Flatsonar

ZAP

by The ZAP Development Team

A popular free security tool

Dangerous permissions Verified creator Apache-2.0 v2.17.0
Screenshot 1 of ZAP Screenshot 2 of ZAP Screenshot 3 of ZAP Screenshot 4 of ZAP

About

The Zed Attack Proxy (ZAP) by Checkmarx is one of the world’s most popular free security tools and is actively maintained by a dedicated international team of volunteers. It can help you automatically find security vulnerabilities in your web applications while you are developing and testing your applications. Its also a great tool for experienced pentesters to use for manual security testing.

Permissions

1 permission weaken the sandbox. Flatsonar asks before installing.

  • full access to your entire file system
    --filesystem=host
  • inter-process communication (needed for X11)
    --share=ipc
  • network
    --share=network
  • X11 display, only when Wayland is unavailable
    --socket=fallback-x11
  • Wayland display
    --socket=wayland
  • access to your download folder
    --filesystem=xdg-download
  • access to your documents folder
    --filesystem=xdg-documents
  • access to xdg-run/app/org.mozilla.Firefox.BaseApp
    --filesystem=xdg-run/app/org.mozilla.Firefox.BaseApp:create

Who publishes this

The creator demonstrably controls this app id: Flathub verification, the hosting account owns the namespace, or a well-known file on their domain.

  • verified on Flathub: the developer proved they control this app id
    publisher:flathub

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.