← ZAP
ZAP logo

ZAP for Windows

ZAP · Open source

ZAP (Zed Attack Proxy) is an open-source dynamic application security testing (DAST) tool designed to find vulnerabilities in web applications. It acts as an intercepting proxy between the browser and web servers, allowing security testers and developers to inspect traffic and perform automated security assessments.

Download for Windows

github.com · Official website

Version
2.17.0
Release date
Dec. 15, 2025
License
Apache-2.0
Installer type
exe
Install from the command line
How do I use this?

Type Terminal in the Start menu and open it, paste the command (Ctrl+V or right-click) and press Enter. It uses winget, Windows' own package manager, to install the program from its official source.

winget install --id ZAP.ZAP -e
SHA256 (file verification)ebdaf6f00ffd9c21891d29360196e13a14091f84dde2bfa1e0b61213a93bc5ca

How to install

  1. Download the official installer using the button on this page, or run 'winget install --id ZAP.ZAP -e' in a terminal.
  2. Open the downloaded installer and complete the setup wizard.
  3. Launch ZAP from the Windows Start menu.