OWASP ZAP

Purpose

Use this skill for OWASP Top 10-oriented web and API testing when the engagement needs a proxy, baseline scanner, or repeatable web validation workflow.

Phase Fit

• Primary: Vulnerability Analysis
• Secondary: Validation and Controlled Impact Demonstration, Retest and Closure

Use When

• Need baseline web scanning aligned to common OWASP categories.
• Need proxy-based request inspection or replay.
• Need repeatable web retests after remediation.

Avoid When