Zerox Innovation
zeroxinnovation.comLet's Talk
Tech FAQTenableOWASPMASVSAzureKuberneteszeroxinnovation.comLet's Talk
OWASP FAQ, question 9 of 15

What is OWASP ZAP?

Zed Attack Proxy — a free dynamic application security testing (DAST) tool used to find vulnerabilities in web apps during testing.

Answered by Zerox Innovation. Last reviewed .

All OWASP answers Ask our team

More on OWASP

  1. 01What is OWASP?
  2. 02What does OWASP actually provide?
  3. 03What is the OWASP Top 10?
  4. 04Is OWASP a company or a certification body?
  5. 05What other projects does OWASP run besides the Top 10?
  6. 06Who is OWASP for?
  7. 07How is OWASP funded?
  8. 08What is ASVS?
  9. 10How should teams use the OWASP Top 10?
  10. 11Does OWASP cover APIs?
  11. 12Is OWASP content free to use commercially?
  12. 13How often is the Top 10 updated?
  13. 14Can OWASP replace a commercial scanner?
  14. 15Does Zerox Innovation use OWASP standards?

Content is drafted from OWASP's own public documentation for review purposes and will be verified before publication.

Need more than an answer?

Zerox Innovation helps teams choose, deploy and run the platforms covered here, from a first Nessus scan to a hardened Kubernetes cluster.

Talk to an Expert Explore Our Services