The worlds most frequently used web app scanner. Free and Open Source.
Publisher’s description
What is Zed Attack Proxy?
Zed Attack Proxy by ZAP is open-source Windows software in the vpn & proxy category. It ranks 10th by popularity among vpn & proxy in this catalogue. It is written in Java.
Installation and requirements
The publisher provides EXE installers for 64-bit Windows. Installation asks for administrator rights. A silent install is possible with the installer’s documented switches.
Updates and version history
The current version is 2.17.0, released on December 15, 2025. The version history goes back to January 10, 2025: 3 releases, all linked to the official files.
Popularity and file types
The Chocolatey package has been downloaded 139,554 times. The source code on GitHub (zaproxy/zaproxy) has 15,993 stars. Similar programs include OpenVPN, nginx and Proton VPN.
Project description on GitHub: “The ZAP by Checkmarx Core project”
Pros / Cons
Pros
- Open source: the code can be inspected and built by anyone
- Documented silent install
- Large user base
Cons
- No native ARM64 build
- Installation needs administrator rights
In short: Zed Attack Proxy is an open-source vpn & proxy tool for 64-bit PCs. Administrators can deploy it unattended.
Is Zed Attack Proxy safe to download?
- The file is served by github.com, the publisher’s own domain
- The download link uses HTTPS
- A SHA256 hash is published, so you can verify the file:
EBDAF6F00FFD9C21891D29360196E13A14091F84DDE2BFA1E0B61213A93BC5CA· Open the VirusTotal report for this hash - The link has not been checked yet
- The source code is public
- ExeAtlas does not host, wrap or modify installers
Related guide: How to check a file’s SHA256 hash on Windows
Security practices (OpenSSF Scorecard)
Automated checks of the zaproxy/zaproxy repository on GitHub by the Open Source Security Foundation, last run on October 19, 2026.
- Actively maintained10
- Code review10
- No dangerous workflows10
- Security policy10
- Licence declared10
- Static code analysis10
- Published packages10
- No binaries in the repository9
- OpenSSF Best Practices badge5
- Pinned dependencies4
- Restricted token permissions0
- Fuzzing0
- Signed releases0
The score rates how the project is developed and released, not whether the program is safe to install. scorecard.dev
Recent versions
All 3 versions ›| Version | Date | Size | Files |
|---|---|---|---|
| 2.17.0Latest | December 15, 2025 | — | 64-bit EXE |
| 2.16.1 | March 25, 2025 | — | 64-bit EXE |
| 2.16.0 | January 10, 2025 | — | 32-bit EXE64-bit EXE |
Install from the command line
Silent install ›winget install --id ZAP.ZAP -echoco install zap -yZAP_2_17_0_windows.exe -qRelated guide: How to use winget: install and update apps
Information
- Publisher
- ZAP
- Category
- VPN & proxy
- Licence
- Apache-2.0
- Price
- Free
- Source code
- github.com/zaproxy/zaproxy
- Written in
- Java
- Requires
- Windows 11 / 10
- Architecture
- 64-bit
- Installer
- EXE
- Version
- 2.17.0
- Released
- December 15, 2025
- Added to the catalogue
- January 13, 2025
- Versions listed
- 3
- Chocolatey downloads
- 139,554
- GitHub stars
- 15,993
- GitHub forks
- 2,672
- Website
- github.com
- winget ID
- ZAP.ZAP
- Chocolatey package
- zap
Ratings and reviews
No reviews yet. Be the first to rate it.
Alternatives to Zed Attack Proxy
See all ›-
Open source1.8M ↓ -
nginx1.31.8NGINX is the world's most popular Web Server, high performance Load Balancer, Reverse Proxy, API Gateway and Content Cache.Open source286.5K ↓ -
Open source152.7K ↓ -
Tailscale1.104.2Tailscale is a WireGuard based mesh VPN, used to connect your computers and other devices together securely without proxies.Open source568.1K ↓ -
Netbird0.81.4Connect your devices into a secure WireGuard®-based overlay network with SSO, MFA and granular access controls.Open source169.6K ↓ -
Open source78K ↓ -
Windscribe2.24.13Windscribe encrypts your browsing activity, blocks ads, and unblocks entertainment contentOpen source56.5K ↓ -
Open source14.7K ↓
Frequently asked questions
Is Zed Attack Proxy free?
Yes. Zed Attack Proxy is open-source software under the Apache-2.0 licence.
Is Zed Attack Proxy safe to download?
The download comes from github.com, which belongs to the publisher; ExeAtlas does not host or change the file. Compare its SHA256 hash with the one shown here, or open the VirusTotal report for that hash.
How do I install Zed Attack Proxy with winget?
Open PowerShell or Windows Terminal and run the winget command shown on this page. winget downloads the official installer and checks its SHA256 hash before running it.
Can Zed Attack Proxy be installed silently?
Yes. The silent install page lists the exact command for each installer.
Does Zed Attack Proxy run on ARM (Windows on Arm)?
There is no ARM64 build; Windows 11 on Arm can run the 64-bit version through emulation.
Where can I download an older version of Zed Attack Proxy?
The versions page lists all 3 versions with links to their official installer files, back to January 10, 2025.
What are alternatives to Zed Attack Proxy?
OpenVPN, nginx, Proton VPN, Tailscale and Netbird. The alternatives page compares them.
