OWASP ZAP
7.6#1 in web application security scannersFree planFree planAPIExtensionLinuxmacOS
VisitOWASP ZAP vs Reconmap
What both publish
| Fact | OWASP ZAP | Reconmap |
|---|---|---|
| API | The API and daemon mode provide programmatic control over ZAP, including scanner and spider operations. | Reconmap provides a REST API and API token authentication for connecting external tools and scripts. |
| Automation | The Automation Framework controls ZAP with a YAML plan and supports jobs including active scanning, passive scanning, spidering, API imports, and report generation. | Users can automate security commands and schedule commands using cron expressions. |
| Deployment | ZAP publishes Docker images, including a bare image described as minimal and ideal for CI. | Deployment options include Docker Compose, Kubernetes, manual installation, and a hosted SaaS offering maintained by the project’s lead developers through Netfoe. |
| Purpose | ZAP is a web application scanner and proxy for security testing. | Reconmap is an open-source collaboration platform for InfoSec professionals to plan, execute, and document penetration test projects across assets and clients. |
OWASP ZAP plans
- Free / open sourceFree
- ZAPFree
Reconmap plans
- Free and open sourceFree
Pick OWASP ZAP if…
ZAP is intended for developers, testers new to security testing, and security testing specialists. Its automation and Docker options also suit teams incorporating scans into CI workflows.
Pick Reconmap if…
Reconmap is suited to InfoSec professionals coordinating penetration test work across clients and assets. The documentation lists Docker Compose for small teams and Kubernetes for production deployments and large teams.