Collect and Restore/Implement Quotes

"Having such a high quality open source and freely-available dynamic application security scanner helps to lower barriers to entry for teams looking to include application security in their DevOps pipelines and should make dynamic scanning in pipelines a must-do rather than a nice-to-do activity.”

Dan Cornell, CTO, Denim Group

“We chose to use OWASP ZAP as the cornerstone of our BDD-Security testing framework for a number of technical and cultural reasons....ZAP has a strong pedigree in the security community with an extremely responsive team and open development process... ZAP’s focus as a tool ...makes it a shoe in for cross functional teams that may not have a security expert on board, but need a tool to integrate security into their build processes.”

Stephen De Vries, Continuum Security Co-Founder and CEO

"The web-based interactive user interface for the API allows DevOps engineers to quickly prototype pipeline-to-API interactions, and the availability of client libraries in a plethora of languages (Java, Python, Node.js, PHP, Ruby) makes ZAP integration approachable for teams with a variety of language skillsets. " 

Dan Cornell, CTO, Denim Group

"ZAP's API-first design and extensibility make it exceptionally powerful when we use it as an integration with continuous security automation tools developed internally. "

Tim Bach, Salesforce, Sr. Product Security Engineer

"...ZAP’s API is lightyears ahead of other competing solutions which was a key factor for us, since automating and controlling ZAP from build scripts and cucumber tests was essential in being able to insert it into CI/CD pipelines. The fact that nearly all of the features are available from the API means that we can make decisions about risk based on individual vulnerabilities rather than trying to parse a report. "

Stephen De Vries, Continuum Security Co-Founder and CEO

"OWASP’s ZAP tool enables developers and security analysts to quickly create and verify hypotheses about the security of a complex web application with a perfect blend of automation and manual utilities."
 
Jeff Williams, CEO, Aspect Security