--- title: OWASP ZAP Modes description: OWASP ZAP is an open-source web security testing tool, used for detecting vulnerabilities in web applications. image: https://blog.e-zest.com/hubfs/OWASP%20ZAP%202.5.0.png --- [![e-Zest logo\_An accion lab company\_Colour](https://blog.e-zest.com/hubfs/images/Logos%20with%20Tagline/Corporate/SVG/e-Zest%20logo_An%20accion%20lab%20company_Colour.svg "e-Zest logo_An accion lab company_Colour")](https://www.e-zest.com/) - [WORK](https://www.e-zest.com/our-work) - [SERVICES](https://www.e-zest.com/our-services) - [Product Engineering](https://www.e-zest.com/digital-product-engineering-services) - [Enterprise Data Services](https://www.e-zest.com/enterprise-data-services) - [Digital Commerce](https://www.e-zest.com/digital-commerce-services) - [Digital Operations](https://www.e-zest.com/digital-operations) - [Digital Consulting](https://www.e-zest.com/digital-transformation-consulting-services) - [Digital Experience Design](https://www.e-zest.com/digital-experience-design) - [INSIGHTS](https://blog.e-zest.com/) - [CAREERS](https://www.e-zest.com/careers) - [ENTERPRISE DATA SERVICES](https://www.e-zest.com/enterprise-data-services) - [GENERATIVE AI](https://www.e-zest.com/generative-ai) - [Healthcare](https://healthcare.e-zest.com) - [Contact Us](https://www.e-zest.com/contact-us) - ![Elevating Product Engineering with AI and ML](https://blog.e-zest.com/hubfs/Elevating%20Product%20Engineering%20with%20AI%20and%20ML.jpg) [BLOGS](https://blog.e-zest.com) #### Elevating Product Engineering with AI and ML As technology evolves and customer choices broaden, there is an increasing ... [Read more](https://blog.e-zest.com/elevating-product-engineering-with-ai-and-ml) - ![e-Zest – An Accion Labs Company gets Recognition as a Contender in the ISG Provider Lens™ Study on Digital Engineering Services 2024](https://blog.e-zest.com/hubfs/e-Zest%20%E2%80%93%20An%20Accion%20Labs%20Company%20-%20Gets%20Recognition%20as%20a%20Contender%20in%20the%20ISG%20Provider%20LensTM%20Study%20on%20Digital%20Engineering%20Services%202024.jpg) [NEWS](https://blog.e-zest.com/news) #### e-Zest – An Accion Labs Company gets Recognition as a Contender in the ISG Provider Lens™ Study on Digital Engineering Services 2024 We are delighted to announce that e-Zest – An Accion Labs Company has been ... [Read more](https://blog.e-zest.com/news/e-zest-an-accion-labs-company-gets-recognition-as-a-contender-in-the-isg-provider-lens-study-on-digital-engineering-services-2024) - ![e-Zest Solutions supports Digital Pune Mission](https://blog.e-zest.com/hubfs/blog-files/Digital%20Literacy%20Bus%20e-Zest.png) [CSR](https://blog.e-zest.com/csr) #### e-Zest Solutions supports Digital Pune Mission **Pune, India:** e-Zest Solutions, a leading digital technology innovation ... [Read more](https://blog.e-zest.com/csr/e-zest-solutions-supports-digital-pune-mission) - [Work](https://www.e-zest.com/our-work) - [Services](https://www.e-zest.com/our-services) - [Insights](https://blog.e-zest.com) - [Careers](https://www.e-zest.com/careers) - [Enterprise Data](https://www.e-zest.com/enterprise-data-services) - [Generative AI](https://www.e-zest.com/generative-ai) - [Innovations](https://www.e-zest.com/innovations) - [Healthcare](https://healthcare.e-zest.com) - [About](https://www.e-zest.com/about-us) - [Contact](https://www.e-zest.com/contact-us) - [Blog](https://blog.e-zest.com/) - [News](https://blog.e-zest.com/news) - [CSR](https://blog.e-zest.com/csr) - [![Linkedin Icon](https://blog.e-zest.com/hubfs/icons/linkedin_icon_white.svg)](https://www.linkedin.com/company/e-zest-solutions/) - [![Twitter Icon](https://blog.e-zest.com/hubfs/twitter-logo-silhouette%20(5).svg)](https://twitter.com/ezest) - [![Facebook Icon](https://blog.e-zest.com/hubfs/facebook-app-logo%20(4).svg)](https://www.facebook.com/61259256638) - [![Instagram Icon](https://blog.e-zest.com/hubfs/instagram-logo%20(4).svg)](https://www.instagram.com/ezestsolutions/) - [![Youtube Icon](https://blog.e-zest.com/hubfs/icons/youtube_icon_white.svg)](https://www.youtube.com/user/ezestcorporate) [![Go to top icon](https://blog.e-zest.com/hubfs/AA%20Assets/top%20button.svg)](https://blog.e-zest.com/owasp-zap-modes#top) Hit enter to search or ESC to close Insights e-Zest members share technology ideas to foster digital transformation. - [Blog](https://blog.e-zest.com) - [News](https://blog.e-zest.com/news) - [Podcasts](https://www.e-zest.com/podcasts) - [Healthcare](https://blog.e-zest.com/healthcare) - [CSR](https://blog.e-zest.com/csr) - [Whitepaper](https://blog.e-zest.com/whitepaper) - [Playbook](https://blog.e-zest.com/playbook) - [Media Kit](https://www.e-zest.com/media-kit) # OWASP ZAP Modes [Kishore Bhamare](https://blog.e-zest.com/author/kishore-bhamare) Dec 22, 2016 [Java](https://blog.e-zest.com/topic/java) [OWASP ZAP Modes](https://blog.e-zest.com/topic/owasp-zap-modes) [OWASP ZAP 2.5.0](https://blog.e-zest.com/topic/owasp-zap-2-5-0) [OWASP](https://blog.e-zest.com/topic/owasp) - - - - OWASP ZAP is an open-source web security testing tool, used for detecting vulnerabilities in web applications. ZAP provides you with configured automated scanners as well as a set of tools that allows you to detect vulnerabilities and threats manually. It is designed for people with a wide range of security expertise and is in a way ideal for developers and functional testers who are new to penetration testing and is also a useful to an experienced pen tester’s skillset. This is a cross-platform tool written in Java, available in all of the operating systems including Microsoft Windows, Linux and Mac OS X. OWASP ZAP 2.5.0 has four modes: - Safe mode – This mode doesn’t allow you to do anything that is potentially dangerous. - Protected mode – This mode allows you simulate potentially dangerous vulnerabilities. User can only perform harmful actions on URLs which are mentioned in the scope. - Standard mode – In this mode user can do anything that is relevant. - ATTACK mode - New nodes in scope are actively scanned as soon as they are discovered. ![OWASP ZAP 2.5.0.png](https://blog.e-zest.com/hs-fs/hubfs/OWASP%20ZAP%202.5.0.png?width=378&height=211&name=OWASP%20ZAP%202.5.0.png) It is strongly recommended that you use the ‘Protected mode’ to ensure that you only attack sites that you mean to. The mode can be changed via the toolbar and is persisted between sessions. Things that will not be possible in either ‘Safe mode’ or ‘Protected mode’ when not acting on URLs in the Scope: - Spider - crawling - Active Scanning - Fuzzing - Force Browsing - Breaking (intercepting) - Resending requests We can define the scan policy to be used for the attack mode in the Options Active Scan screen. ![OWASP ZAP 2.5.0-1.png](https://blog.e-zest.com/hs-fs/hubfs/OWASP%20ZAP%202.5.0-1.png?width=715&height=537&name=OWASP%20ZAP%202.5.0-1.png) Reference: [https://www.owasp.org](https://www.owasp.org) - - - ### Similar Blog [![How to Create Own Custom JMeter Template?](https://blog.e-zest.com/hubfs/How%20to%20Create%20Own%20Custom%20JMeter%20Template%201280x667%202560x1334.jpg) How to Create Own Custom JMeter Template? We frequently need to construct Test Plans with a similar format when working on web application performance testing using Apache ... By Kishore Bhamare Feb 28, 2023](https://blog.e-zest.com/how-to-create-own-custom-jmeter-template) [![Hoisting in JavaScript](https://blog.e-zest.com/hubfs/Blog_Files/Hoisting%20in%20JavaScript-190225.png) Hoisting in JavaScript Generally, we all have heard of the term ‘hoisting’ with reference to flag hoisting. By Ajit Sakhare Feb 26, 2019](https://blog.e-zest.com/hoisting-in-javascript) [![Automation using Selenium WebDriver Frameworks](https://blog.e-zest.com/hubfs/Selenium_blog_image.png) Automation using Selenium WebDriver Frameworks Frameworks help to structure our code and make the maintenance process easy. Without frameworks we will place all our code and ... By Uddhav Naik Sep 26, 2016](https://blog.e-zest.com/automation-using-selenium-webdriver-frameworks) [Tutorial: Elasticsearch Integration in a Java Application The whole world relies on search to get access to relevant information and data. Handling this large amount of data presents a ... By Jyoti Agrawal Jun 11, 2015](https://blog.e-zest.com/tutorial-elasticsearch-integration-in-a-java-application/) [![How to Create Own Custom JMeter Template?](https://blog.e-zest.com/hubfs/How%20to%20Create%20Own%20Custom%20JMeter%20Template%201280x667%202560x1334.jpg) How to Create Own Custom JMeter Template? We frequently need to construct Test Plans with a similar format when working on web application performance testing using Apache ... By Kishore Bhamare Feb 28, 2023](https://blog.e-zest.com/how-to-create-own-custom-jmeter-template) [How to simulate network bandwidth in JMeter? The rise of the smartphone and easy connectivity to the internet has made access to information easier with most of them ... By Kishore Bhamare Jan 07, 2019](https://blog.e-zest.com/how-to-simulate-network-bandwidth-in-jmeter) [![How to read special characters from CSV in JMeter?](https://blog.e-zest.com/hubfs/blog-files/How%20to%20read%20special%20characters%20from%20CSV%20in%20JMeter.png) How to read special characters from CSV in JMeter? In performance testing, you may come across a scenario where you want to read data from CSV file and post that data in HTTP ... By Kishore Bhamare Nov 26, 2018](https://blog.e-zest.com/how-to-read-special-characters-from-csv-in-jmeter) [![How to upload images in JMeter?](https://blog.e-zest.com/hubfs/blog-files/How%20to%20upload%20images%20in%20JMeter.png) How to upload images in JMeter? In performance testing scenarios, you might come up with image file uploading-downloading functionality in any web application. ... By Kishore Bhamare Nov 21, 2018](https://blog.e-zest.com/how-to-upload-images-in-jmeter) [![What’s New in Apache JMeter 5.0?](https://blog.e-zest.com/hubfs/JMeter%205.0.png) What’s New in Apache JMeter 5.0? A new Apache JMeter version has been released today, September 21, 2018 - version 5.0 (Revision: r1841526). 5.0 version has many ... By Kishore Bhamare Sep 21, 2018](https://blog.e-zest.com/whats-new-in-apache-jmeter-5.0) ## Helping Organizations Thrive in the Digital Age [Contact Us](https://www.e-zest.com/contact-us) - [About](https://www.e-zest.com/about-us) - [Services](https://www.e-zest.com/our-services) - [Work](https://www.e-zest.com/our-work) - [Insights](https://blog.e-zest.com/) - [Healthcare](https://healthcare.e-zest.com/) - [Accion Labs](https://www.accionlabs.com/) - - - - - - Dallas - Detroit - Hannover - Vienna - London - Pune © 2025 e-Zest Solutions - [Privacy Policy](https://www.e-zest.com/privacypolicy) - [Cookie Policy](https://www.e-zest.com/cookie-policy) Contact us Contact us e-Zest is a leading digital innovation partner for enterprises and technology companies that utilizes emerging technologies for creating engaging customers experiences. Being a customer-focused and technology-driven company, it always helps clients in crafting holistic business value for their software development efforts. It offers software development and consulting services for cloud computing, enterprise mobility, big data and analytics, user experience and digital commerce.