OWASP ZAP
OWASP ZAP scans web applications for vulnerabilities.
Our verdict
Who it's for
Open-source web application security scanner
Who should look elsewhere
Learning curve
Pros
- +Free security scanner
- +Good for web apps
- +Active community
- +CI/CD integration
- +Open source
Cons
- −Learning curve
- −False positives
- −Performance varies
- −UI dated
- −Configuration needed
Key features
- ✓Web security scanner
- ✓Penetration testing
- ✓Active scanning
- ✓API scanning
- ✓Open source
- ✓Automation
Pricing
| Plan | Price | Billing | Notes |
|---|---|---|---|
| Free | $0 | month | DAST; API scanning; CI/CD |