OWASP ZAP Automated Pen Testing Agent
Runs automated penetration tests using OWASP ZAP API with spider crawling, active scanning, and AJAX-aware testing. Generates SARIF and HTML reports with CWE-mapped findings for security review workflows.
Installation
Requirements and caveats from upstream:
Basic usage or getting-started notes:
Extracted from upstream docs: https://raw.githubusercontent.com/zaproxy/zaproxy/HEAD/README.md