diff --git a/download/index.html b/download/index.html index 2a28833ec0..ac12ab1d7d 100644 --- a/download/index.html +++ b/download/index.html @@ -119,6 +119,37 @@

Download ZAP

+ +
+

+ ⚠️ Warning - Browsers may flag the ZAP releases as potentially dangerous. +

+
+

+ There does not appear to be much we can do about this.
+ For more details see Why does my Antivirus Tool Flag ZAP? +

+

+ ⚠️ Warning - ZAP releases are currently unsigned. +

+

+ On Windows, you will see a message like: + + ZAP_<version>_windows.exe isn't commonly downloaded. + Make sure you trust ZAP_<version>_windows.exe before you open it. +
+ To circumvent this warning, you would need to click on ... and then Keep, + then Show more and then Keep anyway. +

+ On macOS, you will see a message like: + "ZAP.app" cannot be opened because the developer cannot be verified.
+ To circumvent this warning, you would need to go to System Preferences > Security & Privacy + at the bottom of the dialog. You will see a message saying that "ZAP" was blocked. + Next to it, if you trust the downloaded installer, you can click Open anyway. +

+
+ +
@@ -243,28 +274,6 @@

ZAP 2.16.1

- -
-

- ⚠️ Warning - The ZAP releases are currently unsigned -

-
-

- On Windows, you will see a message like: - - ZAP_<version>_windows.exe isn't commonly downloaded. - Make sure you trust ZAP_<version>_windows.exe before you open it. -
- To circumvent this warning, you would need to click on ... and then Keep, - then Show more and then Keep anyway. -

- On macOS, you will see a message like: - "ZAP.app" cannot be opened because the developer cannot be verified.
- To circumvent this warning, you would need to go to System Preferences > Security & Privacy - at the bottom of the dialog. You will see a message saying that "ZAP" was blocked. - Next to it, if you trust the downloaded installer, you can click Open anyway. -

-
diff --git a/faq/index.xml b/faq/index.xml index c4ced44960..93ba483c56 100644 --- a/faq/index.xml +++ b/faq/index.xml @@ -103,7 +103,7 @@ /faq/why-does-my-antivirus-tool-flag-zap/ Mon, 01 Jan 0001 00:00:00 +0000 /faq/why-does-my-antivirus-tool-flag-zap/ - <p>We know that many Antivirus (AV) tools flag ZAP and some of the ZAP add-ons.</p> <p>For example the ZAP 2.15 Windows installer was <a href="https://www.virustotal.com/gui/file/28b348dd65116ddabbbbd98b7f84864a0bb0f98d656266f2f08bfd010ae51c57">flagged by 3 / 63</a> security vendors.</p> <p>In particular the <a href="/docs/desktop/addons/active-scan-rules/">Active Scan Rule add-on</a> is often flagged: v65 was <a href="https://www.virustotal.com/gui/file/84b91ad0dc613838ab57b5f78fb091d63026cef77c2bf223ea68e97fa05b4181">flagged by 10 / 63</a> security vendors.</p> <p>Detecting viruses is hard, especially as viruses try to disguise themselves. This means that AV tools try to detect potentially malicious activity or code.</p> + <h3 id="zap-downloads">ZAP Downloads <a class="header-link" href="#zap-downloads"><svg class="fill-current o-60 hover-accent-color-light" height="22px" viewBox="0 0 24 24" width="22px" xmlns="http://www.w3.org/2000/svg"><path d="M0 0h24v24H0z" fill="none"/><path d="M3.9 12c0-1.71 1.39-3.1 3.1-3.1h4V7H7c-2.76 0-5 2.24-5 5s2.24 5 5 5h4v-1.9H7c-1.71 0-3.1-1.39-3.1-3.1zM8 13h8v-2H8v2zm9-6h-4v1.9h4c1.71 0 3.1 1.39 3.1 3.1s-1.39 3.1-3.1 3.1h-4V17h4c2.76 0 5-2.24 5-5s-2.24-5-5-5z" fill="currentColor"/></svg></a></h3> <p>As of April 2025 browsers appear to be flagging the ZAP downloads as potentially dangerous.</p> <p>This appears to be the &lsquo;fault&rsquo; of the <a href="https://issues.chromium.org/issues/410883065">Google SafeBrowsing service</a>.</p> Why does ZAP Access Out of Scope Domains? diff --git a/faq/why-does-my-antivirus-tool-flag-zap/index.html b/faq/why-does-my-antivirus-tool-flag-zap/index.html index 417fd20436..786547851b 100644 --- a/faq/why-does-my-antivirus-tool-flag-zap/index.html +++ b/faq/why-does-my-antivirus-tool-flag-zap/index.html @@ -124,7 +124,15 @@

Why does my Antivirus Tool Flag ZAP?

-

We know that many Antivirus (AV) tools flag ZAP and some of the ZAP add-ons.

+ +

ZAP Downloads

+

As of April 2025 browsers appear to be flagging the ZAP downloads as potentially dangerous.

+

This appears to be the ‘fault’ of the Google SafeBrowsing service.

+

Exactly why ZAP has been flagged in this way is unclear, but to date we have not been able to convince anyone to change this. +The recommendation in the above issue (“host your own downloads”) are not a practical option for us.

+ +

Anti Virus Tools

+

We know that many Antivirus (AV) tools flag ZAP and some of the ZAP add-ons.

For example the ZAP 2.15 Windows installer was flagged by 3 / 63 security vendors.

diff --git a/index.xml b/index.xml index 4f5339123c..27d9502715 100644 --- a/index.xml +++ b/index.xml @@ -3001,15 +3001,9 @@ place for questions about using ZAP.</p> Mon, 01 Jan 0001 00:00:00 +0000 /faq/why-does-my-antivirus-tool-flag-zap/ - <p>We know that many Antivirus (AV) tools flag ZAP and some of the ZAP add-ons.</p> -<p>For example the ZAP 2.15 Windows installer was -<a href="https://www.virustotal.com/gui/file/28b348dd65116ddabbbbd98b7f84864a0bb0f98d656266f2f08bfd010ae51c57">flagged by 3 / 63</a> -security vendors.</p> -<p>In particular the <a href="/docs/desktop/addons/active-scan-rules/">Active Scan Rule add-on</a> is often flagged: v65 was -<a href="https://www.virustotal.com/gui/file/84b91ad0dc613838ab57b5f78fb091d63026cef77c2bf223ea68e97fa05b4181">flagged by 10 / 63</a> -security vendors.</p> -<p>Detecting viruses is hard, especially as viruses try to disguise themselves. -This means that AV tools try to detect potentially malicious activity or code.</p> + <h3 id="zap-downloads">ZAP Downloads <a class="header-link" href="#zap-downloads"><svg class="fill-current o-60 hover-accent-color-light" height="22px" viewBox="0 0 24 24" width="22px" xmlns="http://www.w3.org/2000/svg"><path d="M0 0h24v24H0z" fill="none"/><path d="M3.9 12c0-1.71 1.39-3.1 3.1-3.1h4V7H7c-2.76 0-5 2.24-5 5s2.24 5 5 5h4v-1.9H7c-1.71 0-3.1-1.39-3.1-3.1zM8 13h8v-2H8v2zm9-6h-4v1.9h4c1.71 0 3.1 1.39 3.1 3.1s-1.39 3.1-3.1 3.1h-4V17h4c2.76 0 5-2.24 5-5s-2.24-5-5-5z" fill="currentColor"/></svg></a></h3> +<p>As of April 2025 browsers appear to be flagging the ZAP downloads as potentially dangerous.</p> +<p>This appears to be the &lsquo;fault&rsquo; of the <a href="https://issues.chromium.org/issues/410883065">Google SafeBrowsing service</a>.</p> diff --git a/search/index.json b/search/index.json index 995bf4c483..050eb5fb9a 100644 --- a/search/index.json +++ b/search/index.json @@ -1404,8 +1404,8 @@ "title": "Why does my Antivirus Tool Flag ZAP?", "keywords": ["","antivirus","does","flag","my","tool","why","zap?"], "tags": null, - "summary": "\u003cp\u003eWe know that many Antivirus (AV) tools flag ZAP and some of the ZAP add-ons.\u003c/p\u003e\n\u003cp\u003eFor example the ZAP 2.15 Windows installer was\n\u003ca href=\"https://www.virustotal.com/gui/file/28b348dd65116ddabbbbd98b7f84864a0bb0f98d656266f2f08bfd010ae51c57\"\u003eflagged by 3 / 63\u003c/a\u003e\nsecurity vendors.\u003c/p\u003e\n\u003cp\u003eIn particular the \u003ca href=\"/docs/desktop/addons/active-scan-rules/\"\u003eActive Scan Rule add-on\u003c/a\u003e is often flagged: v65 was\n\u003ca href=\"https://www.virustotal.com/gui/file/84b91ad0dc613838ab57b5f78fb091d63026cef77c2bf223ea68e97fa05b4181\"\u003eflagged by 10 / 63\u003c/a\u003e\nsecurity vendors.\u003c/p\u003e\n\u003cp\u003eDetecting viruses is hard, especially as viruses try to disguise themselves.\nThis means that AV tools try to detect potentially malicious activity or code.\u003c/p\u003e", - "content": "we know that many antivirus av tools flag zap some addons example 215 windows installer was flagged by 63 security vendors particular active scan rule addon often flagged: v65 10 detecting viruses hard especially try disguise themselves means detect potentially malicious activity code tool which does bad things contains rules attack websites not surprising make any issues raised about its being will closed link faq you work vendor would like discuss how can sure your incorrectly then please get touch " + "summary": "\u003ch3 id=\"zap-downloads\"\u003eZAP Downloads \u003ca class=\"header-link\" href=\"#zap-downloads\"\u003e\u003csvg class=\"fill-current o-60 hover-accent-color-light\" height=\"22px\" viewBox=\"0 0 24 24\" width=\"22px\" xmlns=\"http://www.w3.org/2000/svg\"\u003e\u003cpath d=\"M0 0h24v24H0z\" fill=\"none\"/\u003e\u003cpath d=\"M3.9 12c0-1.71 1.39-3.1 3.1-3.1h4V7H7c-2.76 0-5 2.24-5 5s2.24 5 5 5h4v-1.9H7c-1.71 0-3.1-1.39-3.1-3.1zM8 13h8v-2H8v2zm9-6h-4v1.9h4c1.71 0 3.1 1.39 3.1 3.1s-1.39 3.1-3.1 3.1h-4V17h4c2.76 0 5-2.24 5-5s-2.24-5-5-5z\" fill=\"currentColor\"/\u003e\u003c/svg\u003e\u003c/a\u003e\u003c/h3\u003e\n\u003cp\u003eAs of April 2025 browsers appear to be flagging the ZAP downloads as potentially dangerous.\u003c/p\u003e\n\u003cp\u003eThis appears to be the \u0026lsquo;fault\u0026rsquo; of the \u003ca href=\"https://issues.chromium.org/issues/410883065\"\u003eGoogle SafeBrowsing service\u003c/a\u003e.\u003c/p\u003e", + "content": "zap downloads april 2025 browsers appear flagging potentially dangerous appears fault google safebrowsing service exactly why has been flagged way unclear date we have not able convince anyone change recommendation above issue host your own practical option us anti virus tools know that many antivirus av flag some addons example 215 windows installer was by 63 security vendors particular active scan rule addon often flagged: v65 10 detecting viruses hard especially try disguise themselves means detect malicious activity code tool which does bad things contains rules attack websites surprising make any issues raised about its being will closed link faq you work vendor would like discuss how can sure incorrectly then please get touch " }, { "url": "/faq/why-does-zap-access-out-of-scope-domains/",