Web Security security
ZAP
zaproxy.org
ZAP is listed in the WorkFlowAI resources directory under Web Security. Web App Security Testing Official site: zaproxy.org.
Source notes
Web App Security Testing
Back to resources
Visit official site
Why builders use ZAP
If you are assembling an AI stack — local models, agents, automation, or creative tooling — ZAP appears frequently in the Web Security category. Pair it with our automation workflows and MCP directory when you need runnable recipes, not just links.
How to evaluate it quickly
- Open the official site and confirm license / pricing for your use case.
- Check whether it runs locally, in the cloud, or both.
- Look for API or MCP integration if you plan to automate it.
- Cross-link related WorkflowAI recipes below before building from scratch.
More in Web Security
Related MCP / Skills
- Security Review Agent Skill
Threat modeling checklist for web apps: auth, secrets, injection, and abuse cases.
- flowzap-xyz/flowzap-mcp
[](https://glama.ai/mcp/servers/flowzap-xyz/flowzap-mcp) 📇 ☁️ 🏠 🍎 🪟 🐧 - Create workflow, sequence, and architecture diagrams using FlowZap Code DSL. 7 tools for validation, playground URL generation, syntax docs, graph export, artifact parsing, diffing, and patching. No API key required. Install via NPM: `npx -y flowzap-mcp`