OWASP ZAP vs Rapid7 Surface Command
| OWASP ZAP | Rapid7 Surface Command | |
|---|---|---|
| Free plan | Yes | No |
| Free trial | No | Yes |
| Paid from | Free | — |
| Open source | No | No |
| Platforms | api, Linux, macOS, self-hosted, Windows | api, Linux, macOS, Web, Windows |
| Free plan | Yes | No |
| API testing | Yes | — |
| Deployment | — | on-prem |
| Web app testing | — | Yes |
| Network testing | — | Yes |
| Evidence capture | — | Yes |
Both are listed in Best Penetration Testing Software, Best Web Application Security Scanners, Best Dynamic Application Security Testing Software. On Everything Xiaomi, OWASP ZAP scores higher on our published basis.