Repositories list

• zaproxy-website

  Public
  The source of ZAP website

  securitywebsiteopensource+ 6

  securitywebsiteopensourceappsechacktoberfestsecurity-scannerwebappsecdastzaproxy

  HTML

  •

  MIT License

  •131131 forks•8181 stars•1717 issues•2525 pull requests•Updated Sep 9, 2026Sep 9, 2026

• actions-common

  Public
  Common code for ZAP's GitHub Actions

  TypeScript

  •

  Apache License 2.0

  •1818 forks•44 stars•44 issues•88 pull requests•Updated Sep 9, 2026Sep 9, 2026

• zaproxy.github.io

  Public
  ZAP Website

  HTML

  •1111 forks•1919 stars•00 issues•00 pull requests•Updated Sep 9, 2026Sep 9, 2026

• gradle-plugin-common

  Public
  Java

  •

  Apache License 2.0

  •55 forks•11 star•00 issues•11 pull request•Updated Sep 9, 2026Sep 9, 2026

• zaproxy

  Public
  The ZAP by Checkmarx Core project

  securityopensourcezap+ 6

  securityopensourcezapappsechacktoberfestsecurity-scannerdastzaproxyzap-development

  Java

  •

  Apache License 2.0

  •2.6k2.6k forks•16k16k stars•807807 issues•5353 pull requests•Updated Sep 9, 2026Sep 9, 2026

• zap-extensions

  Public
  ZAP Add-ons

  securityopensourcezap+ 5

  securityopensourcezapappsechacktoberfestsecurity-scannerdastzaproxy

  HTML

  •

  Apache License 2.0

  •802802 forks•949949 stars•00 issues•6767 pull requests•Updated Sep 9, 2026Sep 9, 2026

• cla

  Public
  ZAP Contributor License Agreement files

  Apache License 2.0

  •33 forks•22 stars•00 issues•00 pull requests•Updated Sep 9, 2026Sep 9, 2026

• zap-admin

  Public
  ZAP Admin

  Java

  •2525 forks•3535 stars•11 issue•00 pull requests•Updated Sep 9, 2026Sep 9, 2026

• zap-core-help

  Public
  The help files for the ZAP core

  HTML

  •

  Apache License 2.0

  •137137 forks•203203 stars•00 issues•11 pull request•Updated Sep 8, 2026Sep 8, 2026

• browser-extension

  Public
  TypeScript

  •

  Apache License 2.0

  •1515 forks•3737 stars•11 issue•55 pull requests•Updated Sep 7, 2026Sep 7, 2026

• zap-api-nodejs

  Public
  JavaScript

  •

  Apache License 2.0

  •1818 forks•6060 stars•22 issues•44 pull requests•Updated Sep 7, 2026Sep 7, 2026

• action-mcp-scan

  Public
  JavaScript

  •

  Apache License 2.0

  •22 forks•22 stars•00 issues•11 pull request•Updated Sep 7, 2026Sep 7, 2026

• action-full-scan

  Public
  A GitHub Action for running the ZAP Full scan

  securityactionsdevsecops+ 2

  securityactionsdevsecopsdastgithub-actions

  JavaScript

  •

  Apache License 2.0

  •7070 forks•387387 stars•77 issues•00 pull requests•Updated Sep 7, 2026Sep 7, 2026

• action-api-scan

  Public
  A GitHub Action for running the ZAP API scan

  securityactiondevsecops+ 2

  securityactiondevsecopsdastgithub-actions

  JavaScript

  •

  Apache License 2.0

  •2424 forks•7777 stars•22 issues•11 pull request•Updated Sep 7, 2026Sep 7, 2026

• action-baseline

  Public
  A GitHub Action for running the ZAP Baseline scan

  securityactionsdevsecops+ 2

  securityactionsdevsecopsdastgithub-actions

  JavaScript

  •

  Apache License 2.0

  •6161 forks•369369 stars•1010 issues•11 pull request•Updated Sep 6, 2026Sep 6, 2026

• zest

  Public
  Java

  •

  Mozilla Public License 2.0

  •3636 forks•117117 stars•1919 issues•00 pull requests•Updated Sep 2, 2026Sep 2, 2026

• crawlground

  Public
  JavaScript

  •

  Apache License 2.0

  •11 fork•77 stars•00 issues•11 pull request•Updated Sep 2, 2026Sep 2, 2026

• addon-java

  Public template
  Template repository for ZAP add-ons written in Java

  Java

  •

  Apache License 2.0

  •66 forks•66 stars•00 issues•00 pull requests•Updated Sep 1, 2026Sep 1, 2026

• gradle-plugin-crowdin

  Public
  A Gradle plugin to integrate with Crowdin.

  Java

  •

  Apache License 2.0

  •99 forks•66 stars•00 issues•00 pull requests•Updated Sep 1, 2026Sep 1, 2026

• community-scripts

  Public
  A collection of ZAP scripts and tips provided by the community - pull requests very welcome!

  scriptstipsappsec+ 3

  scriptstipsappsecwebappsecdastzaproxy

  JavaScript

  •

  Apache License 2.0

  •260260 forks•893893 stars•66 issues•88 pull requests•Updated Sep 1, 2026Sep 1, 2026

• gradle-plugin-add-on

  Public
  A Gradle plugin to (help) build ZAP add-ons

  zapgradle-pluginzaproxy

  zapgradle-pluginzaproxy

  Java

  •

  Apache License 2.0

  •99 forks•33 stars•00 issues•11 pull request•Updated Sep 1, 2026Sep 1, 2026

• zap-api-java

  Public
  ZAP Java API

  Java

  •

  Apache License 2.0

  •4040 forks•5353 stars•00 issues•11 pull request•Updated Sep 1, 2026Sep 1, 2026

• fuzzdb-offensive

  Public
  ZAP add-on containing the web-backdoors and attack files from FuzzDB

  zap-pluginzaproxy

  zap-pluginzaproxy

  PHP

  •

  Apache License 2.0

  •1414 forks•2020 stars•00 issues•00 pull requests•Updated Sep 1, 2026Sep 1, 2026

• zap-api-docs

  Public
  ZAP API Documentation

  JavaScript

  •

  Apache License 2.0

  •3232 forks•4040 stars•55 issues•66 pull requests•Updated Aug 31, 2026Aug 31, 2026

• zap-hud

  Public
  The ZAP Heads Up Display (HUD)

  zaphudappsec+ 1

  zaphudappsechacktoberfest

  Java

  •

  Apache License 2.0

  •154154 forks•276276 stars•115115 issues•1818 pull requests•Updated Aug 17, 2026Aug 17, 2026

• zap-api-python

  Public
  ZAP Python API

  Python

  •

  Apache License 2.0

  •8989 forks•204204 stars•00 issues•33 pull requests•Updated Aug 1, 2026Aug 1, 2026

• wavsep

  Public
  An up-to-date and maintained fork of The Web Application Vulnerability Scanner Evaluation Project

  evaluationctfappsec+ 5

  evaluationctfappsecvulnerable-applicationvulnerable-web-appdastvulnerable-web-applicationvulnerabl

  Java

  •

  Other

  •7979 forks•1616 stars•22 issues•22 pull requests•Updated May 11, 2026May 11, 2026

• action-af

  Public
  A GitHub Action for running ZAP Automation Framework plans

  securityactionsdevsecops+ 2

  securityactionsdevsecopsdastgithub-actions

  JavaScript

  •

  Apache License 2.0

  •88 forks•2424 stars•00 issues•00 pull requests•Updated May 8, 2026May 8, 2026

• swagger-parser

  Public
  Swagger Spec to Java POJOs

  Java

  •

  Apache License 2.0

  •558558 forks•00 stars•00 issues•00 pull requests•Updated Mar 30, 2026Mar 30, 2026

• crawljax

  Public
  Crawljax: Crawling JavaScript-based Ajax Web Applications

  Java

  •

  Apache License 2.0

  •224224 forks•2222 stars•00 issues•00 pull requests•Updated Jan 27, 2026Jan 27, 2026