Distribution of the OWASP ZAP security testing proxy, including the desktop interface, active and passive scan rules, and the add-on marketplace. Built and maintained by WIEWAVE for Azure Marketplace and AWS Marketplace, on Ubuntu, Debian, Red Hat Enterprise Linux, AlmaLinux and Rocky Linux.
| Built & maintained by | WIEWAVE |
|---|---|
| Category | Security |
| Operating systems | Ubuntu, Debian, Red Hat Enterprise Linux, AlmaLinux, Rocky Linux |
| Marketplaces | Azure Marketplace and AWS Marketplace |
| Offer types | Public listing, with private offers on request |
| Marketplace | Status |
|---|---|
| Azure Marketplace | Published |
| AWS Marketplace | Published |
| Google Cloud Marketplace | Available on request |
Need it on another marketplace, or as a private offer for your organisation? cloud@wiewave.com
Each image follows its distribution's own provisioning model, package manager and security tooling — not one build relabelled several times.
LTS and interim releases, Minimal and Pro variants, built to Canonical's cloud-image conventions.
Stable and oldstable, with backports where a workload needs a newer runtime than the release ships.
RHEL 8 and 9 images, including BYOS and pay-as-you-go licensing models on each marketplace.
The 1:1 RHEL-compatible rebuild, and the default landing spot for teams migrating off CentOS Linux.
Enterprise-grade RHEL compatibility with a community governance model, on 8 and 9 streams.
The same four steps behind every offer we've published, including the hardening and CIS Benchmark checks every build goes through.
The distribution, licensing model and target marketplaces are agreed before anything is built.
Packer templates, Ansible provisioning and a pinned package set — then hardened, scanned and checked against the CIS Benchmark for its distribution.
Taken through each cloud's own certification pipeline before it goes live on the marketplace.
Rebuilt on the upstream security cadence and re-published, with old versions retired without breaking deployments.
If yours isn't here, ask our marketplace team directly.
Secrets management, identity, VPN gateways and CIS-benchmarked hardened base images.
Network security monitor that turns traffic into structured connection, DNS and HTTP logs, with a scripting language for detection; formerly named Bro.
Identity and access management server offering OIDC, OAuth2 and SAML single sign-on, multi-tenancy and passwordless login, backed by PostgreSQL.
A self-hosted two-factor authentication token manager that stores and generates TOTP and HOTP codes through a web interface.
A tool that automates ACME protocol challenges to obtain and renew Let's Encrypt SSL/TLS certificates.
A Windows Server domain controller that provides centralised identity, authentication, and Group Policy management.
A self-hosted email alias and forwarding service, formerly AnonAddy, that lets users create anonymous addresses to protect their real inbox.
Tell us the distribution, the marketplace and the commercial model — we'll build, certify and publish it as a public listing or a private offer.
