What is ZAP?
ZAP assesses web application security in authorised testing workflows.
Who is ZAP for?
Teams evaluating security testing & exposure management that need web application scanning. Confirm the intended workflow, deployment and required access before selecting a package.
ZAP features
The core capabilities to consider for your workflow.
- Web application scanning
- Intercepting proxy
- Security test automation
ZAP pricing
Open-source software
Review the software licence and distribution, then scope deployment, infrastructure, maintenance and support. A commercial hosted service or support arrangement may be priced separately.
Calculate the cost of your quote →Free access & evaluation
An open-source software edition is available. Check its licence and distribution; hosting, administration, support and separately licensed extensions can still cost money.
Before you choose ZAP
Which authorised applications, infrastructure, code or cloud resources need assessment?
Who approves testing, access, data handling, remediation and the licensed assessment scope?
Explore related software
ZAP FAQs
Does ZAP have a free plan?
An open-source software edition is available. Check its licence and distribution; hosting, administration, support and separately licensed extensions can still cost money.
Who is ZAP for?
Teams evaluating security testing & exposure management that need web application scanning. Confirm the intended workflow, deployment and required access before selecting a package.
What should I compare before buying?
Check the tier that contains your essential features, confirm plan limits and compare the total quote with your own expected usage.


