Repositories list

• cla

  Public
  ZAP Contributor License Agreement files

  Apache License 2.0

  •3•2•0•0•Updated Mar 8, 2026Mar 8, 2026

• zap-extensions

  Public

  zaproxy/zap-extensions’s past year of commit activity
  ZAP Add-ons

  securityopensourcezap+ 5

  securityopensourcezapappsechacktoberfestsecurity-scannerdastzaproxy

  HTML

  •

  Apache License 2.0

  •772•919•0•63•Updated Mar 8, 2026Mar 8, 2026

• zaproxy.github.io

  Public
  ZAP Website

  HTML

  •12•20•0•0•Updated Mar 6, 2026Mar 6, 2026

• zaproxy-website

  Public
  The source of ZAP website

  securitywebsiteopensource+ 6

  securitywebsiteopensourceappsechacktoberfestsecurity-scannerwebappsecdastzaproxy

  HTML

  •

  MIT License

  •124•78•18•17•Updated Mar 6, 2026Mar 6, 2026

• browser-extension

  Public
  TypeScript

  •

  Apache License 2.0

  •16•32•1•1•Updated Mar 5, 2026Mar 5, 2026

• zaproxy

  Public
  The ZAP by Checkmarx Core project

  securityopensourcezap+ 6

  securityopensourcezapappsechacktoberfestsecurity-scannerdastzaproxyzap-development

  Java

  •

  Apache License 2.0

  •2.5k•15k•816•34•Updated Mar 4, 2026Mar 4, 2026

• zap-admin

  Public

  zaproxy/zap-admin’s past year of commit activity
  ZAP Admin

  Java

  •25•31•1•0•Updated Mar 4, 2026Mar 4, 2026

• action-full-scan

  Public
  A GitHub Action for running the ZAP Full scan

  securityactionsdevsecops+ 2

  securityactionsdevsecopsdastgithub-actions

  JavaScript

  •

  Apache License 2.0

  •70•362•7•0•Updated Mar 3, 2026Mar 3, 2026

• action-api-scan

  Public

  zaproxy/action-api-scan’s past year of commit activity
  A GitHub Action for running the ZAP API scan

  securityactiondevsecops+ 2

  securityactiondevsecopsdastgithub-actions

  JavaScript

  •

  Apache License 2.0

  •24•69•2•0•Updated Mar 3, 2026Mar 3, 2026

• action-baseline

  Public
  A GitHub Action for running the ZAP Baseline scan

  securityactionsdevsecops+ 2

  securityactionsdevsecopsdastgithub-actions

  JavaScript

  •

  Apache License 2.0

  •59•352•10•2•Updated Mar 3, 2026Mar 3, 2026

• zap-api-nodejs

  Public

  zaproxy/zap-api-nodejs’s past year of commit activity
  JavaScript

  •

  Apache License 2.0

  •20•58•2•2•Updated Mar 2, 2026Mar 2, 2026

• actions-common

  Public
  Common code for ZAP's GitHub Actions

  TypeScript

  •

  Apache License 2.0

  •20•4•4•2•Updated Mar 1, 2026Mar 1, 2026

• addon-java

  Public template
  Template repository for ZAP add-ons written in Java

  Java

  •

  Apache License 2.0

  •7•5•0•0•Updated Mar 1, 2026Mar 1, 2026

• gradle-plugin-common

  Public
  Java

  •

  Apache License 2.0

  •6•1•0•0•Updated Mar 1, 2026Mar 1, 2026

• zest

  Public
  Java

  •

  Mozilla Public License 2.0

  •37•114•18•0•Updated Mar 1, 2026Mar 1, 2026

• gradle-plugin-crowdin

  Public
  A Gradle plugin to integrate with Crowdin.

  Java

  •

  Apache License 2.0

  •10•6•0•0•Updated Mar 1, 2026Mar 1, 2026

• zap-core-help

  Public

  zaproxy/zap-core-help’s past year of commit activity
  The help files for the ZAP core

  HTML

  •

  Apache License 2.0

  •137•202•0•1•Updated Mar 1, 2026Mar 1, 2026

• zap-api-java

  Public
  ZAP Java API

  Java

  •

  Apache License 2.0

  •41•50•0•1•Updated Mar 1, 2026Mar 1, 2026

• community-scripts

  Public
  A collection of ZAP scripts and tips provided by the community - pull requests very welcome!

  scriptstipsappsec+ 3

  scriptstipsappsecwebappsecdastzaproxy

  JavaScript

  •

  Apache License 2.0

  •257•868•4•7•Updated Mar 1, 2026Mar 1, 2026

• gradle-plugin-add-on

  Public
  A Gradle plugin to (help) build ZAP add-ons

  zapgradle-pluginzaproxy

  zapgradle-pluginzaproxy

  Java

  •

  Apache License 2.0

  •9•3•1•0•Updated Mar 1, 2026Mar 1, 2026

• fuzzdb-offensive

  Public
  ZAP add-on containing the web-backdoors and attack files from FuzzDB

  zap-pluginzaproxy

  zap-pluginzaproxy

  PHP

  •

  Apache License 2.0

  •14•20•0•0•Updated Mar 1, 2026Mar 1, 2026

• zap-api-docs

  Public
  ZAP API Documentation

  JavaScript

  •

  Apache License 2.0

  •30•39•5•5•Updated Feb 23, 2026Feb 23, 2026

• zap-api-python

  Public

  zaproxy/zap-api-python’s past year of commit activity
  ZAP Python API

  Python

  •

  Apache License 2.0

  •90•204•0•3•Updated Feb 9, 2026Feb 9, 2026

• crawljax

  Public
  Crawljax: Crawling JavaScript-based Ajax Web Applications

  Java

  •

  Apache License 2.0

  •227•22•0•0•Updated Jan 27, 2026Jan 27, 2026

• zap-hud

  Public
  The ZAP Heads Up Display (HUD)

  zaphudappsec+ 1

  zaphudappsechacktoberfest

  Java

  •

  Apache License 2.0

  •156•272•115•19•Updated Dec 23, 2025Dec 23, 2025

• action-af

  Public
  A GitHub Action for running ZAP Automation Framework plans

  securityactionsdevsecops+ 2

  securityactionsdevsecopsdastgithub-actions

  JavaScript

  •

  Apache License 2.0

  •9•23•0•0•Updated Sep 30, 2025Sep 30, 2025

• wavsep

  Public
  The Web Application Vulnerability Scanner Evaluation Project

  Java

  •

  Other

  •77•14•2•0•Updated Sep 8, 2025Sep 8, 2025

• zap-media-resources

  Public
  Creative Commons Zero v1.0 Universal

  •3•1•0•1•Updated Feb 15, 2025Feb 15, 2025

• zaproxyltd

  Public
  HTML

  •

  Apache License 2.0

  •2•0•0•0•Updated Feb 12, 2025Feb 12, 2025

• zap-archive

  Public
  An archive of the oldest ZAP releases.

  Apache License 2.0

  •1•3•0•0•Updated Jan 20, 2025Jan 20, 2025