Frequently Asked Questions

Somethings not working. What should I do?

Somethings not working as you expect with ZAP, and you're not sure if it's a bug or a misunderstanding of how ZAP works.

The following steps may well help:

Check for updates

Click on the ‘Manage Add-ons’ button on the toolbar and then click on the ‘Check for updates’ button.

Note that there will not be a ‘Check for updates’ button if you've configured ZAP to check on startup (which is recommended).

If there is a new version of ZAP and/or new versions of any of the add-ons then you should install them.

We are constantly improving ZAP and the add-ons and newer versions may fix the problems that you are experiencing.

Check the ZAP User Guide

ZAP includes a User Guide that should cover all of the functionality available.

This can be accessed via the ‘Help / OWASP ZAP User Guide’ menu, the help button on the right hand side of the top toolbar, via help buttons on individual dialogs or via the F1 key (which is context dependant).

The User Guide is also available online.

Check the log file

Look in the zap.log file to see if any errors have been logged. This is either in the directory you specified via the ‘-dir’ command line option or in the default directory if you didn't specify one.

If there are error messages that appear to indicate a Java memory problem then try increasing the memory available via the JVM options.

Ask on the ZAP User Group

The ZAP user group is a great place to ask questions about using ZAP. All of the ZAP developers are on the user group as are many knowledgeable ZAP users who may also be able to help you.

Be aware that lots of webapps do weird and wonderful things, often in bizarre ways. We can't second guess them, so when asking for help you'll need to give us sanitized examples to help us figure out what's going on.

Ask on irc

Many of ZAP contributors hang out on the freenode #zaproxy channel which you can access via that link or your favourite irc client.

Ask on twitter

You can ask @psiinon short questions directly on twitter, although whether he's online will be timezone and holiday dependant.

Raise an issue

You can raise issues (bugs or new features) at the issue tracker.