OWASP Zap Review

Easy-to-use interface, but the documentation needs to be improved

What is our primary use case?

We primarily use this product for web application scanning.

What is most valuable?

The interface is easy to use.

What needs improvement?

The documentation needs to be improved because I had to learn everything from watching YouTube videos.

For how long have I used the solution?

I have been working with OWASP Zap for about three months.

What do I think about the stability of the solution?

I have not experienced any trouble in terms of stability.

What do I think about the scalability of the solution?

Scalability has not been an issue, so far. There are four of us in the company that can log in to use it.

How are customer service and technical support?

I have not been in contact with technical support.

How was the initial setup?

The initial setup was straightforward. For me, I just had to press "Next" several times. Between the installation, downloading videos, and investigating how to deploy it, I would say that the process took roughly a day.

What about the implementation team?

I did not require third-party assistance for the deployment.

What was our ROI?

This solution is providing us with value and as long as it continues to do so, we'll continue to use it.

What's my experience with pricing, setup cost, and licensing?

This is an open-source solution and can be used free of charge.

What other advice do I have?

This is a good product where most of the functionality is free, which is why I recommend that others use it.

I would rate this solution a seven out of ten.

Which deployment model are you using for this solution?

**Disclosure: I am a real user, and this review is based on my own experience and opinions.
More OWASP Zap reviews from users
...who work at a Computer Software Company
...who compared it with PortSwigger Burp
Add a Comment