Generated every Monday, these contain the latest features and bug fixes but may be less stable.
GitHub offers several release streams to fit different testing needs: download owasp zap github
Available via the zaproxy GitHub Container Registry, these provide a pre-configured environment that doesn't require a manual Java installation. Generated every Monday, these contain the latest features
Scroll to the section and select the installer for your operating system: Windows: .exe installer (typically 64-bit). macOS: .dmg installer for Intel or Apple Silicon (aarch64). Linux: .tar.gz package or .sh installer. Choosing the Right Version macOS:
Locate the latest version marked as "" (currently v2.17.0 as of late 2025).
Stable versions recommended for production use and professional pentesting.
The OWASP Zed Attack Proxy (ZAP) is a top-tier open-source tool for finding web application vulnerabilities. Whether you are a security professional or a developer, downloading OWASP ZAP via its official GitHub repository ensures you get the most secure and up-to-date version of the core project. Quick Download Guide To get the latest full release directly from the source: Navigate to the zaproxy/zaproxy Releases page on GitHub .