Zed Attack Proxy (ZAP): documented test classes, licence and hosting

Zed Attack Proxy (ZAP) documentation names one test class used on this site: security tests. Licence: open-source. Hosting: self-hosted.

verified 2026-10-21 · Catalogue maintained by the publisher (to be confirmed)

Facts with sources

Name
Zed Attack Proxy (ZAP)
Website
https://www.zaproxy.org
Documentation
https://www.zaproxy.org/getting-started/
Vendor or maintainer
Checkmarxsource verified 2026-10-21
Licence
open-sourcesource verified 2026-10-21
Hosting
self-hostedsource verified 2026-10-21
Test languages
YAMLsource verified 2026-10-21
CI integrations named in docs
GitHub Actionssource verified 2026-10-21
Platforms
web, apisource verified 2026-10-21
Test classes documented
Published price
not published
First release
not published
Latest dated release
2025-12-15 (v2.17.0)source verified 2026-10-21
Verified on
2026-10-21

Only on this page

The combination licence open-source, hosting self-hosted and test classes security is shared with 5 other tool pages.

Fact comparisons

Questions

What is Zed Attack Proxy (ZAP)?

Zed Attack Proxy (ZAP), maintained by Checkmarx, documents security tests. Licence: open-source.

Which test classes does the Zed Attack Proxy (ZAP) documentation name?

security tests, each linked to the documentation page with its verification date.

Is Zed Attack Proxy (ZAP) free?

Licence: open-source. Published price: not published.

Is Zed Attack Proxy (ZAP) open source or commercial?

The catalogue records the licence as open-source, from the source linked on this page.

Can Zed Attack Proxy (ZAP) test APIs?

Yes. Documented platforms: web, api; test classes: security.

Is Zed Attack Proxy (ZAP) self-hosted or offered as a service?

Hosting recorded from its documentation: self-hosted.

Facts link to Zed Attack Proxy (ZAP) pages on the verification date. Back to the tools catalogue