SaaSHub helps you find the best software and product alternatives Learn more →
ZAP Alternatives
Similar projects and alternatives to ZAP
-
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
-
-
ArchiveBox
🗃 Open source self-hosted web archiving. Takes URLs/browser history/bookmarks/Pocket/Pinboard/etc., saves HTML, JS, PDFs, media, and more...
-
mitmproxy
An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.
-
-
-
semgrep
Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
-
john
John the Ripper jumbo - advanced offline password cracker, which supports hundreds of hash and cipher types, and runs on many operating systems, CPUs, GPUs, and even some FPGAs
-
-
lynis
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
-
-
Proxyman
The best-in-class HTTP Debugger for macOS. Capture HTTP/HTTPS from macOS, iOS, Android with a few clicks ✅
-
-
nuclei
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
-
prowler
Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.
-
-
-
-
-
PHP IDS
PHPIDS (PHP-Intrusion Detection System) is a simple to use, well structured, fast and state-of-the-art security layer for your PHP based web application
NOTE:
The number of mentions on this list indicates mentions on common posts plus user suggested alternatives.
Hence, a higher number means a better ZAP alternative or higher similarity.
ZAP discussion
ZAP reviews and mentions
Posts with mentions or reviews of ZAP.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2026-06-27.
-
Best DevSecOps Security Tools for CI/CD Pipeline Protection
Representative tools: OWASP ZAP is the open-source standard. Its baseline scan runs cleanly as a Docker container in a CI job — point it at your staging URL and it produces a report you can fail the pipeline on.
-
I built an open-source CLI that scores any site for AI-agent readiness (0-100)
It does not check for vulnerabilities — use OWASP ZAP for that.
-
middleBrick VS ZAP - a user suggested alternative
2 projects | 8 Apr 2026
ZAP is a general-purpose web app security scanner. middleBrick focuses specifically on API security and AI/LLM endpoint testing with automated risk scoring.
- Charles Proxy
-
Building a DevSecOps Pipeline on AWS: From Security Audit to Daily Deployments
# buildspec-dast.yml version: 0.2 phases: pre_build: commands: - echo Installing DAST tools... - | # Install OWASP ZAP wget https://github.com/zaproxy/zaproxy/releases/download/v2.12.0/ZAP_2.12.0_Linux.tar.gz tar -xzf ZAP_2.12.0_Linux.tar.gz build: commands: - echo Starting application for DAST... - | # Start application (example) docker-compose up -d payment-app sleep 30 # Wait for app to be ready - | # Run OWASP ZAP baseline scan ./ZAP_2.12.0/zap-baseline.py \ -t http://localhost:8080 \ -J zap-report.json - | # Run OWASP ZAP full scan (more thorough) ./ZAP_2.12.0/zap-full-scan.py \ -t http://localhost:8080 \ -J zap-full-report.json \ -I # Ignore warnings post_build: commands: - echo Processing DAST results... - | # Convert and upload to Security Hub python process-dast-results.py zap-report.json - | # Fail if critical vulnerabilities found python check-dast-results.py zap-report.json
-
Troubleshooting Broken Object Level Authorization
Use tools like OWASP ZAP or Burp Suite for automated testing.
-
Troubleshooting Broken Function Level Authorization
How to fix it? Use tools like Postman and OWASP ZAP to test APIs, enforce server-side authorization, and adopt least privilege access.
-
The Ultimate Guide to the OWASP API Security Cheat Sheet
Run API security scanners like OWASP ZAP as part of your build and testing process.
-
Menggunakan OWASP ZAP di Docker untuk DevSecOps Workflow
ZAP GitHub Repo
-
Security - Solving the "Content Security Policy (CSP) Header Not Set" in Next.js
Zed Attack Proxy (ZAP)
-
A note from our sponsor - SaaSHub
www.saashub.com | 12 Jul 2026
Stats
Basic ZAP repo stats
81
15,398
9.5
4 days ago
zaproxy/zaproxy is an open source project licensed under Apache License 2.0 which is an OSI approved license.
ZAP is marked as "self-hosted". This means that it can be used as a standalone application on its own.
The primary programming language of ZAP is Java.
Sponsored
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com