# OWASP ZAP: how AI models rank it, September 2026

IT AI Recommendation Index, September 2026 Edition. Named in 8 judge labels across 3 categories by 4 of 12 models. Page: https://it-ai-index.com/vendors/owasp-zap/

## Standing by category

| Category | Share | Rank | Negative rate | Labels |
|---|---|---|---|---|
| Vulnerability management platforms | 2% | 11 | 40% | 5 |
| Penetration testing as a service | 0% | 47 | 0% | 2 |
| Attack surface management | 0% | 45 | 0% | 1 |

## What the models said for it

- "For absolute minimal cost: Greenbone Community Edition (OpenVAS) or OWASP ZAP" (GLM 4.7 FlashX, Vuln management)
- "ZAP (OWASP ZAP) – web-app scanner with many extensions." (GLM 4.7 FlashX, ASM)

## And against it

- "What to avoid: Tools like OWASP ZAP or Burp Suite Community." (Qwen 3.7 Flash, Vuln management)
- "it struggled with precision (88 false SQL injection alerts on a test app)" (DeepSeek V4 Flash, Vuln management)

## Record

- Method: https://it-ai-index.com/methodology/
- Raw judge labels and full responses: https://it-ai-index.com/data/
- License: CC BY 4.0. Cite as IT AI Recommendation Index, September 2026 Edition, it-ai-index.com.