wylie, Phillip & Crawley, Kim (2021). *The pentester blueprint: starting a career as an ethical hacker*. 1 ed. Indianapolis: John Wiley and Sons. p. 75. ISBN 978-1-119-68430-5.

1. ["Bugtraq: The Zed Attack Proxy (ZAP) version 1.0.0"](https://seclists.org/bugtraq/2010/Sep/38). *[bugtraq](/source/Bugtraq)*. Retrieved 2024-10-18.

1. ["ZAP Core Team to move to Linux Foundation | OWASP Foundation"](https://owasp.org/blog/2023/08/02/zap-core-team-leaves-owasp)

1. ["ZAP is Joining the Software Security Project"](https://www.zaproxy.org/blog/2023-08-01-zap-is-joining-the-software-security-project/). August 1, 2023.

1. ["Welcoming ZAP to the Software Security Project"](https://softwaresecurityproject.org/blog/welcoming-zap-to-the-software-security-project/). July 31, 2023.

1. [https://www.zaproxy.org/blog/2024-09-24-zap-has-joined-forces-with-checkmarx/](https://www.zaproxy.org/blog/2024-09-24-zap-has-joined-forces-with-checkmarx/)

1. ["Bossie Awards 2015: The best open source networking and security software"](https://www.infoworld.com/article/2238317/bossie-awards-2015-the-best-open-source-networking-and-security-software.html). *InfoWorld*. Retrieved 2024-10-18.

## External links

- [Official website](https://www.zaproxy.org/)

---
Adapted from the Wikipedia article [ZAP (software)](https://en.wikipedia.org/wiki/ZAP_(software)) by Wikipedia contributors ([contributor history](https://en.wikipedia.org/wiki/ZAP_(software)?action=history)). Available under [Creative Commons Attribution-ShareAlike 4.0 International](https://creativecommons.org/licenses/by-sa/4.0/). Changes may have been made.