FAQ: What 'calls home' does ZAP make?
ZAP makes a limited set of 'calls home', typically via bitly.com URLs.
Bitly.com is used so that we get a very limited form of telemetry data without getting access to any sensitive data such as your IP address.
ZAP can be freely downloaded and we get very little feedback from most users - this at least tells us if ZAP is getting more or less popular :)
Check for Updates
ZAP makes one request to see if ZAP or any of the add-ons are up to date.
The bitly URL resolves to the relevant version file in the zap-admin github repo, eg ZapVersions-2.8.xml
This check will be done at most once per day and can be disabled via the Desktop UI Check for Updates Options screen.
Browser Launch Start Page
By default the Quick Start add-on makes one request to see if there is a new Quick Start page - this is the HTML shown by default when a browser is launched from ZAP.
The bitly URL resolves to the relevant quick start file in the zap-admin github repo, eg 2.7.html
This will be discontinued from ZAP 2.8.0
Starting from ZAP 2.8.0 the Quick Start add-on will make one request to see if there is any new ZAP news.
The bitly URL resolves to the relevant quick start file in the zap-admin github repo, eg 2.8.xml
Starting from ZAP 2.8.0 a new '-silent' command line option will be added that will prevent ZAP from making any 'calls home'.
Note that some third party add-ons may not obey the '-silent' option.
This FAQ will be updated to detail any of the add-ons in the ZAP Marketplace that fall into this category.