Download ZAP

Checksums for all of the ZAP downloads are maintained on the 2.11.1 Release Page and in the relevant version files.

As with all software we strongly recommend that ZAP is only installed and used on operating systems and JREs that are fully patched and actively maintained.

ZAP 2.11.1

Windows (64) Installer	`183 MB`	Download
Windows (32) Installer	`183 MB`	Download
Linux Installer	`188 MB`	Download
Linux Package	`186 MB`	Download
MacOS Installer	`213 MB`	Download
Cross Platform Package	`204 MB`	Download
Core Cross Platform Package	`55 MB`	Download

Most of the files contain the default set of functionality, and you can add more functionality at any time via the ZAP Marketplace.
The core package contains the minimal set of functionality you need to get you started.
The Windows and Linux versions require Java 8 or higher to run.
The macOS version includes Java 11 - you can use the Linux or Cross Platform versions if you do not want to download this.
The installers are built using a multi-platform installer builder which provides an unattended mode.
For more information about this release see the release notes.

Launch the installation wizard by double clicking on the downloaded executable file

Read the License agreement and click 'Accept' to continue the installation

Select 'Standard' or 'Custom' installation

Click 'Finish' to exit set up

Docker

Stable	The standard release	`docker pull owasp/zap2docker-stable`	Docker Hub Page
Bare	Minimal release, ideal for CI	`docker pull owasp/zap2docker-bare`	Docker Hub Page
Weekly	Updated every week	`docker pull owasp/zap2docker-weekly`	Docker Hub Page
Live	The very latest source code	`docker pull owasp/zap2docker-live`	Docker Hub Page

See Docker for more information.

ZAP Weekly

Weekly Cross Platform Package 274 MB Download

We generate weekly releases of ZAP from the main branch, typically every Monday.
These are just intended for people who want to use all of the features we’ve added since the last ‘full’ release but don’t want the hassle of building ZAP from the source code.
While we endeavor to ensure that weekly releases are robust, things may be broken or only partially implemented.
It is cross platform (Windows, Linux and macOS) but does not include any installers.
It requires Java 11 or higher to run.

Linux Repos

The official ZAP Linux Repos

Flathub

On Linux systems you can also use Flathub.
To install: flatpak install flathub org.zaproxy.ZAP
To run: flatpak run org.zaproxy.ZAP

Homebrew Cask

On Mac OS X you can also install ZAP using Homebrew Cask
To install: brew install --cask owasp-zap

Snapcraft

On Linux systems you can use Snapcraft.
To install: snap install zaproxy --classic
To run: zaproxy

Chocolatey

On Windows systems you can use Chocolatey.
To install: choco install zap

FreeBSD

On FreeBSD systems you can also use the zaproxy package.
Dependency lines: zaproxy>0:security/zaproxy
To install the port: cd /usr/ports/security/zaproxy/ && make install clean
To add the package run: pkg install zaproxy

Scoop

On Windows systems you can also use Scoop.
To install: scoop install zaproxy

Latest Versions

We maintain a set of pages containing XML with links to the latest ZAP release files
You can use them to automatically pull down the latest ZAP release for the platform you need.
ZAP uses similar URLs when checking for updates.
The file https://raw.githubusercontent.com/zaproxy/zap-admin/master/ZapVersions.xml is version independent and always points to the latest release.
There are also version specific files that define the add-ons on the ZAP Marketplace for that release stream.
The 2.11 release stream uses https://raw.githubusercontent.com/zaproxy/zap-admin/master/ZapVersions-2.11.xml
The development code uses https://raw.githubusercontent.com/zaproxy/zap-admin/master/ZapVersions-dev.xml
These files are usually the same, but it does allow us to release add-ons which depend on core features which have been added since the current stable release.
See 3rd Party Package Maintenance for details of how 3rd party packages which wrap ZAP are maintained.