Zed Attack Proxy (ZAP) Alternatives

Zed Attack Proxy (ZAP) is described as 'The Zed Attack Proxy (ZAP) is an easy to use integrated penetration testing tool for finding vulnerabilities in web applications' and is a penetration testing tool in the network & admin category. There are more than 25 alternatives to Zed Attack Proxy (ZAP) for a variety of platforms, including Windows, Linux, Mac, Web-based and SaaS apps. The best Zed Attack Proxy (ZAP) alternative is Fiddler, which is free. Other great apps like Zed Attack Proxy (ZAP) are mitmproxy, HTTP Toolkit, Charles and Burp Suite.

Copy a direct link to this comment to your clipboard
Alternatives
Get a badge for your siteZed Attack Proxy (ZAP) alternatives page was last updated

Alternatives list

  1. Intruder icon
     11 likes

    Intruder is a security monitoring platform for internet-facing systems.

    Intruder provides an easy to use security solution which continually scans your digital assets, highlighting vulnerabilities and outlining remediation advice in simple terms.

    Cost / License

    • Paid
    • Proprietary

    Application type

    Platforms

    • Online
    Good alternative?
     
  2. Vulners API icon
     1 like

    Vulners is a high-quality correlated database of software vulnerabilities. Users can create a custom VM solution using our consolidated database through API, multiple vulnerability scanners, plugins, and many other security tools and integrations.

    Cost / License

    • Freemium
    • Proprietary

    Application type

    Platforms

    • Linux
    • Online
    • Software as a Service (SaaS)
    Good alternative?
     
  3. IEWatch icon
     Like

    IEWatch is a plug-in for Microsoft Internet Explorer that helps you achieve your web development and web analysis tasks more efficiently.

    Cost / License

    • Paid
    • Proprietary

    Platforms

    • Windows
    Good alternative?
     
  4. Stop breaches before they happen. RogueSight protects your Web Applications and APIs with continuous scanning, actionable insights and clear remediation guidance.

    Cost / License

    • Paid
    • Proprietary

    Platforms

    • Software as a Service (SaaS)
    Good alternative?
     
  5. HTTPeep icon
     Like

    Modern HTTP debugging tool, Debug, mock, and rewrite HTTP/HTTPS traffic with composable rules.

    Cost / License

    • Freemium
    • Proprietary

    Platforms

    • Mac
    • Windows
    • Linux
    • US flagUnited States
    HTTPeep screenshot 1
    Good alternative?
     
  6. At Nikto Online Scanner, we are dedicated to providing a comprehensive solution for assessing the security of web servers. Our platform offers a powerful tool that conducts extensive tests to identify potential vulnerabilities, misconfigurations, and security risks associated...

    Cost / License

    • Freemium
    • Proprietary

    Platforms

    • Online
    Good alternative?
     
  7. Scan your APIs for prompt injection and 12 security checks in less than a minute, MCP, CLI and GH Action ready to CI/DI integration.

    Cost / License

    • Freemium
    • Proprietary

    Platforms

    • Online
    • Software as a Service (SaaS)
    Good alternative?
     
  8.  Like

    Xalgorix is an Apache-2.0 open-source autonomous AI pentester for web applications and source repositories. It runs a structured 22-phase methodology, orchestrates security tools and browser-assisted testing, then sends candidate findings to an independent verifier that attempts...

    Cost / License

    Application type

    Platforms

    • Online
    • Self-Hosted
    • Software as a Service (SaaS)
    • Docker
    Good alternative?
     
  9. Interceptor is a local-first desktop HTTP/HTTPS proxy for authorized security testing, traffic capture, replay, diagnostics, and evidence-ready reporting.

    Cost / License

    • Paid
    • Proprietary

    Platforms

    • Linux
    Good alternative?
     
You are at page 4 of Zed Attack Proxy (ZAP) alternatives