ZAP by Checkmarx
Reviews
Star rating
Rank in Dynamic Application Security Testing (DAST)
Pros and cons
Pros
- Ease of Use
- Automation
- Automated Testing
- Scanning Efficiency
- Easy Integrations
- Pentesting Efficiency
Cons
- False Positives
- Poor Documentation
- Poor Customer Support
- Navigation Problems
- Limited Scope
- Slow Performance
Traffic & LLM citations
Source: G2 review data
Winning from
Losing to
Key stats
Adoption by company size
| Segment | Share of reviews |
|---|---|
| Small Business | 71.4% |
| Mid-Market | 14.3% |
| Enterprise | 14.3% |
Quarterly history
| Quarter | Reviews | Star rating |
|---|---|---|
| 2024 Q4 | 1 | 5.0 |
| 2025 Q3 | 1 | — |
| 2026 Q2 | 1 | 4.0 |
Satisfaction ratings
What reviewers say
Open-Source Powerhouse with Room for UI Improvement
“I find the automated scans in ZAP by Checkmarx help me save time and offer valuable reports and suggestions. I like that the reports come in different formats, which is really convenient. Also, I appreciate that it's open-sourced, which adds to its flexibility. Plus, the initial ”
the best web application security scanner
“Zap is one of the best web application security scanner ithink it has more features than burpsuite. ZAP has more automated scan features and the spider fuzz and ajax spider they are really amazing . i like recommend using ZAP for automated scans.”
ZAP is open source user friendly efficient pentesting tool.
“1. It is open source 2. Customizable dashboards and user friendly interface 3. Active and Passive automated Scanning provided along with proxy interception support. 4. easy integration with CI/CD piplelines”