@zaproxy

Official announcements (low vol) for ZAP by @Checkmarx - the worlds most popular web app scanner. Free and open source. https://xitter.cf/t.co/pxO8zZ6usH

zaproxy.org
Joined June 2011
  • Tweets982
  • Following5
  • Followers15.3K
71Media
Zed Attack Proxy retweeted
Zed Attack Proxy@zaproxyJul 6
Big announcement! We now recommend that you use the Client Spider for crawling modern web apps, instead of the AJAX Spider. More details in the blog post: zaproxy.org/blog/2026-07-06-… #zaproxy #appsec

Use the Client Spider for Modern Web Apps

We now recommend the Client Spider over the AJAX Spider for crawling modern web applications. It finds more endpoints, scales much better vs large apps, and unlocks PTK’s passive coverage for free.

zaproxy.org
4
10
848
Zed Attack Proxy retweeted
Zed Attack Proxy@zaproxyMar 19
New ZAP Blog Post: Introducing DeepViolet: The Engine Behind ZAP’s New TLS Analysis zaproxy.org/blog/2026-03-19-… Thanks to @javamuffinztx

Introducing DeepViolet

Introducing DeepViolet: The Engine Behind ZAP’s New TLS Analysis

zaproxy.org
11
20
1,636
Zed Attack Proxy retweeted
Zed Attack Proxy@zaproxyFeb 25
Do you need even more control over the browsers that you can launch from ZAP? You’ve got it! zaproxy.org/blog/2026-02-24-… #zaproxy #appsec

Custom Browsers and Preferences

You can now add custom browsers to ZAP and manage any browser preferences.

zaproxy.org
2
5
686
Zed Attack Proxy retweeted
Simon Bennetts ⚡🇺🇦@psiinonFeb 2
We have made a good start on #AI integration in @zaproxy We know some of you will be very anti-AI, so this will be optional and opt-in. We have lots of plans, but feedback also appreciated - what integrations would you really like to see .. or not see?
1
4
13
814
Zed Attack Proxy retweeted
pentestkit@pentestkitJan 23
Reposting this write-up - if you try the add-on, break it (politely) and tell me what you’d like to see next. Bugs, issues, and reviews genuinely help. cybersecuritynews.com/zap-ow…

ZAP Releases OWASP PenTest Kit Browser Extension for Application Security Testing

The Zed Attack Proxy (ZAP) team has released the OWASP PTK add-on, version 0.2.0 alpha, integrating the OWASP Penetration Testing Kit (PTK) browser extension directly into ZAP-launched browsers.

cybersecuritynews.com
4
11
718
Zed Attack Proxy retweeted
Zed Attack Proxy@zaproxy18 Nov 2025
The ZAP services may well be unavailable due to the ongoing Cloudflare problems. See cloudflarestatus.com/ for more information.

Cloudflare Status

Real-time status and incident history for Cloudflare services, network locations, and scheduled maintenance.

cloudflarestatus.com
3
7
948
What active scan policies would you like us to maintain for @zaproxy ? Let me know here, or on this User Group thread: groups.google.com/g/zaproxy-…
3
6
1
9
1,504
Zed Attack Proxy retweeted
Checkmarx
@Checkmarx24 Sep 2024
Great news for our customers and the AppSec community. Checkmarx is joining forces with the hugely popular and open source @zaproxy (ZAP), the most widely used DAST tool in the world. Click here for more info> bit.ly/3MWDypp
1
5
11
973
Zed Attack Proxy retweeted
Akshath Kothari@ricekot_19 Sep 2024
Good news for @ZAProxy users with multi-monitor setups: The latest weekly version of ZAP supports detachable tabs! Try it out and share your feedback on the ZAP user group. groups.google.com/g/zaproxy-…
3
12
35
1,999
Zed Attack Proxy retweeted
Crash Override@crashappsec24 Apr 2024
Hey @zaproxy - got some swag on its way to you so you can send it to your top code contributors and people buying support contracts!
2
3
1
12
2,309
It is interesting that none of the bigger companies that sell services based on @zaproxy have got in touch with us re supporting the project. Companies like @Checkmarx, @traceableai, @GitLab, @StackHawk .. This does make it much more likely that we will GPL ZAP...
5
12
1
39
7,119
Would your company be prepared to pay for a (reasonably priced) @zaproxy support contract? I'm trying to work out how we can fund ZAP ongoing development .. and its hard🙁 We have short term funding, but it won't last, so we need something more permanent or ZAP may fail...
37%No chance :(
31%Slight chance :/
21%Good chance :)
11%Definitely! :D
150 votes • Final results
6
16
2
19
7,128
Zed Attack Proxy retweeted
Bash Bunny
@_BashBunny_22 Nov 2023
I'm testing the new functionality of @zaproxy ZAPit, and I love it. Pretty useful to have a quick overview of the webpage in general. Also you can discover some vulnerabilities really quick. I love the suspicious comments:
5
13
1,544
Zap Proxy asked if i found their tutorial helpful that i would Tweet it out and i found it extremely useful. I would like to reciprocate with a big thanks. I've just completed the @owasp @zaproxy HUD tutorial github.com/zaproxy/zap-hud
2
10
807
Zed Attack Proxy retweeted
Zed Attack Proxy@zaproxy25 Sep 2023
A big thank you to our latest Bronze Level Supporter zaproxy.org/supporters/#bron… @tecvity
1
3
10
1,178
Would you like us to produce SBOMs for @zaproxy and its add-ons?
29%Yes - I really want SBOMs
27%Maybe - could be useful
14%No - I dont need them
30%Just show me the results
63 votes • Final results
2
2
3
1,681
We're planning on removing zapcli from the @zaproxy docker images. Any objections? If so why?
1
5
7
How much pain would it cause you if the next version of @zaproxy required a min of java 11? If "Too much" reply saying why...
7%Too much!
7%A bit
71%None at all
15%I don't use ZAP
150 votes • Final results
5
2
2
8
Pentesters who use @zaproxy - which non standard ZAP add-ons do you rely on? Ie ones we don't include by default in ZAP so you have to install them.
5
13
If you use @zaproxy then how much pain would it cause you if the next version required Java 11+ ?
69%No pain
8%Small pain
8%Medium pain
15%Maximum pain
114 votes • Final results
1
4
2
5
Load more