Security Testing & Exposure Management

ZAP

Updated

Visit website
01 / Overview

What is ZAP?

ZAP assesses web application security in authorised testing workflows.

Who is ZAP for?

Teams evaluating security testing & exposure management that need web application scanning. Confirm the intended workflow, deployment and required access before selecting a package.

02 / Capabilities

ZAP features

The core capabilities to consider for your workflow.

  • Web application scanning
  • Intercepting proxy
  • Security test automation
03 / Plans & costs

ZAP pricing

Plan availability

Open-source software

Review the software licence and distribution, then scope deployment, infrastructure, maintenance and support. A commercial hosted service or support arrangement may be priced separately.

Calculate the cost of your quote →

Free access & evaluation

An open-source software edition is available. Check its licence and distribution; hosting, administration, support and separately licensed extensions can still cost money.

04 / Buying checklist

Before you choose ZAP

  • Which authorised applications, infrastructure, code or cloud resources need assessment?

  • Who approves testing, access, data handling, remediation and the licensed assessment scope?

05 / Related software

Explore related software

06 / Questions answered

ZAP FAQs

Does ZAP have a free plan?

An open-source software edition is available. Check its licence and distribution; hosting, administration, support and separately licensed extensions can still cost money.

Who is ZAP for?

Teams evaluating security testing & exposure management that need web application scanning. Confirm the intended workflow, deployment and required access before selecting a package.

What should I compare before buying?

Check the tier that contains your essential features, confirm plan limits and compare the total quote with your own expected usage.