OWASP ZAP
7.6#1 in web application security scannersFree planFree planAPIExtensionLinuxmacOS
VisitOWASP ZAP vs Veracode DAST
Veracode DAST
6.2#12 in dynamic application security testing softwareWebAPILinuxmacOS
VisitWhat both publish
| Fact | OWASP ZAP | Veracode DAST |
|---|---|---|
| Founded | 2010 | 2006 |
| Purpose | ZAP is a web application scanner and proxy for security testing. | Veracode DAST is a Dynamic Application Security Testing solution for automated, scalable scanning of web applications and REST APIs. |
OWASP ZAP plans
- Free / open sourceFree
- ZAPFree
Veracode DAST plans
- Veracode DASTPriced on request
Pick OWASP ZAP if…
ZAP is intended for developers, testers new to security testing, and security testing specialists. Its automation and Docker options also suit teams incorporating scans into CI workflows.
Pick Veracode DAST if…
It suits teams that need automated security scans for live web applications and REST APIs, including assets behind firewalls. Its CI/CD connections and configurable scans may fit teams integrating testing into development workflows.