Zed Attack Proxy is an essential tool for web app pentesting. The project just recently moved from OWASP to the Secure Software Project. Hear about the challenges of running an OSS security project, why Simon got involved in the first place, and why successful projects are about more than just code.

Segment Resources:

• https://www.zaproxy.org/
• https://softwaresecurityproject.org/blog/welcoming-zap-to-the-software-security-project/
• https://owasp.org/www-project-vulnerable-web-applications-directory/

Show Notes: https://securityweekly.com/asw-254