> For the complete documentation index, see [llms.txt](https://developer.harness.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://developer.harness.io/security-testing-orchestration/use-sto/scanner-configuration/zed-attack-proxy-zap.md).

# Zed Attack Proxy (ZAP)

- [Zed Attack Proxy (ZAP) step configuration](https://developer.harness.io/security-testing-orchestration/use-sto/scanner-configuration/zed-attack-proxy-zap/zed-attack-proxy-zap-step-configuration.md): Scan application instances with ​Zed Attack Proxy (ZAP).
- [Tutorial: DAST app scans using Zed Attack Proxy](https://developer.harness.io/security-testing-orchestration/use-sto/scanner-configuration/zed-attack-proxy-zap/tutorial-dast-app-scans-using-zed-attack-proxy.md): Scan a web app using ZAP