3rd Party Licences

ZAP is released under the Apache V2 License.

As far as we are aware all of the 3rd party code and libraries we use are compatible with this license - special cases are listed on this page.

If you think that we are infringing any licenses then please let us know asap by raising an issue.

Special cases

SQLMap

Code: https://github.com/zaproxy/zap-extensions/tree/main/addOns/sqliplugin/

This code is a derivative of SQMap and therefore is GPL.

We have contacted the authors and they have granted us an exemption.

SVN Digger

Code: https://github.com/zaproxy/zap-extensions/tree/main/addOns/svndigger/

The svndigger files are GPLv3.

We have contacted the authors and they have granted us an exemption.

JBrofuzz

Code:

• https://github.com/zaproxy/zap-extensions/tree/main/addOns/fuzz/
• https://github.com/zaproxy/zap-extensions/tree/main/addOns/zest/

The JBroFuzz jars are GPLv2

We have contacted the authors and they have granted us an exemption.

This page is Work In Progress!