Setting up authenticated scans (OWASP Zap)

 - Available on Premium tier plans -

When running the OWASP Zap web application scanner, you can get configure authentication to scan sections behind your website login page.

There are three options for setting up an authenticated scan

1. Using a recorded login. This is the most flexible option for configuring authentication. You record the login steps using Selenium, a standard browser recording technology. When a scan is run, the scanner replays the record steps to authenticate. See the Recorded Login Documentation for full details.

2. Configure basic authentication.

3. Set custom request headers or cookies. You can set extra headers or cookies as needed, which will be included in all requests from the scanner. See Customize Request Headers.