The ZAP by Checkmarx Core project

The ZAP Heads Up Display (HUD)

Burp and ZAP plugin to analyse Content-Security-Policy headers or generate template CSP configuration from crawling a Website

A Spring Boot application exposing OWASP ZAP as an MCP (Model Context Protocol) server. It lets any MCP‑compatible AI agent (e.g., Claude Desktop, Cursor) orchestrate ZAP actions—spider, active scan, import OpenAPI specs, and generate reports.

Vendor-Neutral Security Tool Automation Controller (over REST)

OWASP ZAP add-on for finding vulnerabilities in File Upload functionality.

Continuation of the ZAP Neonmarker add-on previously by Juha Kivekäs

Part of the deprecated secureCodeBox v1, see secureCodeBox/secureCodeBox Repo for v2

MOVED TO https://github.com/jenkinsci/zap-pipeline-plugin

A Gradle plugin to (help) build ZAP add-ons

Zap Extension for collaboration in Faraday

An addon to integrate Project Foxhound with the Zed Attack Proxy (ZAP), enabling precision detection of client-side injection vulnerabilities during dynamic testing.

OWASP ZAP - Zed Attack Proxy

Enabling and configuring security gates for a spring boot application.

Demo repository for TestKube - a opinionated and friendly Kubernetes testing framework!

This repository is contains commonly used classes in our project.

Hands-on API security vulnerability lab focused on OWASP API Top 10 testing and exploration.