psiinon
Re:Developing Zap in the LLM Age
on Tuesday October 13, 2026 @10:56AM (#50072741)
LLMs have changed how software is developed - here's how how we’re handling that change in the ZAP project.
Vibe Coding Security Fixes
Re:OWASP Vulnerable Web Applications Directory
on Friday March 13, 2026 @11:36AM (#47365885)
A comprehensive registry of known vulnerable web and mobile applications for legal security testing and training.
OWASP Vulnerable Web Applications Directory
Is My App Security Testable?
Should ZAP switch to a non-OSI licence?
ZAP is joining the Software Security Project (and leaving OWASP)
Re:OWASP Needs to Evolve
on Monday February 13, 2023 @05:03AM (#34771851)
A group of OWASP leaders and contributors believe it needs to evolve. Now.
OWASP Needs to Evolve
Has OWASP ZAP helped you? Now you can help OWASP ZAP
The ZAPCon 2022 schedule is now live
A list of open source web security scanners
Do No Evil – An OSS Pledge
Collecting Statistics for Open Source Projects
Re:Open Source Security Foundation
on Saturday March 27, 2021 @11:30AM (#26602992)
Have you tried using OWASP ZAP? We're focusing on automation and feedback gratefully received. I'm also on the OpenSSF Security Tools Working Group and making security tools easier to use is definitely one of our priorities
Re:Hetty: An HTTP toolkit for security research
on Friday October 02, 2020 @05:45PM (#24667331)
There's been an open source option for 10 years - ZAP :)
Re:Target=“_blank” – the most underestimated vulnerability ever
on Monday December 23, 2019 @06:09PM (#21868320)
It's called Reverse Tabnabbing on OWASP: https://www.owasp.org/index.php/Reverse_Tabnabbing - lots more details there.
Its detected by the ZAP beta passive scan rules: https://github.com/zaproxy/zap-extensions/wiki/HelpAddonsPsc...
Re:Hacking with the OWASP ZAP HUD
on Wednesday December 05, 2018 @07:08AM (#18607546)
Thanks :) Let me know what you think of it - feedback very much appreciated!
Hacking with the OWASP ZAP HUD
Re:Setting a Baseline for Web Security Controls at Mozilla
on Wednesday January 25, 2017 @03:15PM (#13485562)
Well, burp suite is a bit like some parts of ZAP :)
Theres an overlap, but ZAP is completely free and open source. It was originally a fork of Paros (now much extended) which actually predates burp.