Try for free
Try for free

Companies using OWASP ZAP

8,932 companies in our data use OWASP ZAP, and 2,994 of them name it in job posts they wrote. Its share of job posts held steady in the three months to August 2026; 2,375 job posts named it from October 2025 to August 2026. Software Development Engineer in Test is the role that names it most often.

Data as of November 9, 2026 · Markdown version

Which companies name OWASP ZAP in the most job posts?

Deloitte leads with 109 job posts naming OWASP ZAP, followed by Money Forward, Inc. and 3Pillar. 3Pillar is the newest of the five companies in the table, with its first job post naming it in May 2024.
Company Posts People Recent job post
Deloitte Professional Services · first seen Nov 2022 109 94 "Experience using common testing tools like Burp, OWASP ZAP, Metasploit, Postman, Swagger, NMAP, Qualys, SQLMap, others."Penetration Tester (US Citizens Only), Nov 7, 2026
Money Forward, Inc. Information · first seen Jul 2023 98 0 "Security & Quality Automation: OWASP ZAP, Burp Suite, Sider (Brakeman), Snyk, VAddy, Dockle, Trivy, and various AI tooling"Senior iOS Engineer, Nov 7, 2026
3Pillar Professional Services · first seen May 2024 80 1 "Security testing practices – knowledge of OWASP vulnerabilities, experience with security testing tools (OWASP ZAP, Fortify)"Senior QA Automation Engineer (Python | Selenium | Pytest), Jul 7, 2026
Accenture Professional Services · first seen Jun 2023 72 94 "SonarQube, Checkmarx, Snyk, OWASP ZAP or similar SAST/DAST and vulnerability scanning tools"devsecops engineer manager, Nov 7, 2026
株式会社GA technologies / GA technologies Co., Ltd. Real Estate and Rental and Leasing · first seen Jul 2023 65 0 "脆弱性診断: OWASP ZAP、Burp Suite"QA Engineer Manager Candidate (Japan's second fastest growing company with 100 billion yen in sales in 10 years..., Jan 12, 2026
Showing 1 to 5 of 2,994 companies with job posts Sign up to see all companies using OWASP ZAP ›

What else do we know about OWASP ZAP?

Is hiring for OWASP ZAP growing?

Demand for OWASP ZAP is steady: 1.3 in every 10,000 job posts from June to August 2026, close to the 1.2 of March to May. Its busiest month was November 2025, at 1.6.
Share of job posts naming OWASP ZAP by month, October 2025 to August 2026, in job posts in every 10,000 Moves from 1.2 in October 2025 to 1.2 in August 2026, in job posts in every 10,000. 1.8 1.4 0.92 0.46 0 1.2 Oct '25 Nov Dec Jan '26 Feb Mar Apr May Jun Jul Aug
Show the data
MonthJob posts naming OWASP ZAPAll job postsPer 10,000
Oct 20251721,413,6731.2
Nov 20252901,822,1191.6
Dec 20251511,236,1031.2
Jan 20262001,828,0021.1
Feb 20262161,856,6471.2
Mar 20262021,850,7111.1
Apr 20262231,728,8861.3
May 20262191,821,5091.2
Jun 20262061,909,4961.1
Jul 20262671,815,1801.5
Aug 20262291,835,6981.2

How many companies named OWASP ZAP in a job post for the first time in recent months?

From June to August 2026, 244 companies posted their first job naming OWASP ZAP; 202 did from March to May. The 244 from June to August are 8.1% of all 2,994 companies whose job posts name it.
March to May 2026 202
June to August 2026 244
October 2025 to August 2026 746

Companies whose first job post naming it appeared in that period. Recruiters, staffing firms and job boards are left out.

How do we know which companies use OWASP ZAP?

Of the 8,932 companies here, 5,938 are known from what employees list on their profiles. 638 show up in both job posts and employees' profiles.
How we know Companies Share
Job posts name OWASP ZAP
2,994 34%
Employees' profiles list OWASP ZAP
5,938 66%

8,932 companies. Each is counted once, under the strongest evidence we have for it.

What size are the companies that use OWASP ZAP?

45% of OWASP ZAP users are companies with 50 to 999 employees, the largest size group. 2,024 of its companies have fewer than 50 employees.

Share of its companies Typical tech page

ShareTypical
Under 50 employees
23% 22%
50 to 999
45% 38%
1,000 to 5,000
17% 17%
Over 5,000
15% 23%

Where are OWASP ZAP companies based?

Beyond the United States (35%), OWASP ZAP is unusually common in India, at 14% of its companies. France is less common than usual, at 2.5% against 4.6% on the typical tech page.
ShareTypical
United States
35% 43%
India
14% 6.9%
United Kingdom
6.5% 6.4%
Canada
3.4% 3.6%
Brazil
2.6% 2.8%
France
2.5% 4.6%

Companies in 140 countries and territories. Shares are of companies with a known headquarters country.

Show the data
CountryCompaniesShareTypical tech page
United States2,99835%43%
India1,21614%6.9%
United Kingdom5586.5%6.4%
Canada2913.4%3.6%
Brazil2232.6%2.8%
France2132.5%4.6%

Which teams work with OWASP ZAP?

Job posts most often place OWASP ZAP with cybersecurity, security and information security teams. Application security and engineering teams follow, at 28 companies each.
Team Companies
Cybersecurity
65
Security
53
Information security
39
Application security
28
Engineering
28
Product security
23

What else do OWASP ZAP companies use?

OWASP ZAP companies are 40 times as likely as similar companies to use sqlmap: 7.7% of them, against 0.19%. Next is Burp Suite: 74% of these companies use it, against 2.3% of similar ones.

Share of the 2,101 OWASP ZAP companies counted here whose job posts also name the tool Typical for companies the same size

Tool Also name it Typical Times as common
sqlmap 161 companies
7.7% 0.19% 40x
Burp Suite 1,545 companies
74% 2.3% 32x
Semgrep 115 companies
5.5% 0.18% 31x
Acunetix 122 companies
5.8% 0.2% 29x
Tool Also name it Typical Times as common
Trivy 250 companies
12% 0.43% 28x
Checkmarx 436 companies
21% 0.8% 26x
Snyk 481 companies
23% 1% 23x
OpenVAS 138 companies
6.6% 0.29% 23x

Which companies started naming OWASP ZAP in job posts recently?

Between April and August 2026, OWASP ZAP appeared for the first time in job posts at 282 companies: 171 commercial, 65 mid-market and 46 enterprise. Another 6 were AI-native companies, which we list separately.
AI native any size · 6 new
Company Posts
Coreshield Technologies 2
Spyne 1
gnani.ai 1
Skit.ai 1
Terra Security 1
Commercial 50 to 999 employees · 171 new
Company Posts
Infopulse 4
Manulife IT Delivery Center Asia Inc. 4
PT Adicipta Inovasi Teknologi 4
Addvisor Group 4
Magnatec Systems Private Limited 4
Mid-market 1,000 to 5,000 employees · 65 new
Company Posts
Stefanini LATAM 6
Koniag Government Services 4
Zeta Global 3
East West Bank 3
LUX MED 3
Enterprise over 5,000 employees · 46 new
Company Posts
Sanofi 4
Fujitsu 4
First Citizens Bank 4
Raytheon Technologies 3
MSC Mediterranean Shipping Company 3

Companies that named OWASP ZAP in a job post for the first time between April and August 2026, ranked by their job posts in those months. AI-native companies get a group of their own, whatever their size. Recruiters and job boards are left out.

Which roles mention OWASP ZAP most?

No single role dominates for OWASP ZAP; Software Development Engineer in Test leads with 19% of the job posts. Software Development Engineer in Test posts naming it numbered 111 from March to May 2026 and 111 from June to August.
Role Share Posts
Software Development Engineer in Test
19% 449
Security Engineer
14% 323
Penetration Tester
10% 237
DevSecOps Engineer
7.3% 173
Application Security Engineer
7% 167
Product Security
4.5% 107
Show the data
RoleShareOct 2025 to Aug 2026Mar to May 2026Jun to Aug 2026
Software Development Engineer in Test19%449111111
Security Engineer14%32392101
Penetration Tester10%2376768
DevSecOps Engineer7.3%1733847
Application Security Engineer7%1674049
Product Security4.5%1072528

Which project themes come up in OWASP ZAP job posts?

380 job posts naming OWASP ZAP describe broad digital transformation, and 60 describe Cloud Cost Optimization work. Security Infrastructure Modernization is next, in 51 job posts.
Project theme Job posts
Digital Transformation 380
Cloud Cost Optimization 60
Security Infrastructure Modernization 51
Cloud Migration 39
About this data

Sumble built this page. Sumble gives sales, marketing and other GTM teams technographics and hiring signals for the companies they sell to: the technologies each company uses, which teams are hiring and for what, and who reports to whom. That helps a team know who to contact, why now, and what to say.

Sumble covers more than 3.6 million companies, 93 million job posts collected since 2022 and 194 million employee profiles, and tracks more than 37,000 technologies. It finds which technologies a company uses by reading its job posts and its employees' public profiles.

Sumble has a free plan, and the same data is available through its API and MCP server.

A company counts when its own job posts or its employees' public profiles name the technology. Hiring is that technology's share of all job posts collected each month. Quotes are copied word for word from the companies' job posts.

Every figure on this page comes from Sumble's own analysis, and you won't find it outside Sumble.