Repositories list

• cla

  Public

  zaproxy/cla’s past year of commit activity
  ZAP Contributor License Agreement files

  Apache License 2.0

  •44 forks in zaproxy/cla•22 stars in zaproxy/cla•00 issues in zaproxy/cla•00 pull requests in zaproxy/cla•Updated Oct 27, 2026Oct 27, 2026

• zaproxy

  Public

  zaproxy/zaproxy’s past year of commit activity
  The ZAP by Checkmarx Core project

  securityopensourcezap+ 6

  securityopensourcezapappsechacktoberfestsecurity-scannerdastzaproxyzap-development

  Java

  •

  Apache License 2.0

  •2.7k2.7k forks in zaproxy/zaproxy•16k16k stars in zaproxy/zaproxy•810810 issues in zaproxy/zaproxy•6161 pull requests in zaproxy/zaproxy•Updated Oct 27, 2026Oct 27, 2026

• zap-extensions

  Public

  zaproxy/zap-extensions’s past year of commit activity
  ZAP Add-ons

  securityopensourcezap+ 5

  securityopensourcezapappsechacktoberfestsecurity-scannerdastzaproxy

  HTML

  •

  Apache License 2.0

  •815815 forks in zaproxy/zap-extensions•955955 stars in zaproxy/zap-extensions•00 issues in zaproxy/zap-extensions•8282 pull requests in zaproxy/zap-extensions•Updated Oct 27, 2026Oct 27, 2026

• browser-extension

  Public

  zaproxy/browser-extension’s past year of commit activity
  TypeScript

  •

  Apache License 2.0

  •1515 forks in zaproxy/browser-extension•3737 stars in zaproxy/browser-extension•11 issue in zaproxy/browser-extension•44 pull requests in zaproxy/browser-extension•Updated Oct 27, 2026Oct 27, 2026

• zaproxy.github.io

  Public

  zaproxy/zaproxy.github.io’s past year of commit activity
  ZAP Website

  HTML

  •1111 forks in zaproxy/zaproxy.github.io•2020 stars in zaproxy/zaproxy.github.io•00 issues in zaproxy/zaproxy.github.io•00 pull requests in zaproxy/zaproxy.github.io•Updated Oct 27, 2026Oct 27, 2026

• zaproxy-website

  Public

  zaproxy/zaproxy-website’s past year of commit activity
  The source of ZAP website

  securitywebsiteopensource+ 6

  securitywebsiteopensourceappsechacktoberfestsecurity-scannerwebappsecdastzaproxy

  HTML

  •

  MIT License

  •135135 forks in zaproxy/zaproxy-website•8383 stars in zaproxy/zaproxy-website•1717 issues in zaproxy/zaproxy-website•2323 pull requests in zaproxy/zaproxy-website•Updated Oct 27, 2026Oct 27, 2026

• zap-admin

  Public

  zaproxy/zap-admin’s past year of commit activity
  ZAP Admin

  Java

  •2525 forks in zaproxy/zap-admin•3535 stars in zaproxy/zap-admin•11 issue in zaproxy/zap-admin•00 pull requests in zaproxy/zap-admin•Updated Oct 26, 2026Oct 26, 2026

• zap-api-nodejs

  Public

  zaproxy/zap-api-nodejs’s past year of commit activity
  JavaScript

  •

  Apache License 2.0

  •1818 forks in zaproxy/zap-api-nodejs•6060 stars in zaproxy/zap-api-nodejs•22 issues in zaproxy/zap-api-nodejs•55 pull requests in zaproxy/zap-api-nodejs•Updated Oct 26, 2026Oct 26, 2026

• zap-api-python

  Public

  zaproxy/zap-api-python’s past year of commit activity
  ZAP Python API

  Python

  •

  Apache License 2.0

  •8989 forks in zaproxy/zap-api-python•204204 stars in zaproxy/zap-api-python•00 issues in zaproxy/zap-api-python•33 pull requests in zaproxy/zap-api-python•Updated Oct 25, 2026Oct 25, 2026

• crawlground

  Public

  zaproxy/crawlground’s past year of commit activity
  JavaScript

  •

  Apache License 2.0

  •11 fork in zaproxy/crawlground•77 stars in zaproxy/crawlground•00 issues in zaproxy/crawlground•00 pull requests in zaproxy/crawlground•Updated Oct 23, 2026Oct 23, 2026

• zest

  Public
  Java

  •

  Mozilla Public License 2.0

  •3636 forks in zaproxy/zest•117117 stars in zaproxy/zest•1919 issues in zaproxy/zest•11 pull request in zaproxy/zest•Updated Oct 21, 2026Oct 21, 2026

• action-full-scan

  Public
  A GitHub Action for running the ZAP Full scan

  securityactionsdevsecops+ 2

  securityactionsdevsecopsdastgithub-actions

  JavaScript

  •

  Apache License 2.0

  •7070 forks in zaproxy/action-full-scan•390390 stars in zaproxy/action-full-scan•99 issues in zaproxy/action-full-scan•00 pull requests in zaproxy/action-full-scan•Updated Oct 19, 2026Oct 19, 2026

• action-baseline

  Public
  A GitHub Action for running the ZAP Baseline scan

  securityactionsdevsecops+ 2

  securityactionsdevsecopsdastgithub-actions

  JavaScript

  •

  Apache License 2.0

  •6363 forks in zaproxy/action-baseline•375375 stars in zaproxy/action-baseline•1010 issues in zaproxy/action-baseline•11 pull request in zaproxy/action-baseline•Updated Oct 19, 2026Oct 19, 2026

• action-api-scan

  Public
  A GitHub Action for running the ZAP API scan

  securityactiondevsecops+ 2

  securityactiondevsecopsdastgithub-actions

  JavaScript

  •

  Apache License 2.0

  •2424 forks in zaproxy/action-api-scan•7878 stars in zaproxy/action-api-scan•22 issues in zaproxy/action-api-scan•11 pull request in zaproxy/action-api-scan•Updated Oct 19, 2026Oct 19, 2026

• gradle-plugin-common

  Public
  Java

  •

  Apache License 2.0

  •55 forks in zaproxy/gradle-plugin-common•11 star in zaproxy/gradle-plugin-common•00 issues in zaproxy/gradle-plugin-common•00 pull requests in zaproxy/gradle-plugin-common•Updated Oct 14, 2026Oct 14, 2026

• gradle-plugin-add-on

  Public
  A Gradle plugin to (help) build ZAP add-ons

  zapgradle-pluginzaproxy

  zapgradle-pluginzaproxy

  Java

  •

  Apache License 2.0

  •1010 forks in zaproxy/gradle-plugin-add-on•33 stars in zaproxy/gradle-plugin-add-on•00 issues in zaproxy/gradle-plugin-add-on•11 pull request in zaproxy/gradle-plugin-add-on•Updated Oct 13, 2026Oct 13, 2026

• actions-common

  Public
  Common code for ZAP's GitHub Actions

  TypeScript

  •

  Apache License 2.0

  •1818 forks in zaproxy/actions-common•44 stars in zaproxy/actions-common•44 issues in zaproxy/actions-common•88 pull requests in zaproxy/actions-common•Updated Oct 12, 2026Oct 12, 2026

• zap-core-help

  Public
  The help files for the ZAP core

  HTML

  •

  Apache License 2.0

  •137137 forks in zaproxy/zap-core-help•203203 stars in zaproxy/zap-core-help•00 issues in zaproxy/zap-core-help•00 pull requests in zaproxy/zap-core-help•Updated Oct 5, 2026Oct 5, 2026

• zap-hud

  Public
  The ZAP Heads Up Display (HUD)

  zaphudappsec+ 1

  zaphudappsechacktoberfest

  Java

  •

  Apache License 2.0

  •154154 forks in zaproxy/zap-hud•277277 stars in zaproxy/zap-hud•115115 issues in zaproxy/zap-hud•1818 pull requests in zaproxy/zap-hud•Updated Oct 5, 2026Oct 5, 2026

• addon-java

  Public template
  Template repository for ZAP add-ons written in Java

  Java

  •

  Apache License 2.0

  •66 forks in zaproxy/addon-java•66 stars in zaproxy/addon-java•00 issues in zaproxy/addon-java•00 pull requests in zaproxy/addon-java•Updated Oct 1, 2026Oct 1, 2026

• gradle-plugin-crowdin

  Public
  A Gradle plugin to integrate with Crowdin.

  Java

  •

  Apache License 2.0

  •99 forks in zaproxy/gradle-plugin-crowdin•66 stars in zaproxy/gradle-plugin-crowdin•00 issues in zaproxy/gradle-plugin-crowdin•00 pull requests in zaproxy/gradle-plugin-crowdin•Updated Oct 1, 2026Oct 1, 2026

• community-scripts

  Public
  A collection of ZAP scripts and tips provided by the community - pull requests very welcome!

  scriptstipsappsec+ 3

  scriptstipsappsecwebappsecdastzaproxy

  JavaScript

  •

  Apache License 2.0

  •260260 forks in zaproxy/community-scripts•899899 stars in zaproxy/community-scripts•66 issues in zaproxy/community-scripts•99 pull requests in zaproxy/community-scripts•Updated Oct 1, 2026Oct 1, 2026

• zap-api-java

  Public
  ZAP Java API

  Java

  •

  Apache License 2.0

  •4040 forks in zaproxy/zap-api-java•5353 stars in zaproxy/zap-api-java•00 issues in zaproxy/zap-api-java•11 pull request in zaproxy/zap-api-java•Updated Oct 1, 2026Oct 1, 2026

• fuzzdb-offensive

  Public
  ZAP add-on containing the web-backdoors and attack files from FuzzDB

  zap-pluginzaproxy

  zap-pluginzaproxy

  PHP

  •

  Apache License 2.0

  •1313 forks in zaproxy/fuzzdb-offensive•2020 stars in zaproxy/fuzzdb-offensive•00 issues in zaproxy/fuzzdb-offensive•00 pull requests in zaproxy/fuzzdb-offensive•Updated Oct 1, 2026Oct 1, 2026

• action-mcp-scan

  Public
  JavaScript

  •

  Apache License 2.0

  •22 forks in zaproxy/action-mcp-scan•22 stars in zaproxy/action-mcp-scan•00 issues in zaproxy/action-mcp-scan•11 pull request in zaproxy/action-mcp-scan•Updated Sep 10, 2026Sep 10, 2026

• zap-api-docs

  Public

  zaproxy/zap-api-docs’s past year of commit activity
  ZAP API Documentation

  JavaScript

  •

  Apache License 2.0

  •3232 forks in zaproxy/zap-api-docs•4040 stars in zaproxy/zap-api-docs•55 issues in zaproxy/zap-api-docs•66 pull requests in zaproxy/zap-api-docs•Updated Aug 31, 2026Aug 31, 2026

• wavsep

  Public

  zaproxy/wavsep’s past year of commit activity
  An up-to-date and maintained fork of The Web Application Vulnerability Scanner Evaluation Project

  evaluationctfappsec+ 5

  evaluationctfappsecvulnerable-applicationvulnerable-web-appdastvulnerable-web-applicationvulnerabl

  Java

  •

  Other

  •7878 forks in zaproxy/wavsep•1717 stars in zaproxy/wavsep•22 issues in zaproxy/wavsep•22 pull requests in zaproxy/wavsep•Updated May 11, 2026May 11, 2026

• action-af

  Public
  A GitHub Action for running ZAP Automation Framework plans

  securityactionsdevsecops+ 2

  securityactionsdevsecopsdastgithub-actions

  JavaScript

  •

  Apache License 2.0

  •88 forks in zaproxy/action-af•2323 stars in zaproxy/action-af•00 issues in zaproxy/action-af•00 pull requests in zaproxy/action-af•Updated May 8, 2026May 8, 2026

• swagger-parser

  Public
  Swagger Spec to Java POJOs

  Java

  •

  Apache License 2.0

  •565565 forks in zaproxy/swagger-parser•00 stars in zaproxy/swagger-parser•00 issues in zaproxy/swagger-parser•00 pull requests in zaproxy/swagger-parser•Updated Mar 30, 2026Mar 30, 2026

• crawljax

  Public
  Crawljax: Crawling JavaScript-based Ajax Web Applications

  Java

  •

  Apache License 2.0

  •223223 forks in zaproxy/crawljax•2222 stars in zaproxy/crawljax•00 issues in zaproxy/crawljax•00 pull requests in zaproxy/crawljax•Updated Jan 27, 2026Jan 27, 2026