Credits

ZAP Core Team (Current)

People who have made significant enhancements to the latest releases.
For more details of code contributions see: https://www.openhub.net/p/zaproxy/contributors

Simon Bennetts (@psiinon) - Sponsor on GitHub
thc202 - Sponsor on GitHub
Rick Mitchell (@kingthorin_rm) - Sponsor on GitHub
Akshath Kothari (@ricekot_) - Sponsor on GitHub

ZAP Extended Team

People who have made contributions to ZAP over the years, in alphabetical order:

70pointer
Mostafa AbdelMoez
Jean Abed
Bilal Achahbar
Tushar Aggarwal
Amro Alolaqi
Matthias Altmann (@secf00tprint)
André Alves (@andrealvesdev)
Mário Areias
Matt Austin (@mattaustin)
Abdelhadi Azouni
Mennouchi Islam Azeddine
Ahmed Bahajjaj (@madanalogy)
Yang Bai (@Geekby)
Florent Baillais (@flocurity)
Adam Baldwin (@adamhawkbaldwin)
Jay Ball
Adrien de Beaupre
Florian Beijers (@zersiax)
KC Berg (@kberg108) - StackHawk
Alla Bezroutchko - Gremwell
Artemy Bogdanov (@Abr1k0s)
Yvan Boily
Rodrigo Bonifácio
Glib Briia (@glib-briia)
Rauf Butt
Ailton Caetano
Kim Carter (@binarymist)
Eranda Chandrika
ciceroff
Jonathan Claudius (@claudijd)
Adrian Clay
Kyle Cooper (@FiveOFive)
Gustavo Covas (@gustavocovas)
Baptiste Crépin - AXA Group Security
Johanna Curiel
Chris Dailey (@dailz-c)
Karl Dalley (@gnirlos)
Anamika Das (@AnamikaD)
Patrick Double (@double16)
Mike Emery - Portcullis Security
Leandro Ferrari - Talsoft SRL
Freakyclown - Portcullis Security
Michael Gabriel (shamashel)
Patrick Galley
Lakshya Garg (@LakiG)
Scott Gerlach (@sgerlach) - StackHawk
Giothysham
Thiago Gomes
Mark Goodwin
Chris Grieger
Daniel Grunwell (grunny)
GRVial
Aryan Gupta (LinkedIn)
Houcem Hachicha
Wil Hadden (@WilHadden)
David Hall
Keith Hamasaki - TeamPraxis
Niranjan Hegde (nhegde610)
Omer Levi Hevroni
Stevie Holdway
Jannik Hollenbach (@j12934)
Oleksandr Horokh
Daiki Ichinose (@mahoyaya)
Taras Ivashchenko, OWASP Russia
Shershon A J (Shershon25)
Eswarprasath Jayaraman (ejayaraman)
Jon (@flibustier)
Tan Jin (@tjtanjin)
Martin Kalina
Karthik UJ (@5up3r541y4n) - Astra Security
Yashvendra Kashyap (@Yashvendra)
Eoin Keary
David Keeler (@mozkeeler)
James Kettle (Burp Suite)
Samir Khakimov
Mahmoud Khalil (@khalil2535)
Björn Kimminich
April King
Martin W. Kirst (MaWoKi)
Manos Kirtas
Markus Kiss (@markuskiss)
Juha Kivekäs (@_guttula)
Dennis Kniep
Robert Koch
Savva Kodeikin
Christian Koidl
Chandaluri Vamsi Krishna (@Vamsikrishna99C)
Lars Kristensen
Erik de Kuijper (@edkpr)
Laurent Laubin - Quarkslab
Gwilym Lewis – Appsecco
Sajeeb Lohani (sml555) - Bulletproof ZDS
Dejan Lukan (eleanor)
Pulasthi Mahawithana
Sherif Mansour
Yuji Matsunaga - CyberDefense
Justin Matte (JFM9)
Rory McCune - NCC Group PLC
Russ McRee
Vitor Meireles
Malik Mesellem - MME
Dr. Markus Maria Miedaner
Steve Milner (ashcrow)
Liang Mingqiang (@mqliang)
Gustavo Mitsuichi
Kajan Mohanagandhirasa (@GM_K4J4N)
Vladimir Molotkov (BrandMaker GmbH)
rnehra01 (Ravinder Nehra)
Jonathan Ness
Axel Neumann
Alessandro de Oliveira Faria - openSUSE RPM Packager (A.K.A. Cabelo)
Stefan Østergaard Pedersen
Adrien PAILHES
Anthon Pang
Alan Parkinson
David Petrasovic
Yvan Phélizot
Pierre-David (@ouaibe)
PlainUrban
Paul Pollack
Andrea Pompili (Yhawke),
Prasad N. Shenoy
Zakaria Rachid (@zackhimself)
Mark Rader
Matt Raible
Vahid Rafiei (@vahid_r)
Javan Rasokat
Aman Rawat (@theamanrawat)
rugk
Guifre Ruiz Utges
Dobin Rutishauser - Compass Security AG
Bunyanuch Saengnet
Najam Ul Saqib (@cybersoldier)
Goran Sarenkapa (JordanGS)
Karan Preet Singh Sasan (@preetkaran20)
Pranav Saxena (@pranavsaxena17)
Dominic Scheirlinck (@dominics)
Peter Schuler
Rafał Ścipień
David Scrobonia (@david_scrobonia)
Justin Searle
Alessandro Secco
Nirojan Selvanathan (@sshniro)
Bill Sempf - Columbus OWASP
Sparsh Sethi (@code-sparsh)
Chaitanya Sharma (@phoenix24)
Zainab Al Showely
Raul Siles - DinoSec
Diogo Silva (@Dimiresi)
Anshul Singh (@levihackerman-102)
Siddharth Singh (@runny_sunny, @Siddharth3330)
Benjamin Slack of http://www.nimajneb.com/
Yannic Smeets
Andreas Sommer
Vitika Soni (@VitikaSoni)
David Sopas (@dsopas)
Josh Soref (@jsoref)
Cosmin Stefan-Dobrin
Sunny (darkowlzz) [email protected]
Daniel Thompson-Yvetot (@nothingismagick)
Stefan Tobler
Ken Treimann, Cyber Ninja
Marvin Uta
Varsha Venkatesh
Jose Henrique Ventura
Milic Vuletic
Kevin Wall
Martin Walton - Laterooms.com
Dave Wichers
Hichem Yagoubi (@jini0x)
Joset Zamora (@setzamora)
Alexander Zapasnik

ZAP Localization

ZAP localization is organized via https://crowdin.com/project/zaproxy

Azerbaijanian Rashad Aliyev www.microphp.com
Bosnian Rijad Osmanovic
Brazilian Portuguese Nichols Jasper, Paulo Brito, Mário Areias - @MarioAreias
Chinese Hui-zhong Shi
Danish Hans-Michael Varbaek
Dutch Asif Minhas
Filipino Arnel Mangilinan
French Patrick M.J. Roth: @PMJRoth, Thomas Piart, Azzeddine Ramrami, Cosmin Stefan, Franck Arnulfo, Sebastien Gioria, Jonas Freiburghaus
German Axel Neumann - Compass Security AG, Cosmin Stefan, Robert Koch, TheStone, Thomas Schöfbeck, Kevin Lapagna
Greek iassael, [email protected]
Hindi A Abhilash
Hungarian Csaba Kabai
Indonesian za
Italian Fabio Baroni @Fabiothebest89, Michele Pedrazzoli
Japanese Ichiro, Sen UENO, Tetsuji KOYAMA, Motoshige AYAKI, Tsuyufumi WATANABE, @nightyknite, nilfigo, Yuho Kameda, Daiki Ichinose (@mahoyaya)
Persian Mohsen Mostafa Jokar
Polish Lukasz, Patryk Orwat, Adam Ziaja - https://adamziaja.com, Michał Kapica
Spanish Team Iniqua - http://www.iniqua.com, Guifre Ruiz Utges, Leandro Ferrari - Talsoft SRL, Gaspar Modelo Howard, Felipe Zipitria, Fran J. Gomez @ffranz, Alejandro J. Saiz @ocixela, Mauro Gioino, Fernando Raviola, Gerardo Canedo, Jose Bustamante Romero - [email protected], Carmelo Zubeldia, Surgat (@surgattheboss)
Turkish Ender Çulha - [email protected]

3rd Party Libraries and Files

Andiparos https://code.google.com/archive/p/andiparos
Apache Commons https://commons.apache.org/
BeanShell http://www.beanshell.org/
fuzzdb https://github.com/fuzzdb-project/fuzzdb
HSQLDB http://hsqldb.org/
JavaHelp http://java.sun.com/javase/technologies/desktop/javahelp/
Archived OWASP DirBuster content https://wiki.owasp.org/index.php/Category:OWASP_DirBuster_Project
Archived OWASP JBroFuzz content https://wiki.owasp.org/index.php/JBroFuzz
Diagona and Fugue Icons Some icons are copyright (c) Yusuke Kamiyamane http://p.yusukekamiyamane.com All rights reserved.
Crawljax https://github.com/crawljax/crawljax/ and ZAP fork.
RSyntaxTextArea https://bobbylight.github.io/RSyntaxTextArea/
SwingX
HarLib http://www.frogthinker.org/projects/harlib
Quicksand font https://fonts.google.com/specimen/Quicksand

3rd Party Data

WASC Threat Classification v2.0 http://projects.webappsec.org/Threat-Classification used for alert titles and descriptions
Common Weakness Enumeration https://cwe.mitre.org/data/index.html used for alert solutions

Paros

Chinotec Technologies Company

Watcher: Passive Web-security Scanner

Casaba https://www.casaba.com/
Watcher https://websecuritytool.codeplex.com/

See also

Introduction The introduction to ZAP