Ravi Sir's Cyber Security Cards › Revision Cards
OWASP ZAP: A Free Full Scanner
OWASP ZAP: A Free Full Scanner OWASP ZAP (Zed Attack Proxy) is a free tool like Burp, with a built-in automatic scanner. Good for a quick first pass on your own staging app after each change. Teams can run ZAP automatically and fail the build on new High alerts, just like a failed test.
Read card text
What this card says
What it is
OWASP ZAP (Zed Attack Proxy) is a free tool like Burp, with a built-in automatic scanner.
How it works
Good for a quick first pass on your own staging app after each change.
Why it matters for security
Teams can run ZAP automatically and fail the build on new High alerts, just like a failed test.
Learn more in the lesson: 21.4 OWASP ZAP: A Free Full Scanner