Where to Download ZAP and Find Its Documentation and Quick Start Guide

Updated

Go to zaproxy.org. The official site provides a Download entry to get ZAP, a Documentation entry, and a Quick Start Guide aimed at people new to security testing. It also links to a blog, videos, and community resources for further material.

Download ZAP

ZAP (Zed Attack Proxy) is described on the site as the world's most widely used web app scanner, free and open source, and a community-based GitHub Top 1000 project that anyone can contribute to.

To get it:

  1. Open zaproxy.org.
  2. Use the Download link on the site.
  3. Follow the instructions on the download page for your platform.

The site presents the download as the direct route to the tool; it does not list platform-specific package details on the landing page, so check the download page itself for the options available.

Documentation

The site's Documentation entry is the starting point for reference material on using ZAP. It is the place to look for how-to content and details on ZAP's features, including the automation options the site mentions.

Quick Start Guide for Beginners

If you are new to security testing, the site explicitly points you to the ZAP Quick Start Guide. The landing page states that ZAP "has you very much in mind" for newcomers and directs them to this guide to learn more. Start here before diving into the full documentation.

Other Resources on the Site

Resource What it offers
Blog News and articles from the project
Videos Visual walkthroughs and talks
Documentation Reference and how-to material
Community Ways to connect with other ZAP users and contributors
Download The entry point to get ZAP

Automation and Extensions

  • Automation: The site notes that ZAP provides a range of options for security automation and points to the automation docs to start automating.
  • Marketplace: The ZAP Marketplace contains add-ons contributed by the community, with information on how to extend ZAP with them.

About the Project

ZAP is an independent open source project. The site identifies it as "ZAP by Checkmarx" and credits the ZAP Dev Team. Because it is community based, anyone can contribute to the project via its GitHub presence.