GitHub Advanced Security VS OWASP ZAP
As of 30 October 2026, OWASP ZAP is named by 230 companies and GitHub Advanced Security by 105; GitHub Advanced Security skews to companies under 200 people (23% vs 40%), OWASP ZAP to companies over 1,000 (30% vs 47%).
As of 30 October 2026 · refreshed daily · counts move as websites, DNS and career sites are re-read.
The website-and-DNS footprint is not comparable between a marketing suite and a CRM: GitHub Advanced Security's script and mail records show on hundreds of thousands of small sites, OWASP ZAP rarely leaves a trace outside its own apps. Compare on the job-posting numbers; use the footprint for reach.
- GitHub Advanced Security: 2–200 employees
- 23%
- OWASP ZAP: 2–200 employees
- 40%
- GitHub Advanced Security: 1,000+ employees
- 47%
- OWASP ZAP: 1,000+ employees
- 30%
- Postings per company, 90 days
- 2.2 · 1.7
- Website or DNS footprint
- 0 · 0
Who chooses which
Share of each tool's companies in every segment. "Leans" marks a gap of more than two points.
| Segment | GitHub Advanced Security | share | OWASP ZAP | share | Leans |
|---|---|---|---|---|---|
| 2-10 employees | 4 | 4% | 15 | 7% | OWASP ZAP |
| 11-50 employees | 7 | 7% | 46 | 20% | OWASP ZAP |
| 51-200 employees | 13 | 12% | 32 | 14% | even |
| 201-500 employees | 17 | 16% | 47 | 20% | OWASP ZAP |
| 501-1000 employees | 15 | 14% | 19 | 8% | GitHub Advanced Security |
| 1001-5000 employees | 23 | 22% | 34 | 15% | GitHub Advanced Security |
| 5001-10000 employees | 6 | 6% | 10 | 4% | even |
| 10,001+ employees | 20 | 19% | 24 | 10% | GitHub Advanced Security |
| Self-employed | – | – | 3 | 1% | outside top 12 |
| Segment | GitHub Advanced Security | share | OWASP ZAP | share | Leans |
|---|---|---|---|---|---|
| Technology & software | 44 | 42% | 140 | 61% | OWASP ZAP |
| Business & finance services | 35 | 33% | 37 | 16% | GitHub Advanced Security |
| Manufacturing & industry | 5 | 5% | 13 | 6% | even |
| Health care | 4 | 4% | 5 | 2% | even |
| Media & content | 4 | 4% | 3 | 1% | GitHub Advanced Security |
| Consumer services & leisure | 3 | 3% | 8 | 3% | even |
| Automotive | 2 | 2% | – | – | outside top 12 |
| Transport, logistics & rental | 2 | 2% | 3 | 1% | even |
| Utilities & infrastructure | 2 | 2% | 5 | 2% | even |
| Commerce & trade | 1 | 1% | 7 | 3% | OWASP ZAP |
| Public, community & associations | 1 | 1% | 2 | 1% | even |
| Hospitality & travel | 1 | 1% | – | – | outside top 12 |
| Property & construction | – | – | 4 | 2% | outside top 12 |
| Agriculture & forestry | – | – | 1 | 0% | outside top 12 |
| Segment | GitHub Advanced Security | share | OWASP ZAP | share | Leans |
|---|---|---|---|---|---|
| United States | 73 | 70% | 136 | 59% | GitHub Advanced Security |
| United Kingdom | 10 | 10% | 14 | 6% | GitHub Advanced Security |
| Australia | 4 | 4% | 5 | 2% | even |
| Canada | 4 | 4% | 4 | 2% | GitHub Advanced Security |
| Germany | 3 | 3% | 10 | 4% | even |
| Italy | 2 | 2% | – | – | outside top 12 |
| United Arab Emirates | 1 | 1% | 3 | 1% | even |
| Denmark | 1 | 1% | – | – | outside top 12 |
| Spain | 1 | 1% | 4 | 2% | even |
| Finland | 1 | 1% | – | – | outside top 12 |
| India | 1 | 1% | 15 | 7% | OWASP ZAP |
| Poland | 1 | 1% | – | – | outside top 12 |
| France | – | – | 5 | 2% | outside top 12 |
| Brazil | – | – | 3 | 1% | outside top 12 |
| Switzerland | – | – | 3 | 1% | outside top 12 |
| MY | – | – | 3 | 1% | outside top 12 |
| Segment | GitHub Advanced Security | share | OWASP ZAP | share | Leans |
|---|---|---|---|---|---|
| IT operations & business systems | 157 | 57% | 275 | 51% | GitHub Advanced Security |
| Software engineering | 76 | 28% | 176 | 33% | OWASP ZAP |
| Sales | 12 | 4% | – | – | outside top 12 |
| Data & AI | 3 | 1% | 4 | 1% | even |
| Product, program & project management | 2 | 1% | – | – | outside top 12 |
| Business development & strategy | 1 | 0% | 3 | 1% | even |
| Design & UX | 1 | 0% | – | – | outside top 12 |
| General management & consulting | 1 | 0% | 2 | 0% | even |
| Procurement and purchasing | 1 | 0% | – | – | outside top 12 |
| Quality, safety & environment | – | – | 9 | 2% | outside top 12 |
| Engineering (non-software) | – | – | 7 | 1% | outside top 12 |
| Construction and civil | – | – | 4 | 1% | outside top 12 |
| Healthcare clinical | – | – | 4 | 1% | outside top 12 |
| Education & training | – | – | 3 | 1% | outside top 12 |
| Legal, compliance & risk | – | – | 2 | 0% | outside top 12 |
| Administration & office | – | – | 1 | 0% | outside top 12 |
The companies behind each column
Companies using GitHub Advanced Security →
Companies using OWASP ZAP →
application security testing ranked →
Quote the sentence with the date and the link. The numbers change daily; the link always shows the current ones.
OWASP ZAP is named by 230 companies in job postings and GitHub Advanced Security by 105; 12 name both. (Breaknorm, 30 October 2026, https://breaknorm.co/compare/github-advanced-security-vs-owasp-zap)
Read from the source, not self-reported
Every number on this page can be traced to a page we crawled or a posting we read. Full methodology →
- Job postingsRead hourly from career sites. A tool counts when the employer's own text names it as the team's system; both tools can count for one company.
- Website and DNSScripts and embeds on the company's pages, plus SPF, DKIM, MX and CNAME records of its domain that point at the vendor.
- SegmentsCountry, size and industry from the company profile built from its website.
- Not a reviewNo ratings, prices or feature claims. For those, read the vendors.
GitHub Advanced Security vs OWASP ZAP: questions
Which is more used, GitHub Advanced Security or OWASP ZAP?
By companies naming it in their own job postings, OWASP ZAP (230) over GitHub Advanced Security (105). By website-and-DNS footprint, OWASP ZAP (0 vs 0), because its scripts and mail records sit on many small company sites.
Who chooses GitHub Advanced Security?
23% of GitHub Advanced Security companies have 2 to 200 employees, against 40% for OWASP ZAP. 47% of GitHub Advanced Security companies have over 1,000 employees, against 30% for OWASP ZAP.
Do companies run both?
12 companies name both in their postings, usually GitHub Advanced Security in marketing and OWASP ZAP in sales, or during a migration.
Where do these numbers come from?
From the employer's own text in job postings read hourly from career sites, and from scripts found on company websites in our crawl. No vendor data, no surveys.
Get either list your way
The same data as a search, over MCP and the API, as bulk files, or pushed to you as it changes.
Every company on either tool,
with the person who owns it
Filter on GitHub Advanced Security or OWASP ZAP. Start free, no card.