OWASP ZAP PTK Add-on 0.3.0 Enhances Web Application Security Testing

• •OWASP ZAP PTK Add-on 0.3.0 released on April 2, 2026.
• •New version maps in-browser security findings to native ZAP alerts.
• •Enhances testing capabilities for modern web applications.

The OWASP Zed Attack Proxy (ZAP) has released version 0.3.0 of the OWASP PenTest Kit (PTK) add-on. This upgrade allows for the direct conversion of browser-based security findings into native ZAP alerts, improving the workflow for application security testing. Traditionally, ZAP focused on server-side behavior and proxy-layer traffic, but this new version bridges the gap to include client-side execution. The upgrade is significant for security professionals testing modern web applications, as it enhances the detection of vulnerabilities that occur within the browser. The release aims to streamline the process of identifying and addressing security issues in web applications, making it easier for organizations to secure their digital assets. The ZAP PTK Add-on is now available for download and integration into existing security testing workflows.