OWASP Zed Attack Proxy (ZAP) The Zed Attack Proxy (ZAP) is an easy to use integrated penetration testing tool for finding vulnerabilities in web applications. 20 Penetration Testing ToolWeb Debugger# fuzzer# network-testing# network-tests