Zed Attack Proxy

Official announcements (low vol) for ZAP by @Checkmarx - the worlds most popular web app scanner. Free and open source.

[Zed Attack Proxy @zaproxy]

Want to learn more about ZAP? The latest tutorial videos are all linked off https://t.co/MuWkX4eFaz - we're adding to them all of the time.

[Zed Attack Proxy @zaproxy]

In May ZAP learned to scan MCP servers as a first-class target, OWASP PTK automation reached Phase 1, and the Params extension moved out of the core into its own add-on.
https://t.co/E8yfH9maTs
#zaproxy #appsec

[Zed Attack Proxy @zaproxy]

ZAP can now scan MCP Servers, in the Desktop, Automation Framework and in a new GitHub Action.
Read all about it on the blog:
https://t.co/jycIBcnVB7
#zaproxy #appsec #mcp

[Zed Attack Proxy @zaproxy]

ZAP April report https://t.co/Zmmj1s0zTW
Nearly 10 Million runs, and over 15,000 GitHub stars!
#zaproxy #appsec

[Zed Attack Proxy @zaproxy]

Blog: Automating OWASP PTK with ZAP (Phase 1)
You can now automate @OWASP @pentestkit using ZAP
https://t.co/hbjQcCqpIa
#zaproxy #owasp #appsec

[Zed Attack Proxy @zaproxy]

Shout out to https://t.co/w2VmWRNRHB for being the 15,000th person to star ⭐️ the @zaproxy core repo on Friday the 17th 🎉

#GitHub #Achievement

[Zed Attack Proxy @zaproxy]

Blog: Vibe coding security fixes.
https://t.co/KUyYuws1RR
Learn how ZAP can help you make your vibe coded projects more secure.
#zaproxy #vibecoding #appsec

[Zed Attack Proxy @zaproxy]

Guest Blog: https://t.co/pMF8vPjAg2
Learn how to integrate ZAP with KRO in a Kubernetes cluster to scan the security of each new deployment.
℅ Trevor Mountney
#zaproxy #kubernetes #appsec

[Zed Attack Proxy @zaproxy]

Blog: ZAP Updates for March:
https://t.co/RS700RekpN
ZAP was started 9.5 MILLION times .. and we announced significant collaborations with other open source projects
Cc @javamuffinztx @seqradev @pentestkit
#zaproxy #appsec

[Zed Attack Proxy @zaproxy]

Introducing the ZAP MCP Server https://t.co/eGSijFkqw0
#zaproxy #mcp #ai #appsec

[Zed Attack Proxy @zaproxy]

We are delighted to announce that Denis Podgurskii @pentestkit is now officially part of the ZAP Extended Team: https://t.co/TMkZblXsVG

[Zed Attack Proxy @zaproxy]

This is huge!
https://t.co/NJhXgltA5D
OWASP PTK massively increases ZAP’s browser side testing capabilities .. and automation is up next!
Many thanks to @pentestkit for this great integration.
#zaproxy #owasp #appsec

[Zed Attack Proxy @zaproxy]

New ZAP Blog Post: https://t.co/17KJiIoR1S
This post describes an approach that uses static analysis findings to guide ZAP’s active scans toward the most relevant endpoints. The result is a faster scanning mode suited for CI/CD pipelines.
Thanks to @seqradev !
#zaproxy #appsec

[Zed Attack Proxy @zaproxy]

New ZAP Blog Post: Introducing DeepViolet: The Engine Behind ZAP’s New TLS Analysis
https://t.co/4wFUmAKBbl
Thanks to @javamuffinztx

[Zed Attack Proxy @zaproxy]

New ZAP Blog Post: Introducing DeepViolet: The Engine Behind ZAP’s New TLS Analysis
https://t.co/4wFUmAKBbl
Thanks to @javamuffinztx

[Zed Attack Proxy @zaproxy]

New blog post: ZAP Updates - February 2026
https://t.co/iueQtJTChu
#zaproxy #appsec

[Zed Attack Proxy @zaproxy]

Do you need even more control over the browsers that you can launch from ZAP?
You’ve got it!
https://t.co/hDu4HzoADB
#zaproxy #appsec

[Zed Attack Proxy @zaproxy]

Do you need even more control over the browsers that you can launch from ZAP?
You’ve got it!
https://t.co/hDu4HzoADB
#zaproxy #appsec

[Zed Attack Proxy @zaproxy]

Combine the Encode/Decode/Hash add-on with CyberChef operations in ZAP Encode/Decode Scripts for flexible encoding, decoding, and hashing in your testing workflow.
https://t.co/rWE63GTDtw
#zaproxy #appsec #cyberchef

[Zed Attack Proxy @zaproxy]

Released add-ons today:

GraphQL ➡️ Fixes the optional integration with the Tech Detection add-on which had been failing.

OpenAPI ➡️ Re-enables Swagger Secret Detector Script Scan Rule, the JS Engine memory leak has been addressed.

#AppSec #DevSecOps #WebAppSec #BugBountyTips

[Zed Attack Proxy @zaproxy]

New Blog Post: Detecting Circular Type References in GraphQL Schemas
https://t.co/hPrzjSxPrV
#zaproxy #appsec #graphql