We publish a substitute list only where a record says what kind of product it is. OWASP ZAP's does not yet, so this page names none. The Security category lists every offer we track alongside it.
Current OWASP ZAP Situation
Risk Level:source unconfirmed
Why: The page we cite for OWASP ZAP does not name it when we last looked, on 2026-10-14. We are not publishing a stability judgement for it until that is fixed.