151 zaproxy(1) - Kailash Tool Reference
151.1 zaproxy
zaproxy - OWASP ZAP — web app penetration-testing proxy.
| Layer | CLASSIC |
| Category | c-03-web-application-assessment |
| Safety class | safe |
| Licence | Apache-2.0 |
| Upstream | github.com/zaproxy/zaproxy |
151.1.1 NAME
zaproxy - OWASP ZAP — web app penetration-testing proxy.
151.1.2 SYNOPSIS
Not derived automatically - see upstream documentation. This page does not hand-copy flags (generation contract, ADR-0001).
151.1.3 DESCRIPTION (upstream)
The Zed Attack Proxy (ZAP) by Checkmarx is the world’s most widely used web app scanner. Free and open source. A community based GitHub Top 1000 project that anyone can contribute to. It can help you automatically find security vulnerabilities in your web applications while you are developing and testing your applications. It’s also a great tool for experienced pentesters to use for manual security testing. For more details about ZAP see the website: zaproxy.org
151.1.4 CONFIGURATION (detected)
Config-surface markers detected in the upstream README (6 matches, e.g. ci.yml, ci.yml). A full config reference page for this tool is queued under the config-page policy — this line is the detection record, not the page.
151.1.5 SEE ALSO
- Category: c-03-web-application-assessment in the category directory (sister tools listed there).
- Configuration reference — files, environment variables, samples.
ref: pin - verified 2026-10-14