ZAP by Checkmarx

ZAP Updates - July 2025 Authentication improvements, Edge support, timing rule changes, Docker news, and a new scan rule.

ZAP Updates - July 2025
Authentication improvements, Edge support, timing rule changes, Docker news, and a new scan rule.
www.zaproxy.org/blog/2025-08...
#zaproxy #appsec

Because they are not being updated. The maintained Docker images are under the "zaproxy" org.

Yesterday there were more than 25K ZAP scans run using old versions of ZAP. These are no longer being maintained.
Update your ZAP installs now!
#zaproxy #appsec

We will be deleting all of the ZAP Docker images from the Software Security Project Docker Hub within the next 2 weeks. If you are still pulling images from there then please switch to one of the maintained options: www.zaproxy.org/download/#do...

The New 'ZAP is Out of Date' Rule If you are using an old version of ZAP then you might start seeing a new alert…

There is a new "ZAP is Out of Date" scan rule - learn more about it via this blog post
www.zaproxy.org/blog/2025-07...
#zaproxy #appsec

Timing Related Scan Rule Changes Scan rules related to time based attacks have been split or renamed.

We've recently made some requested changes to the naming and implementation of scan rules which used Time Based attacks. @kingthorin.bsky.social has written about it here: www.zaproxy.org/blog/2025-07...
#zaproxy #appsec

None of the major browsers are currently flagging the latest ZAP downloads as suspicious🎉
Thank you to whoever sorted that out!

Edge Support ZAP now has “tier 1” support for Microsoft Edge, including exploring, crawling, and attacking.

ZAP now has full support for Microsoft Edge 😀
www.zaproxy.org/blog/2025-07...
#zaproxy #appsec

Authentication Improvements We’ve made a lot of improvements in ZAP’s handling of authentication - here’s a summary of the most significant changes we’ve made.

As promised, here is the first set of documentation for all of the authentication improvements the team has been working on
www.zaproxy.org/blog/2025-07...
#zaproxy #appsec

ZAP Updates - June 2025 A new Intro video, lots of authentication work, and more news on the ZAP browser extensions.

ZAP updates for June:
A new Intro video, lots of authentication work, and more news on the ZAP browser extensions.
www.zaproxy.org/blog/2025-07...
#zaproxy #appsec

All of the main browsers flag ZAP as dangerous/potential malware, and there doesnt see to be anything we can do about it.
We've updated the Download page www.zaproxy.org/download/

YouTube video by ZAP An Introduction to ZAP by Checkmarx - Official Version

Still unsure of what ZAP does?
See this video..
youtu.be/yywD8ebNn6o
#zaproxy #dast #appsec

Mega add-on update alert!
We've just upload loads of add-ons, so update your ZAP instances ASAP.
Lots of authentication improvements have been included, more details coming soon ...

We have started to document how to configure ZAP against well known vulnerable apps: www.zaproxy.org/docs/testapps/ Let @psiinon.bsky.social know if you have any feedback or specific requests

www.zaproxy.org/docs/getting...
#zaproxy #appsec

ZAP Updates - April 2025 April 2025 updates and ongoing feature development statuses.

Heres what the ZAP team have been working on during April www.zaproxy.org/blog/2025-05...

ZAP Wins Inaugural DefectDojo Award for Open-Source Cybersecurity ZAP was recognised as being one of the best dynamic application security testing (DAST) Tools.

ZAP just won an award! Thanks DefectDojo!
www.zaproxy.org/blog/2025-04...
#zaproxy #appsec #award

PortSwigger Labs: Broken Brute-Force Protection, IP Block Walkthrough for the PortSwigger lab, “Broken brute-force protection, IP block”.

New ZAP blog post c/o Jemimah O www.zaproxy.org/blog/2025-04...
#zaproxy #appsec

ZAP Updates - March 2025 We released 2.16.1 and made more authentication handling improvements.

The monthly ZAP Update Blog Post: www.zaproxy.org/blog/2025-04...
#zaproxy #appsec

ZAP 2.16.1 ZAP 2.16.1 has just been released. This is a bug fix release, along with some minor enhancements

ZAP by Checkmarx 2.16.1 has just been released. This is a bug fix release, along with some minor enhancements.
See www.zaproxy.org/blog/2025-03...

ZAP Updates - February 2025 Authentication, authentication, authentication… And there will be a 2.16.1 release “soon”.

The monthly ZAP Update Blog Post: www.zaproxy.org/blog/2025-03...
#zaproxy #appsec

A new guest blog post c/o Bash Bunny www.zaproxy.org/blog/2025-02...

There's now a ZAP Slack that's open to everyone. You can get an invite to it via zaproxy.org/slack/invite

YouTube video by ZAP ZAP Chat 20 Client Spider

youtu.be/OkELONAQyAY

The Client Spider We introduced a new Client Spider in ZAP 2.16.0, this blog post and video explain why we did that, how it works, and where it’s going

In ZAP 2.16.0 we introduced a new Client Spider 🕷️. This blog post and video explain why we did that, how it works, and where it’s going.
www.zaproxy.org/blog/2025-01...
#zaproxy #appsec

YouTube video by ZAP ZAP Chat 19 Release 2.16.0

Whats new in ZAP 2.16.0?

See the latest ZAP Chat video: youtu.be/o_IgsCaaQMo

ZAP 2.16.0 ZAP 2.16.0 has just been released. It includes a brand new spider, detachable tabs, policy definitions, and lots more…

ZAP by Checkmarx 2.16.0 has just been released. It includes a brand new spider, detachable tabs, policy definitions, and lots more...
See www.zaproxy.org/blog/2025-01...

Today’s ZAP weekly release is the new 2.16.0 Release Candidate: zaproxy.org/download/#we...
Please try it out and let @psiinon.bsky.social know how you get on with it!

Use ZAP with Flagger in Kubernetes Learn how to integrate ZAP with Flagger in a Kubernetes cluster to scan the security of each new deployment.

How to ZAP with Flagger in @kubernetes.io
www.zaproxy.org/blog/2024-12...

We have decided to delay the ZAP 2.16 release until the New Year.
We will generate another weekly next week and then expect to release a new Release Candidate early next year.
Why? Because we have a very significant enhancement which we want to get into 2.16 😀