The AJAX Spider and DOM XSS add-ons have now been fully retired from ZAP’s nightly and weekly releases, and Phase 1 of the new Global Scan Policy Manager has landed behind a dev-mode flag.
ZAP Updates - September 2026
calendar_today
October 1, 2026
domain
owasp-zap