Want to learn more about ZAP? The latest tutorial videos are all linked off - we're adding to them all of the time.

ZAP Updates - July 2025.Authentication improvements, Edge support, timing rule changes, Docker news, and a new scan rule. #zaproxy #appsec.

Yesterday there were more than 25K ZAP scans run using old versions of ZAP. These are no longer being maintained. Update your ZAP installs now!.#zaproxy #appsec.

We will be deleting all of the ZAP Docker images from the Software Security Project Docker Hub within the next 2 weeks. If you are still pulling images from there then please switch to one of the maintained options:

There is a new "ZAP is Out of Date" scan rule - learn more about it via this blog post.#zaproxy #appsec.

We've recently made some requested changes to the naming and implementation of scan rules which used Time Based attacks. @kingthorin_rm has written about it here: #AppSec #WebAppSec #DAST #DevSecOps.

#zaproxy users. We are aware that the BOAST service has been down (for a few days now). We have reached out to the maintainer and are waiting to hear back. Sorry for any inconvenience!.Keep in mind you can also use public or self hosted Interactsh for OOB testing purposes.

None of the major browsers are currently flagging the latest ZAP downloads as suspicious🎉 .Thank you to whoever sorted that out!.

ZAP now has full support for @MicrosoftEdge 😀.#zaproxy #appsec.

As promised, here is the first set of documentation for all of the authentication improvements the team has been working on.#zaproxy #appsec.

ZAP updates for June: .A new Intro video, lots of authentication work, and more news on the ZAP browser extensions. #zaproxy #appsec.

All of the main browsers flag ZAP as dangerous/potential malware, and there doesnt see to be anything we can do about it. We've updated the Download page

Still unsure of what ZAP does? .See this video. #zaproxy #dast #appsec.

Mega add-on update alert!.We've just upload loads of add-ons, so update your ZAP instances ASAP. Lots of authentication improvements have been included, more details coming soon . .

We have started to document how to configure ZAP against well known vulnerable apps: Let @psiinon know if you have any feedback or specific requests.

Is My App Security Testable?.#zaproxy #appsec.

Heres what the ZAP team have been working on during April

ZAP just won an award! Thanks @DefectDojo!.#zaproxy #appsec #award.

New ZAP blog post c/o Jemimah O #zaproxy #appsec.

The monthly ZAP Update Blog Post: #zaproxy #appsec.

ZAP by @checkmarx 2.16.1 has just been released. This is a bug fix release, along with some minor enhancements. See