Fast vulnerability scanner powered by YAML templates
OWASP ZAP
Web application security scanner from OWASP
About OWASP ZAP
OWASP ZAP is a web application security scanner used by developers and testers to find vulnerabilities in running applications. It is typically installed on Linux servers or containers and administered through configuration files, a CLI, or a built-in web interface. That makes it a practical fit for homelab users, small teams, and organizations that value privacy, ownership, and predictable costs over time.
OWASP ZAP key facts
- Category: Developer Tools
- Pricing: Free — listed in this directory as a free tool, with no paid plan required to use it.
- Focus areas: security, scanner, web, owasp
- Official site: zaproxy.org
About the Developer Tools category
Editors, platforms, and services developers rely on to build and ship software. The Developer Tools category on Tools Hub currently lists 738 tools. Alongside OWASP ZAP, it includes Nuclei, Metasploit, BeEF, Social-Engineer Toolkit.
More in Developer Tools
Comparing tools in the Developer Tools category? These related listings are worth a look: Nuclei — Fast vulnerability scanner powered by YAML templates; Metasploit — Penetration testing framework used worldwide; BeEF — Browser exploitation framework for pentesters.
Penetration testing framework used worldwide
Browser exploitation framework for pentesters
Social engineering toolkit for penetration tests
Phishing simulation framework for awareness training
Automatic SQL injection detection and exploitation