--- title: ZAP by Checkmarx Reviews meta_title: 'ZAP by Checkmarx Reviews 2026: Details, Pricing, & Features | G2' meta_description: Filter 14 reviews by the users' company size, role or industry to find out how ZAP by Checkmarx works for a business like yours. aggregate_rating: rating_value: 4.7 review_count: 14 scale: '5' date_modified: '2026-08-07' parent_category: name: "DevSecOps\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t" url: https://www.g2.com/categories/devsecops --- # ZAP by Checkmarx Reviews **Vendor:** Checkmarx **Category:** [Penetration Testing Tools](https://www.g2.com/categories/penetration-testing-tools) **Average Rating:** 4.7/5.0 **Total Reviews:** 14 ## About ZAP by Checkmarx ZAP by Checkmarx, formerly known as Zed Attack Proxy , is a leading open-source web application security scanner designed to help developers, testers, and security professionals identify vulnerabilities in web applications. Actively maintained by a global community, ZAP offers both automated and manual testing capabilities, making it suitable for users with varying levels of security expertise. Key Features and Functionality: - Automated Security Scanning: ZAP provides simple, single-click automated scanning, enabling users to identify security flaws with ease. - Active and Passive Scanning: Utilizes both passive and active scanning techniques to uncover a wide range of security vulnerabilities. - Advanced User Controls: Offers tools like manual interception, fuzzing, and forced browsing for thorough penetration testing. - CI/CD Integration: Seamlessly integrates with Continuous Integration/Continuous Deployment pipelines, automating security testing within development workflows. - Cross-Platform Support: Compatible with Linux, Windows, and macOS operating systems. Primary Value and Problem Solved: ZAP by Checkmarx addresses the critical need for accessible and effective web application security testing. By offering a free, open-source solution with both automated and manual testing capabilities, ZAP empowers organizations to identify and remediate vulnerabilities early in the development lifecycle. Its integration with CI/CD pipelines ensures that security becomes an integral part of the development process, reducing the risk of security breaches and enhancing overall application security. ## ZAP by Checkmarx Pros & Cons **What users like:** - Users enjoy the **easy integrations** with CI/CD tools, enhancing automation and streamlining their workflows effectively. (3 reviews) - Users find ZAP by Checkmarx enhances **pentesting efficiency** with its ease of use and comprehensive testing capabilities. (3 reviews) - Users appreciate the **customizable dashboards** in ZAP, enhancing user experience and meeting specific testing needs. (2 reviews) - Users appreciate the **easy integration with CI/CD pipelines** , enhancing workflow efficiency and automation in development processes. (2 reviews) - Users love the **customizable and user-friendly interface** of ZAP, making penetration testing accessible to all. (2 reviews) - Affordable (1 reviews) - Users praise ZAP's **exceptional automated testing features** , highlighting its effectiveness in vulnerability assessments and integrations. (1 reviews) - Users appreciate the **advanced automation features** of ZAP, making web application security scanning efficient and user-friendly. (1 reviews) - Clear Interface (1 reviews) - Dashboard Usability (1 reviews) **What users dislike:** - Users report frequent **false positives** that require manual verification, complicating the effectiveness of ZAP by Checkmarx. (3 reviews) - Users find the **poor documentation** frustrating, as it lacks support for troubleshooting errors effectively. (2 reviews) - Users note the **limited automated tasks** in ZAP, lacking many features found in other web pen testing applications. (1 reviews) - Users report facing **navigation problems** due to insufficient documentation and support for ZAP by Checkmarx. (1 reviews) - Users report a lack of **documentation and support** , leading to frustrations and challenges while using ZAP by Checkmarx. (1 reviews) - Slow Performance (1 reviews) - [View ZAP by Checkmarx pricing details and edition comparison](https://www.g2.com/products/zap-by-checkmarx/reviews?page=2§ion=pricing&secure%5Bexpires_at%5D=2026-08-07+11%3A15%3A58+-0500&secure%5Bsession_id%5D=0798c7d8-ab9e-47f1-b1fc-a70c69fc5c8d&secure%5Btoken%5D=1777727096bf9dc2b174d966aef1386953621b39de6078c96e9046bd365aaa82&format=llm_user) ## ZAP by Checkmarx Features **Administration** - API - Extensibility - Reporting and Analytics **Administration** - API / Integrations - Extensibility **Analysis** - Issue Tracking - Reconnaissance - Vulnerability Scan - Compliance Management - Automatic Scans - SPA Scans **Analysis** - Reporting and Analytics - Issue Tracking - Static Code Analysis - Vulnerability Scan - Code Analysis **Testing** - Command-Line Tools - Manual Testing - Test Automation - Performance and Reliability **Testing** - Manual Testing - Test Automation - Compliance Testing - Black-Box Scanning - Detection Rate - False Positives **Additional Functionality** - Network Mapping - Activity Dashboard - SQL Injections - Audit Management - Threat Intelligence - Assignment Management - Integration Management - User Management - Asset Discovery - Remediation Management - Vulnerability Scanning - Generative AI - Multi-User Collaboration - AI Copilot - Web-Application Security - Vulnerability Assessment - Security Auditing - Runtime Container Security - Network Scanning - Password Cracking - Simulated Threat Attacks - Certificates - Alerts/Notifications - Real-Time Data - Cross-Site Scripting - Exploit Frameworks ## Top ZAP by Checkmarx Alternatives - [GitLab](https://www.g2.com/products/gitlab/reviews) - 4.5/5.0 (884 reviews) - [Tenable Nessus](https://www.g2.com/products/tenable-nessus/reviews) - 4.5/5.0 (290 reviews) - [Acunetix by Invicti](https://www.g2.com/products/acunetix-by-invicti/reviews) - 4.1/5.0 (100 reviews)