SOFTWARE LICENSE GUIDE

OWASP ZAP

OWASP ZAP is an entirely free and open-source web application security scanner released under the Apache License 2.0.

Open SourceFree and Open Source (Apache License 2.0)

What it does

OWASP ZAP (Zed Attack Proxy) is a security tool used for finding vulnerabilities in web applications during development and testing.

Who it may suit

Developers, security testers, and penetration testers who need a free and powerful tool to identify security vulnerabilities in web applications.

Free tier and license

OWASP ZAP is entirely free and open-source.

Limitations to check

As open-source software, support is primarily community-driven. Users should check official documentation for specific features and integration capabilities.

Licensing notes

OWASP ZAP is free and open-source software released under the Apache License 2.0.

Verification details

Last licensing verification recorded: 2026-10-28.

Directory record last updated: 2026-10-28. These are separate dates: a record update does not necessarily mean the publisher's terms changed.

AI-assisted summaries may be incomplete or outdated. Confirm licensing, pricing, and commercial-use rights in the official sources before making a business decision.

Frequently asked questions

Is OWASP ZAP completely free?

Yes, OWASP ZAP is an entirely free and open-source web application security scanner.

What is the license for OWASP ZAP?

OWASP ZAP is released under the Apache License 2.0.

Related software

Explore the complete IsItFree? software directory for more licensing information.