NodeGoat Security Regression tests with ZAP API

The OWASP Zed Attack Proxy (ZAP) is an easy to use integrated penetration testing tool for finding vulnerabilities in web applications. ZAP also provides a REST API, which allows you to interact with ZAP programmatically and execute Security Regression Tests for any web application.

Interested in a reference implementation? Follow this excellent step-by-step guide developed and maintained by Kim Carter demonstrating ZAP API integration with the NodeGoat app.