zap-scanner

ZAP Scanner: How OWASP ZAP Works and When to Use It

ZAP is the most widely used free DAST scanner. Here is how its spider, passive, and active engines work, where it fits in CI, and its honest limits.