Skip to content
aptorise
Build My Setup

Try “PDF editor”, “bootable USB” or “software for students”. Press Esc to close.

ZAP icon

ZAP

An open-source web application security scanner.

Open SourceWindowsmacOSLinux
Visit Official Website

Official source: zaproxy.orgLast verified: awaiting review · How we check softwareDeveloper: ZAP project

What is ZAP?

ZAP (formerly OWASP ZAP) sits between your browser and a web application to find security issues, with both automated scanning and manual testing tools. Use it only on applications you're authorised to test.

Who should use ZAP?

Supported platforms

PlatformHow to get it
Windows
macOS
Linux

Pricing & licence

Open Source Open Source

Open source: the source code is public, so anyone can inspect it, and it's free to use.

Prices change, so check zaproxy.org for current pricing.

Installation

Windows

Windows · Winget
PS> winget install --id ZAP.ZAP --exact --source winget

Install ZAP with the rest of your Windows setup

macOS

Mac · Homebrew
$ brew install --cask zap

Install ZAP with the rest of your macOS setup

Linux

Linux · Flatpak (any distribution)
$ flatpak install flathub org.zaproxy.ZAP

Install ZAP with the rest of your Linux setup

Package names were checked against each official package registry, and commands install the same software as the official download. Only run commands you understand.

Alternatives to ZAP

No alternatives listed yet.

Related guides

How to set up a cybersecurity home lab

Build a safe, isolated practice lab with free tools: virtual machines, an analysis machine, a deliberately vulnerable target and packet capture.

8 min read

2FAS Auth iconAegis Authenticator iconBitwarden icon

Set up a new phone securely

Protect your accounts from the first day on a new phone.

5 min read

Related software

Wireshark icon

Wireshark

Networking

Network protocol analyser for capturing and inspecting traffic.

Open Source

Available for Windows, macOS, Linux

View details

ZAP FAQ

Is ZAP free?

ZAP is open source.

Which platforms does ZAP support?

ZAP is available for Windows, macOS and Linux. It isn't available for Android and iPhone & iPad.

Can I install ZAP with Winget?

Yes. Run "winget install --id ZAP.ZAP --exact --source winget" in PowerShell or Windows Terminal. The package ID was checked against Microsoft's official Winget repository.

Can I install ZAP with Homebrew?

Yes. Run "brew install --cask zap" in Terminal.

Where can I download ZAP safely?

From the official website, zaproxy.org. Aptorise links only to official sources and never hosts installers.