← All tools

ZAP Automation Framework

DAST · Intermediate

Automate OWASP ZAP scans in CI.

Knowledge reference only. Prefer in-browser Labs first. Use this tool only on systems you own or have written authorization to test.

What to learn

  • Automation plans
  • API

Legitimate use

DAST in pipeline — scope to owned apps.

Official docs →

Example commands (lab VMs only)

  • zap.sh -cmd -autorun plan.yaml
    Run automation plan against localhost