ZAP Serverless

This is a small experiment to run OWASP Zed Attack Proxy in a serverless environment

Usage

$ serverless deploy

The results were not satisfying. The maximum run time for a Lambda is 15 minutes and as a result, the scanner does not have time to work properly 😕
The best performance was obtained by running the scanner in the fastest profiles, as well as narrowing down the analysis to riskier failures (e.g. SQL Injection)

This project is distributed under the MIT license

Name		Name	Last commit message	Last commit date
Latest commit History 1 Commit
packages		packages
src		src
.eslintrc.json		.eslintrc.json
.gitattributes		.gitattributes
.gitignore		.gitignore
LICENSE		LICENSE
README.md		README.md
package-lock.json		package-lock.json
package.json		package.json
serverless.yml		serverless.yml
tsconfig.json		tsconfig.json