Option for OWASP Zap to run automatically scan on weekly basis?

Ronel S

unread,

Apr 21, 2023, 1:53:14 PM4/21/23

to OWASP ZAP User Group

Good afternoon, everyone!

Hope everyone is doing well. I’m currently using OWASP Zap to check for vulnerabilities and scanning on some sites manually. I've been wondering if there is an option or way in OWASP ZAP to have it run automatically on weekly basis on its own? I am able to run it manually when I insert an URL, but I was wondering if it can be done automatically once a week as Nessus does?

Looking forward to your respond.

Regards,

Ronel

kingthorin+owaspzap

unread,

Apr 21, 2023, 5:02:49 PM4/21/23

to OWASP ZAP User Group

ZAP doesn't have a scheduling mechanism itself, but you can use any of the existing automation options and cron on Linux or Task Scheduler on Windows.

Ronel S

unread,

Apr 21, 2023, 5:06:18 PM4/21/23

to OWASP ZAP User Group

Thank you for the response. I'm fairly new into OWASP Zap. Do you have any first implementation tips for me to start setting up the weekly automated scans within Task Scheduler?

Ronel S

unread,

Apr 25, 2023, 3:27:45 PM4/25/23

to OWASP ZAP User Group

Greetings,

Do you happen to have a sample I can check/follow?

Thanks in advance,

On Friday, April 21, 2023 at 5:02:49 PM UTC-4 kingthorin+owaspzap wrote:

Simon Bennetts

unread,

Apr 26, 2023, 4:43:21 AM4/26/23

to OWASP ZAP User Group

We dont have any examples for scheduling, but there should be plenty of info online - the scheduling tools are not ZAP specific.

Re advice for ZAP - we have a Getting started Guide: https://www.zaproxy.org/getting-started/

We generally advice people to use the ZAP Desktop first if that possible, as its easier to see whats going on.

Do your sites ue authentication?

Thats one of the harder problems to address, but something we are in the process of making much easier..