The CheckOps Engineer
OWASP ZAP
The ZAP by Checkmarx Core project.
Latest public signals
Page copy revised 25 Oct 2026 from public sources. Refresh checks the live site and, when this entry has a GitHub repository, the latest release.
Introduction
The Zed Attack Proxy (ZAP) by Checkmarx is the world’s most widely used web app scanner. Free and open source. A community based GitHub Top 1000 project that anyone can contribute to.
The latest GitHub release listed on 25 Oct 2026 was v2.17.0, published 2025-12-15.
Features
The pages fetched on 25 Oct 2026 did not include a feature list. The public description was: “The ZAP by Checkmarx Core project.”
Pros
Points stated in the public sources fetched on 25 Oct 2026:
- Published license: The GitHub repository lists Apache License 2.0 (Apache-2.0).
- Repository topics: The repository’s GitHub topics include appsec, dast, hacktoberfest, opensource, security, security-scanner, zap, zap-development.
Cons
The pages fetched on 25 Oct 2026 do not publish a limitations list. That absence is not evidence that the tool has no drawbacks. Current issues are tracked at https://github.com/zaproxy/zaproxy/issues.
Usage and Links (Example)
The fetched README did not include a fenced code example. Use the official documentation linked below.
Resources:
Pricing
The repository lists Apache License 2.0 (Apache-2.0). No public price was found on the pages fetched on 25 Oct 2026. This rewrite does not guess a number. Check the official website before treating the tool as free or paid.
Recommended for?
The fetched pages do not name a target audience. Decide fit from the official description and the feature list above.
Conclusion
OWASP ZAP is summarized by its public description as: “The ZAP by Checkmarx Core project.”.
The latest GitHub release listed was v2.17.0, published 2025-12-15.
This page was rebuilt on 25 Oct 2026 from www.zaproxy.org, github.com. It keeps only what those pages stated. Confirm the current product, license, and price on the official site before you adopt it.