#zaproxy — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #zaproxy, aggregated by home.social.
-
Introducing ZAP LLM Support:
https://www.zaproxy.org/blog/2026-08-07-zap-llm-support/
A new optional, opt-in add-on that lets you connect ZAP to an LLM of your choice.
#zaproxy #appsec -
https://www.zaproxy.org/blog/2026-08-06-zap-updates-july-2026/ - a huge increase in the number of times ZAP was started, and we now recommend using the Client Spider instead of the AJAX Spider
#zaproxy #appsec -
It has been 3 years since ZAP left OWASP.
Update your docs!
https://www.zaproxy.org/docs/nowaspzap/
#zaproxy #owasp -
Big announcement!
We now recommend that you use the Client Spider for crawling modern web apps, instead of the AJAX Spider.
More details in the blog post:
https://www.zaproxy.org/blog/2026-07-06-client-spider-now-recommended/
#zaproxy #appsec -
ZAP Blog: June Updates
https://www.zaproxy.org/blog/2026-07-01-zap-updates-june-2026/
More PTK integration, lots of Client Spider improvements, and much more..
#zaproxy #appsec -
Blog Post: Even More OWASP PTK Integration with ZAP.
SAST and IAST passive scanning out of the box with the Client Spider, and the active rule is now enabled by default.
https://www.zaproxy.org/blog/2026-06-29-even-more-owasp-ptk-integration-with-zap/
#zaproxy #owaspptk #appsec -
Blog Post: Even More OWASP PTK Integration with ZAP.
SAST and IAST passive scanning out of the box with the Client Spider, and the active rule is now enabled by default.
https://www.zaproxy.org/blog/2026-06-29-even-more-owasp-ptk-integration-with-zap/
#zaproxy #owaspptk #appsec -
ZAP now has a dedicated PTK active scan rule, so you can run the PTK rules in the ZAP active scanner.
Check out the dramatic improvement in the scores vs Google Firing Range!
https://www.zaproxy.org/blog/2026-06-05-automating-owasp-ptk-with-zap-phase-2/
#zaproxy #owaspptk #appsec -
In May ZAP learned to scan MCP servers as a first-class target, OWASP PTK automation reached Phase 1, and the Params extension moved out of the core into its own add-on.
https://www.zaproxy.org/blog/2026-06-02-zap-updates-may-2026/
#zaproxy #appsec -
ZAP can now scan MCP Servers, in the Desktop, Automation Framework and in a new GitHub Action.
Read all about it on the blog:
https://www.zaproxy.org/blog/2026-05-21-scanning-mcp-servers-with-zap/
#zaproxy #appsec #mcp -
Blog: Automating OWASP PTK with ZAP (Phase 1)
You can now automate OWASP Pentestkit using ZAP
https://www.zaproxy.org/blog/2026-05-06-automating-owasp-ptk-with-zap-phase-1/
#zaproxy #owasp-ptk #appsec -
Blog: Vibe coding security fixes.
https://www.zaproxy.org/blog/2026-04-15-vibe-coding-security-fixes/
Learn how ZAP can help you make your vibe coded projects more secure.
#zaproxy #vibecoding #appsec -
Guest Blog: https://www.zaproxy.org/blog/2026-04-13-use-zap-with-kro-in-kubernetes/
Learn how to integrate ZAP with KRO in a Kubernetes cluster to scan the security of each new deployment.
℅ Trevor Mountney
#zaproxy #kubernetes #appsec -
Blog: ZAP Updates for March:
https://www.zaproxy.org/blog/2026-04-03-zap-updates-march-2026/
ZAP was started 9.5 MILLION times .. and we announced significant collaborations with other open source projects
#zaproxy #appsec -
This is huge!
https://www.zaproxy.org/blog/2026-04-01-owasp-ptk-findings-to-zap-alerts/
OWASP PTK massively increases ZAP’s browser side testing capabilities .. and automation is up next!
Many thanks to Denis Podgurskii for this great integration.
#zaproxy #owasp #appsec -
New ZAP Blog Post: https://www.zaproxy.org/blog/2026-03-27-guided-zap-scans-faster-cicd-feedback-using-sast/
This post describes an approach that uses static analysis findings to guide ZAP’s active scans toward the most relevant endpoints. The result is a faster scanning mode suited for CI/CD pipelines, built on top of ZAP’s Automation Framework.
Thanks to the Seqra Team!
#zaproxy #appsec -
New ZAP Blog Post: Introducing DeepViolet: The Engine Behind ZAP’s New TLS Analysis
https://www.zaproxy.org/blog/2026-03-19-introducing-deepviolet/
Thanks to Milton Smith
#zaproxy #deepviolet #appsec -
New blog post: ZAP Updates - February 2026
https://www.zaproxy.org/blog/2026-03-02-zap-updates-february-2026/
#zaproxy #appsec -
Do you need even more control over the browsers that you can launch from ZAP?
You’ve got it!
https://www.zaproxy.org/blog/2026-02-24-custom-browsers-and-preferences/
#zaproxy #appsec -
Combine the Encode/Decode/Hash add-on with CyberChef operations in ZAP Encode/Decode Scripts for flexible encoding, decoding, and hashing in your testing workflow.
https://www.zaproxy.org/blog/2026-02-17-encoder-cyberchef-via-scripts/
#zaproxy #appsec #cyberchef -
New Blog Post: Detecting Circular Type References in GraphQL Schemas
https://www.zaproxy.org/blog/2026-02-06-detecting-graphql-cycles/
#zaproxy #appsec #graphql -
New blog post: https://www.zaproxy.org/blog/2026-02-02-zap-updates-2025-highlights-2026-plans/
Highlights of 2025 and our initial plans for 2026, including more 3rd Party tool integrations, enhanced exploring and, yes, AI integration!
#zaproxy #appsec #ai -
ZAP 2.17.0 is now available!
It includes performance improvements, a significant reduction in “duplicate” alerts reported, and new Insights which give you key information about scans.
https://www.zaproxy.org/blog/2025-12-15-zap-2-17-0/
#zaproxy #appsec -
New blog post: #React2Shell Detection with ZAP
https://www.zaproxy.org/blog/2025-12-05-react2shell-detection-with-zap/
#zaproxy #appsec -
ZAP Updates for November 2025:
https://www.zaproxy.org/blog/2025-12-03-zap-updates-november-2025/
2.17.0 is coming soon, along with Insights and fixes for some issues that caused ZAP to log 50 million errors in one day!
#zaproxy #appsec -
New ZAP blog post - read how Telmon Maluleka is enhancing ZAP with AI for Bug Bounty Hunting
https://www.zaproxy.org/blog/2025-11-28-enhancing-zap-with-ai-for-bug-bounty-hunting/
#zaproxy #appsec #bugbounty -
ZAP logged 50 MILLION errors yesterday 😮 Read the blog for more details!
https://www.zaproxy.org/blog/2025-11-25-50-million-errors-in-one-day/
#zaproxy #appsec -
ZAP Updates for October:
https://www.zaproxy.org/blog/2025-11-06-zap-updates-october-2025/
#zaproxy #appsec