In our previous discussion on website vulnerability, we reviewed XSS, path traversal, SQL injections, and other exploits. If need be, the viewer is advised to review that video prior to going forward with this one. In today's discussion, we provide an overview of The Zed Attack Proxy (ZAP), an easy to use integrated penetration testing tool for finding vulnerabilities in web applications. It is designed to be used by people with a wide range of security experience and as such is ideal for developers and functional testers who are new to penetration testing.