Windows · Security & Antivirus

Zed Attack Proxy (ZAP)

Name: Zed Attack Proxy (ZAP)
Author: Checkmarx

The Zed Attack Proxy (ZAP) is an easy to use integrated penetration testing tool for finding vulnerabilities in web applications.

Version 2.17.0.20251217 · by Checkmarx

Download

Official site: zaproxy.org

About Zed Attack Proxy (ZAP)

# Zed Attack Proxy (ZAP)

The Zed Attack Proxy (ZAP) is one of the world’s most popular free security tools and is actively maintained by hundreds of international volunteers. It can help you automatically find security vulnerabilities in your web applications while you are developing and testing your applications. Its also a great tool for experienced pentesters to use for manual security testing.

## Features

Some of ZAP's functionality:

* Intercepting Proxy

* Traditional and AJAX spiders

* Automated scanner

* Passive scanner

* Forced browsing

* Fuzzer

* Dynamic SSL certificates

* Smartcard and Client Digital Certificates support

* Web sockets support

* Support for a wide range of scripting languages

* Plug-n-Hack support

* Authentication and session support

* Powerful REST based API

* Automatic updating option

* Integrated and growing marketplace of add-ons

## Package Note

How to install Zed Attack Proxy (ZAP)

Click Download — the developer's official website opens in a new tab.
Download the latest version there and run it. Choose Custom/Advanced where offered, and skip any bundled extras.
Prefer the command line? With Chocolatey you can install and update it with: choco install zed-attack-proxy-zap
Open Zed Attack Proxy (ZAP) once it finishes installing.

How to check the SHA-256 hash of a download

Frequently asked questions

Is Zed Attack Proxy (ZAP) free to download?

Yes. The Download button sends you to zaproxy.org, the developer's official site, where Zed Attack Proxy (ZAP) is available to download. Grabware doesn't host or modify any files.

What is the latest version of Zed Attack Proxy (ZAP)?

The version listed here is 2.17.0.20251217, published /Date(1766. The developer's site always has the newest release.

How do I install Zed Attack Proxy (ZAP) from the command line?

With Chocolatey, run: choco install zed-attack-proxy-zap. This installs it from the official source and keeps it updated.

Is Zed Attack Proxy (ZAP) safe?

Zed Attack Proxy (ZAP) downloads directly from the developer. As always, scan the installer with your antivirus and choose Custom setup to skip any bundled extras.