ZAP (Zed Attack Proxy) is a dynamic application security testing tool published under the Apache License.

ZAP was originally forked from Paros which was developed by Chinotec Technologies Company.

[2] Simon Bennetts, the project lead, stated in 2014 that only 20% of ZAP's source code was still from Paros.

[4][5] In 2023, ZAP developers moved to the Linux Foundation, where they became a part of the Software Security Project.

[9] ZAP was listed in the 2015 InfoWorld Bossie award for The best open source networking and security software.