# Zed Attack Proxy: how AI models rank it, November 2026

Gane Index, November 2026 Edition. Named in 1 judge label across 1 category by 1 of 14 models. Page: https://www.gane.ai/index/it/vendors/zed-attack-proxy

## Standing by category

| Category | Share | Rank | Negative rate | Labels |
|---|---|---|---|---|
| [Dynamic application security testing](https://www.gane.ai/index/it/developer/dynamic-application-security-testing/index.md) | 2% | 13 | 0% | 1 |

## What the models said for it

- "OWASP ZAP (Zed Attack Proxy) is the most widely used open source DAST scanner and the natural first stop." (Muse Glimmer 30B, DAST)

## By model

| Model | First choice | Alternative | Mention | Warning | Labels |
|---|---|---|---|---|---|
| Claude Haiku 4.5 | 0 | 0 | 0 | 0 | 0 |
| GPT-5.4 mini | 0 | 0 | 0 | 0 | 0 |
| Gemini 3.5 Flash | 0 | 0 | 0 | 0 | 0 |
| Perplexity Sonar | 0 | 0 | 0 | 0 | 0 |
| Grok 4.20 | 0 | 0 | 0 | 0 | 0 |
| Mistral Small | 0 | 0 | 0 | 0 | 0 |
| DeepSeek V4 Flash | 0 | 0 | 0 | 0 | 0 |
| Llama 4 Maverick | 0 | 0 | 0 | 0 | 0 |
| Qwen 3.7 Flash | 0 | 0 | 0 | 0 | 0 |
| Kimi K2 | 0 | 0 | 0 | 0 | 0 |
| GLM 4.7 FlashX | 0 | 0 | 0 | 0 | 0 |
| MiniMax M2.5 | 0 | 0 | 0 | 0 | 0 |
| GPT-6 Luna | 0 | 0 | 0 | 0 | 0 |
| Muse Glimmer 30B | 1 | 0 | 0 | 0 | 1 |

## Sources returned with these answers

The sites and pages cited by the answers that named Zed Attack Proxy, from 1 of the 1 answers that named it (only the models that return a source list).

### Domains cited

- aimultiple.com: 1
- codenote.net: 1
- community.owasp.org: 1
- devtoollab.com: 1
- github.com: 1
- owasp.github.io: 1
- reddit.com: 1
- safeguard.sh: 1
- securecoding.com: 1
- securityboulevard.com: 1

### Pages cited

- https://aimultiple.com/free-dast-tools: 1
- https://codenote.net/en/posts/dast-oss-tools-comparison-devsecops-pipeline: 1
- https://community.owasp.org/Free_for_Open_Source_Application_Security_Tools: 1
- https://devtoollab.com/blog/best-dast-tools: 1
- https://github.com/paulveillard/cybersecurity-dast/blob/main/README.md: 1
- https://owasp.github.io/DevSecOpsGuideline/2-Process/2-4-Test/2-4-2-Dynamic-Application-Security-Testing: 1
- https://reddit.com/r/cybersecurity/comments/udpej5/are_there_any_dynamic_application_security: 1
- https://safeguard.sh/resources/blog/best-dast-tools-for-ci-pipelines-open-source-and-commercial: 1

## Record

- Method: https://www.gane.ai/index/it/methodology
- License: CC BY 4.0. Cite as Gane Index, November 2026 Edition, www.gane.ai/index/it.