Marketplace Vetting

[Jay Asbury]

What kind of vetting is done on the items in the marketplace to make sure someone isn't being malicious?  Can there be a sign off in marketplace or a documentation on what the vetting process is?

[Simon Bennetts]

Hiya.

All of the add-on on the ZAP Marketplace have been reviewed by the ZAP Core Team.

Cheers,

Simon

[Simon Bennetts]

Someones just pointed out to me that we have this page https://www.zaproxy.org/faq/what-is-zaps-assurance-case/

which says: "Scripts and add-ons which are advertised via the ZAP Marketplace are reviewed prior to release, to ensure at the very least that they do not do anything obviously malicious."

Cheers,

Simon