OWASP Zed Attack Proxy 2.13

Detect and fix security vulnerabilities in web applications during development. Automatically identify and point out the beaches in protective grids, ways to bypass restrictions and blocks, etc. Read comprehensive status reports and apply relevant tools.

OWASP Zed Attack Proxy (ZAP) can find security vulnerabilities in your web applications while you are developing and testing. It is ideal for developers and functional testers who are new to penetration testing. It contains automated scanners as well as a set of tools that allow you to find security vulnerabilities manually.