Zed Attack Proxy

Official announcements (low vol) for ZAP by @Checkmarx - the worlds most popular web app scanner. Free and open source.

[Zed Attack Proxy @zaproxy]

Want to learn more about ZAP? The latest tutorial videos are all linked off https://t.co/MuWkX4eFaz - we're adding to them all of the time.

[Zed Attack Proxy @zaproxy]

ZAP now has a dedicated OWASP PTK active scan rule, so you can run the PTK rules in the ZAP active scanner.
Check out the dramatic improvement in the scores vs Google Firing Range!
https://t.co/SnLgunsLHI
#zaproxy #owaspptk #appsec

[Zed Attack Proxy @zaproxy]

In May ZAP learned to scan MCP servers as a first-class target, OWASP PTK automation reached Phase 1, and the Params extension moved out of the core into its own add-on.
https://t.co/E8yfH9maTs
#zaproxy #appsec

[Zed Attack Proxy @zaproxy]

ZAP can now scan MCP Servers, in the Desktop, Automation Framework and in a new GitHub Action.
Read all about it on the blog:
https://t.co/jycIBcnVB7
#zaproxy #appsec #mcp

[Zed Attack Proxy @zaproxy]

ZAP April report https://t.co/Zmmj1s0zTW
Nearly 10 Million runs, and over 15,000 GitHub stars!
#zaproxy #appsec

[Zed Attack Proxy @zaproxy]

Blog: Automating OWASP PTK with ZAP (Phase 1)
You can now automate @OWASP @pentestkit using ZAP
https://t.co/hbjQcCqpIa
#zaproxy #owasp #appsec

[Zed Attack Proxy @zaproxy]

Shout out to https://t.co/w2VmWRNRHB for being the 15,000th person to star ⭐️ the @zaproxy core repo on Friday the 17th 🎉

#GitHub #Achievement

[Zed Attack Proxy @zaproxy]

Blog: Vibe coding security fixes.
https://t.co/KUyYuws1RR
Learn how ZAP can help you make your vibe coded projects more secure.
#zaproxy #vibecoding #appsec

[Zed Attack Proxy @zaproxy]

Guest Blog: https://t.co/pMF8vPjAg2
Learn how to integrate ZAP with KRO in a Kubernetes cluster to scan the security of each new deployment.
℅ Trevor Mountney
#zaproxy #kubernetes #appsec

[Zed Attack Proxy @zaproxy]

Blog: ZAP Updates for March:
https://t.co/RS700RekpN
ZAP was started 9.5 MILLION times .. and we announced significant collaborations with other open source projects
Cc @javamuffinztx @seqradev @pentestkit
#zaproxy #appsec

[Zed Attack Proxy @zaproxy]

Introducing the ZAP MCP Server https://t.co/eGSijFkqw0
#zaproxy #mcp #ai #appsec

[Zed Attack Proxy @zaproxy]

We are delighted to announce that Denis Podgurskii @pentestkit is now officially part of the ZAP Extended Team: https://t.co/TMkZblXsVG

[Zed Attack Proxy @zaproxy]

This is huge!
https://t.co/NJhXgltA5D
OWASP PTK massively increases ZAP’s browser side testing capabilities .. and automation is up next!
Many thanks to @pentestkit for this great integration.
#zaproxy #owasp #appsec

[Zed Attack Proxy @zaproxy]

New ZAP Blog Post: https://t.co/17KJiIoR1S
This post describes an approach that uses static analysis findings to guide ZAP’s active scans toward the most relevant endpoints. The result is a faster scanning mode suited for CI/CD pipelines.
Thanks to @seqradev !
#zaproxy #appsec

[Zed Attack Proxy @zaproxy]

New ZAP Blog Post: Introducing DeepViolet: The Engine Behind ZAP’s New TLS Analysis
https://t.co/4wFUmAKBbl
Thanks to @javamuffinztx

[Zed Attack Proxy @zaproxy]

New ZAP Blog Post: Introducing DeepViolet: The Engine Behind ZAP’s New TLS Analysis
https://t.co/4wFUmAKBbl
Thanks to @javamuffinztx

[Zed Attack Proxy @zaproxy]

New blog post: ZAP Updates - February 2026
https://t.co/iueQtJTChu
#zaproxy #appsec

[Zed Attack Proxy @zaproxy]

Do you need even more control over the browsers that you can launch from ZAP?
You’ve got it!
https://t.co/hDu4HzoADB
#zaproxy #appsec

[Zed Attack Proxy @zaproxy]

Do you need even more control over the browsers that you can launch from ZAP?
You’ve got it!
https://t.co/hDu4HzoADB
#zaproxy #appsec

[Zed Attack Proxy @zaproxy]

Combine the Encode/Decode/Hash add-on with CyberChef operations in ZAP Encode/Decode Scripts for flexible encoding, decoding, and hashing in your testing workflow.
https://t.co/rWE63GTDtw
#zaproxy #appsec #cyberchef

[Zed Attack Proxy @zaproxy]

Released add-ons today:

GraphQL ➡️ Fixes the optional integration with the Tech Detection add-on which had been failing.

OpenAPI ➡️ Re-enables Swagger Secret Detector Script Scan Rule, the JS Engine memory leak has been addressed.

#AppSec #DevSecOps #WebAppSec #BugBountyTips