Zap Automated Security Scan Orchestrator

---
name: "ZAP Automated Security Scan Orchestrator"
slug: "zap-automated-security-scan-orchestrator"
description: "Orchestrates OWASP ZAP security scans via the ZAP API with automated spider, active scanner, and authentication sequence configuration. Generates compliance reports mapped to OWASP Top 10 and exports findings in SARIF and JUnit XML formats."
github_stars: 15007
verification: "security_reviewed"
source: "https://github.com/zaproxy/zaproxy"
author: "OWASP ZAP"
category: "Security & Verification"
framework: "Codex"
tool_ecosystem:
  github_repo: "zaproxy/zaproxy"
  github_stars: 15007
---

# ZAP Automated Security Scan Orchestrator

Orchestrates OWASP ZAP security scans via the ZAP API with automated spider, active scanner, and authentication sequence configuration. Generates compliance reports mapped to OWASP Top 10 and exports findings in SARIF and JUnit XML formats.

## Prerequisites

Java or Docker

## Installation

Requirements and caveats from upstream:
- ![Docker Live Release](https://github.com/zaproxy/zaproxy/actions/workflows/release-live-docker.yml/badge.svg)

Basic usage or getting-started notes:
- ![Integration Tests](https://github.com/zaproxy/zaproxy/actions/workflows/run-integration-tests.yml/badge.svg)

- Source: https://github.com/zaproxy/zaproxy
- Extracted from upstream docs: https://raw.githubusercontent.com/zaproxy/zaproxy/HEAD/README.md

## Documentation

- https://www.zaproxy.org/docs/

## Source

- [Agent Skill Exchange](https://agentskillexchange.com/skills/zap-automated-security-scan-orchestrator/)