owasp-zap - OWASP ZAP Web Application Security Scanner
Discovers vulnerabilities in web applications through spidering, passive analysis, and active attack testing
Tags
Updated: 2026-03-09Capabilities
Typical Inputs
Typical Outputs
What this skill does
- run spidering on web applications
- perform passive analysis scanning
- execute active attack testing
- configure scan policies
- generate security reports
- integrate with CI/CD pipelines
Inputs
- web application URL
- OpenAPI specification
- authentication credentials
- Docker image
- scan policy rules
Outputs
- HTML security report
- JSON security report
- alert triage results
- scan completion status
Requirements
- Docker or Java 11+
- OWASP ZAP installation
- web application access
- staging environment for active scans