ZAP Automated Security Scan Orchestrator

Orchestrates OWASP ZAP security scans via the ZAP API with automated spider, active scanner, and authentication sequence configuration. Generates compliance reports mapped to OWASP Top 10 and exports findings in SARIF and JUnit XML formats.

Prerequisites

Java or Docker

Installation

Requirements and caveats from upstream:

• 

Basic usage or getting-started notes:

• 

• Source: https://github.com/zaproxy/zaproxy

• Extracted from upstream docs: https://raw.githubusercontent.com/zaproxy/zaproxy/HEAD/README.md

Documentation

• https://www.zaproxy.org/docs/

Source

• Agent Skill Exchange