The use case was we needed to scan our website to find out what vulnerabilities were present.
We use it to scan the website, then take a report about what vulnerabilities are present on it. Next, we will manually verify those vulnerabilities for false positives.
Every now and then, there is an update. They add new vulnerabilities to the scan list. That is where they just keep on improving.
The community support that ZAP provides me. As an open source, it provides me flexibility and is convenient to use.
As security evolves, we would like DevOps built into it. As of now, Zap does not provide this.
I would like to have more vulnerabilities added to the scan list, because as of now, it covers around 72 to 80. I need more because we need broader coverage.
Stability is good.
We have not scaled yet. Though, we should be able to scale.
I have not used any support for this solution yet.
The initial setup is straightforward, because we can integrate it directly into the SDLC.
The community edition updates services regularly. They add new vulnerabilities into the scanning list.
