Bilal k. Mohammed·Nov 4API-P-3: Scan for API Misconfigurations With ZAP, Weed Out False Positives, Then Fix ThemA practical workflow for finding misconfigurations with a scanner, separating real issues from false positives, and fixing what’s left.
Gayan Dissanayake·Oct 26DAST Inside GKE with OWASP ZAP and GitHub ActionsHow we added dynamic security testing to a private GKE cluster, scanned internal services without exposing them, and what broke along the…
MainEkHacker·Aug 12OWASP ZAP: A Complete Beginner’s Guide to Web Application Security TestingWhat is OWASP ZAP?
Muhammad Raafay Nouman·Jul 6Adding Image Scanning and DAST to a Jenkins Pipeline Without Losing a Week to ItA practitioner’s account of wiring OWASP ZAP and Trivy into an OpenShift + Jenkins delivery pipeline — including the dead ends, because the…
Jonathan Garcia·Mar 20Building and Securing a Silly Water Shop with Azure DevOps, Postman, and OWASP ZAPA hands-on DevSecOps project using Azure DevOps, Postman, App Service, Semgrep, and OWASP ZAP.
ShiftLeftSec·Dec 16, 2025Automating ZAP for CI/CD — an MVPIf you’ve read my other articles, you’ll know that I think highly of OWASP ZAP, but one question comes up again and again: whats the best…
Moore Dagogo-Hart·Jul 7, 2025Why We Moved Zap’s Backend to Go“We hit a ceiling with JavaScript. Our system was syncing Solana, EVM, BTC, and TRON. Memory started leaking. We needed a stack that…A response icon1A response icon1
Dan Popescu·May 27, 2025Zaps ⚡ — The Hidden RevolutionIntroduction: A Different Kind of Social Media Day
InStackademicbyArya Dyas·May 11, 2025Building Observability in Go: Structured Logging with ZapHarnessing the Power of Structured Logs in Go with Zap for Better Debugging and Observability
