OWASP ZAP
7.6#1 in web application security scannersFree planFree planAPIExtensionLinuxmacOS
VisitOWASP ZAP vs Wapiti
What both publish
| Fact | OWASP ZAP | Wapiti |
|---|---|---|
| Authentication | Authentication features include browser-based, script-based, header-based and OAuth2 methods through the Authentication Helper add-on. | It supports Basic, Digest, and NTLM authentication, login forms, browser cookie imports, and custom Python code for complicated authentication cases. |
| Purpose | ZAP is a web application scanner and proxy for security testing. | Wapiti is a Python web vulnerability scanner that audits websites and web applications. |
OWASP ZAP plans
- Free / open sourceFree
- ZAPFree
Wapiti plans
- Free and open-sourceFree
Pick OWASP ZAP if…
ZAP is intended for developers, testers new to security testing, and security testing specialists. Its automation and Docker options also suit teams incorporating scans into CI workflows.
Pick Wapiti if…
Wapiti suits developers and security teams auditing deployed web applications or REST APIs, including authenticated areas. It is for users who can meet its Python requirements and have the target owner's consent.