GitLab vs OWASP Zap comparison

GitLab
Read 70 GitLab reviews
  • 3,572 Views
  • 2,954 Comparison Views
98% willing to recommend
OWASP Zap
Read 37 OWASP Zap reviews
  • 20,009 Views
  • 9,187 Comparison Views
87% willing to recommend
 

Comparison Buyer's Guide

Download the report
Executive SummaryUpdated on Nov 2, 2022

We performed a comparison between GitLab and OWASP Zap based on our users’ reviews in four categories. After reading all of the collected data, you can find our conclusion below.

  • Ease of Deployment: GitLab users say deployment is straightforward. Some OWASP Zap users say the solution is easy to deploy, while some find it difficult.
  • Features: Users of both products are happy with their stability, scalability, and ease of use.

    GitLab users like the solution’s mature CI/CD engine, UI, and its DevOps. Reviewers mention that the integration with Kubernetes needs improvement and that the solution should be more cloud-native.

    OWASP Zap users like the solution’s heads up display, reporting of vulnerabilities, and reliability. Users say they would like to see a marketplace of additional options offered.
  • Pricing: Gitlab has an open-source edition and a commercial version. Most users consider the commercial version to be reasonably priced, while a few feel it is expensive. Users of OWASP Zap note that it is an open-source solution.
  • Service and Support: Gitlab users share mixed reviews on the support they receive. Most users of OWASP Zap note that the community support makes up for the fact that it lacks traditional technical support.

Comparison Results: Of the two solutions, users find deployment to be easier with Gitlab. For this reason, Gitlab comes out slightly on top in this comparison.

DOWNLOAD THE COMPLETE REPORT
To learn more, read our detailed GitLab vs. OWASP Zap Report (Updated: May 2024).
Buyer's Guide
GitLab vs. OWASP Zap
May 2024
Download the complete report
Helped 787,061 peers since 2012
 

Categories and Ranking

GitLab
Ranking in Static Application Security Testing (SAST)
7th
Average Rating
8.6
Number of Reviews
70
Ranking in other categories
Application Security Tools (6th), Build Automation (1st), Release Automation (2nd), Rapid Application Development Software (10th), Software Composition Analysis (SCA) (6th), Enterprise Agile Planning Tools (2nd), Fuzz Testing Tools (2nd), DevSecOps (3rd)
OWASP Zap
Ranking in Static Application Security Testing (SAST)
8th
Average Rating
7.6
Number of Reviews
37
Ranking in other categories
No ranking in other categories
 

Market share comparison

As of June 2024, in the Static Application Security Testing (SAST) category, the market share of GitLab is 2.8% and it increased by 15.2% compared to the previous year. The market share of OWASP Zap is 4.4% and it decreased by 30.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Static Application Security Testing (SAST)
Unique Categories:
Application Security Tools
3.7%
Build Automation
24.4%
No other categories found
 

Featured Reviews

MohamedElazzouzi - PeerSpot reviewer
Dec 20, 2022
I like the security features and SAS tools
I use GitLab to manage repository code sources, scanning code sources, and CI/CD. We have around 100 users GitLab helps us integrate with many types of software. You can deploy and integrate source code, various tools, webhooks, etc.  I like GitLab's security and SAS tools. GitLab could add a…
Read full review
NS
Mar 16, 2023
Good functionality and works well with Portswigger Burp but it needs to add more extensions
I primarily use the solution for different use cases. It's good for analysis. It also offers additional extensions you can take advantage of. There are different scan extensions you can leverage.  It helps that we can use it hand in hand with Portswigger Burp. Since each have scanning…
Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"I find the features and version control history to be most valuable for our development workflow. These aspects provide us with a clear view of changes and help us manage requests efficiently."
"The solution's most valuable feature is that it is compatible with GitHub. The product's integration capabilities are sufficient for our small company of 35 people."
"I have found the most valuable feature is security control. I also like the branching and cloning software."
"CI/CD is valuable for me."
"It is very useful for reviews. We are using branch merging operations and full reset operations. It is also very useful for merging our code and tracking another branch. The graph diagrams of Git are very useful. Its interface is straightforward and not too complex for us."
"For us, Gitlab's most valuable feature is the integration with Cypress. We're using Cypress as an automation tool, so we're using GitLab as a tool for running in parallel."
"The code merging capability is something that we use very frequently."
"The dashboard and interface make it easy to use."
More GitLab pros
"We use the solution for security testing."
"Stability-wise, I rate the solution a nine out of ten. I think it's stable enough. I don't see any crashes within the application, so its stability is high."
"Simple to use, good user interface."
"The reporting is quite intuitive, which gives you a clear indication of what kind of vulnerability you have that you can drill down on to gather more information."
"It updates repositories and libraries quickly."
"It has evolved over the years and recently in the last year they have added, HUD (Heads Up Display)."
"The solution is scalable."
"The scalability of this product is very good."
More OWASP Zap pros
 

Cons

"This solution could be improved by adding modifications such as slack notifications."
"I rate the support from GitLab a four out of five."
"There is room for improvement in GitLab Agents."
"Expand features to match other tools such as a static code analysis tool so third-party integrations are not required."
"Based on what I know so far, its integration with Kubernetes is not so good. We have to develop many things to make it work. We have to acquire third-party components to work with Kubernetes."
"I would like to see security increased in the future. A secure environment is very important."
"GitLab's Windows version is yet not available and having this would be an improvement."
"The only thing our company is really waiting on in terms of features is the development of metrics."
More GitLab cons
"The solution is unable to customize reports."
"The port scanner is a little too slow.​"
"I would like to see a version of “repeater” within OWASP ZAP, a tool capable of sending from one to 1000 of the same requests, but with preselected modified fields, changing from a predetermined word ​list, or manually created."
"I'd like to see a kind of feature where we can just track what our last vulnerability was and how it has improved or not. More reports that can have some kind of base-lining, I think that would be a good feature too. I'm not sure whether it can be achieved and implement but I think that would really help."
"OWASP Zap needs to extend to mobile application testing."
"Online documentation can be improved to utilize all features of ZAP and API methods to make use in automation."
"There isn't too much information about it online."
"There's very little documentation that comes with OWASP Zap."
More OWASP Zap cons
 

Pricing and Cost Advice

"I'm not aware of the licensing costs because those were covered by the customer."
"This is an open-source solution."
"As I work in a vast enterprise, I'm unsure about the licensing cost for GitLab. It's the management team that takes care of that."
"Its price is fine. It is on the cheaper side and not expensive. You have to pay additionally for GitLab CI/CD minutes. Initially, we used the free version. When we ran out of GitLab minutes, we migrated to the paid version."
"The solution is based on a licensing model that includes technical support and is paid annually."
"The price of GitLab could be better, it is expensive."
"GitLab's pricing is good compared to others on the market."
"I don't mind the price because I use the free version."
More GitLab pricing and cost advice
"This solution is open source and free."
"This app is completely free and open source. So there is no question about any pricing."
"The tool is open-source."
"The solution’s pricing is high."
"As Zap is free and open-source, with tons of features similar to those of commercial solutions, I would definitely recommend trying it out."
"We have used the freeware version. I believe Zap only has freeware."
"It's free and open, currently under the Apache 2 license. If ZAP does what you need it to do, selling a free solution is a very easy."
"This is an open-source solution and can be used free of charge."
More OWASP Zap pricing and cost advice
report
See which vendors are best for you
Use our free recommendation engine to learn which Static Application Security Testing (SAST) solutions are best for your needs.
See recommendations
787,061 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
26%
Computer Software Company
12%
Financial Services Firm
11%
Manufacturing Company
8%
Computer Software Company
18%
Financial Services Firm
10%
Government
7%
Manufacturing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about GitLab?
I find the features and version control history to be most valuable for our development workflow. These aspects provide us with a clear view of changes and help us manage requests efficiently.
See all answers
What is your experience regarding pricing and costs for GitLab?
For small-scale usage, GitLab offers a free tier. For enterprise pricing, GitLab is more expensive than GitHub, as it's not as widely adopted. GitLab is the preferred choice for many developers des...
See all answers
What needs improvement with GitLab?
I believe there's room for improvement in the advanced features, particularly in enhancing the pipeline functionalities. Better integration and usability within the pipeline could make a significan...
See all answers
Is OWASP Zap better than PortSwigger Burp Suite Pro?
OWASP Zap and PortSwigger Burp Suite Pro have many similar features. OWASP Zap has web application scanning available with basic security vulnerabilities while Burp Suite Pro has it available with ...
See all answers
What do you like most about OWASP Zap?
The best feature is the Zap HUD (Heads Up Display) because the customers can use the website normally. If we scan websites with automatic scanning, and the website has a web application firewall, i...
See all answers
What is your experience regarding pricing and costs for OWASP Zap?
The tool is open source.
See all answers
 

Comparisons

Microsoft Azure DevOps vs GitLab Logo
Microsoft Azure DevOps vs GitLab
Compared 50% of the time
SonarQube vs GitLab Logo
SonarQube vs GitLab
Compared 5% of the time
Bamboo vs GitLab Logo
Bamboo vs GitLab
Compared 5% of the time
AWS CodePipeline vs GitLab Logo
AWS CodePipeline vs GitLab
Compared 5% of the time
Tekton vs GitLab Logo
Tekton vs GitLab
Compared 4% of the time
More GitLab Competitors
SonarQube vs OWASP Zap Logo
SonarQube vs OWASP Zap
Compared 21% of the time
Acunetix vs OWASP Zap Logo
Acunetix vs OWASP Zap
Compared 13% of the time
Qualys Web Application Scanning vs OWASP Zap Logo
Qualys Web Application Scanning vs OWASP Zap
Compared 11% of the time
Veracode vs OWASP Zap Logo
Veracode vs OWASP Zap
Compared 9% of the time
Rapid7 AppSpider vs OWASP Zap Logo
Rapid7 AppSpider vs OWASP Zap
Compared 2% of the time
More OWASP Zap Competitors
 

Product Reports

Buyer's Guide
GitLab
June 2024
GitLab reportDownload GitLab product report
Buyer's Guide
OWASP Zap
May 2024
OWASP Zap reportDownload OWASP Zap product report
 

Also Known As

Fuzzit
No data available
 

Learn More

GitLab
OWASP
 

Overview

GitLab is a complete DevOps platform that enables teams to collaborate and deliver software faster. 

It provides a single application for the entire DevOps lifecycle, from planning and development to testing, deployment, and monitoring. 

With GitLab, teams can streamline their workflows, automate processes, and improve productivity.

OWASP Zap is a free and open-source web application security scanner. 

The solution helps developers identify vulnerabilities in their web applications by actively scanning for common security issues. 

With its user-friendly interface and powerful features, Zap is a popular choice among developers for ensuring the security of their web applications.

 

Sample Customers

1. NASA  2. IBM  3. Sony  4. Alibaba  5. CERN  6. Siemens  7. Volkswagen  8. ING  9. Ticketmaster  10. SpaceX  11. Adobe  12. Intuit  13. Autodesk  14. Rakuten  15. Unity Technologies  16. Pandora  17. Electronic Arts  18. Nordstrom  19. Verizon  20. Comcast  21. Philips  22. Deutsche Telekom  23. Orange  24. Fujitsu  25. Ericsson  26. Nokia  27. General Electric  28. Cisco  29. Accenture  30. Deloitte  31. PwC  32. KPMG
1. Google 2. Microsoft 3. IBM 4. Amazon 5. Facebook 6. Twitter 7. LinkedIn 8. Netflix 9. Adobe 10. PayPal 11. Salesforce 12. Cisco 13. Oracle 14. Intel 15. HP 16. Dell 17. VMware 18. Symantec 19. McAfee 20. Citrix 21. Red Hat 22. Juniper Networks 23. SAP 24. Accenture 25. Deloitte 26. Ernst & Young 27. PwC 28. KPMG 29. Capgemini 30. Infosys 31. Wipro 32. TCS
Buyer's Guide
GitLab vs. OWASP Zap
May 2024
Free Report: GitLab vs. OWASP Zap
Find out what your peers are saying about GitLab vs. OWASP Zap and other solutions. Updated: May 2024.
DOWNLOAD NOW
787,061 professionals have used our research since 2012.
See our GitLab vs. OWASP Zap report.
See our list of best Static Application Security Testing (SAST) vendors.

We monitor all Static Application Security Testing (SAST) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.