Not sure how to start using ZAP? Read the Getting Started Guide (pdf).
Checksums for all of the ZAP downloads are maintained in the relevant version files.
As with all software we strongly recommend that ZAP is only installed and used on operating systems and JREs that are fully patched and actively maintained.
| Windows (64) Installer | 2017-11-28 | 111 MB | Download now |
| Windows (32) Installer | 2017-11-28 | 75 MB | Download now |
| Linux Installer | 2017-11-28 | 126 MB | Download now |
| Linux Package | 2017-11-28 | 124 MB | Download now |
| MacOS Installer | 2017-11-28 | 179 MB | Download now |
| Cross Platform Package | 2017-11-28 | 230 MB | Download now |
This contains the core set of functionality, and you can add more functionality at any time via the ZAP Marketplace.
The Windows and Linux versions require Java 8 or higher to run.
The installers are built using a multi-platform installer builder.
The MacOS version includes Java 8 - you can use the Linux or Cross Platform versions if you do not want to download this.
For more information about this release see the release notes.
| Cross platform | 2017-11-28 | 35.2 MB | Download now |
This contains the minimal set of functionality to get you started and is ideal for people new to ZAP.
You can add more functionality at any time via the ZAP Marketplace.
It is cross platform (Mac OS X, Linux, and Windows) but does not include any installers.
It requires Java 8 or higher to run.
There are 4 Docker images available:
- zap2docker-stable : full 2.7.0 release
- zap2docker-bare : minimal 2.7.0 release - ideal for CI environments
- zap2docker-weekly : the latest weekly release
- zap2docker-live : the very latest source code
See Docker for more details.
On Mac OS X you can also install ZAP using Homebrew Cask:
brew cask install owasp-zapThe latest version of ZAP is now on the stable channel, so you can install it using:
snap install zaproxy --classiczaproxy| Weekly - cross platform | 2019-04-29 | 332 MB | Download now |
We generate weekly releases of ZAP from the develop branch, typically every Monday.
These are just intended for people who want to use all of the features we've added since the last 'full' release but don't want the hassle of building ZAP from the source code.
While we endeavor to ensure that weekly releases are robust, things may be broken or only partially implemented.
It is cross platform (Windows, Linux and Mac OS) but does not include any installers.
It requires Java 8 or higher to run.
We maintain a page containing XML with links to the latest ZAP release files: https://raw.githubusercontent.com/zaproxy/zap-admin/master/ZapVersions.xml
You can use this to automatically pull down the latest ZAP release for the platform you need.
ZAP uses similar URLs when checking for updates.
These are version specific and define the add-on on the ZAP Marketplace for that release stream.
The 2.7 release stream uses: https://raw.githubusercontent.com/zaproxy/zap-admin/master/ZapVersions-2.7.xml
The development code uses: https://raw.githubusercontent.com/zaproxy/zap-admin/master/ZapVersions-dev.xml
At the moment these files are the same, but it does allow us to maintain different versions of add-ons for different versions of ZAP, if we need to support this in the future.
See the Building page for details about this and information about other IDEs.