The safeguards map / 2.1 Tester-run
ZAP (Zed Attack Proxy)
Drafted with AI
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made
A web application security scanner for finding vulnerabilities in applications during development and testing, run by hand or automated.
Where it sits
2.1 Tester-run (primary): Scans a running web application for security vulnerabilities and supports manual security testing by a person.
It's also a great tool for experienced pentesters to use for manual security testing.
captured
2.2 CI-integrated: Offers packaged scans for Docker and GitHub Actions and an automation framework for unattended runs.
GitHub Actions - the associated packaged scans available on the GitHub Marketplace
captured
Facts
- Concern
- security
- Names the law
- no
- Subject
- software
- Used by
- those who make it
- Runs
- by handin CI
- Tests
- the application or API
Handoffs
None recorded.
Listed, not drawn: no documented handoff and no foundation home places it on the map.
Collector's note
Its own site calls it an independent open-source project, so the home is none. No handoff format is named in the pages read, so it is listed until one is.
Every quote is verbatim from a stored capture of the page linked under it. Placement is our reading of the product's own documentation; no publisher has reviewed or endorsed it. Rows CC BY 4.0. Names, marks and logos belong to their owners; logos identify each product and are not part of the dataset.