Owasp Zap vs Arachni: Which One is Better in Vulnerability Assesment?

Security testing is a crucial step in protecting information and ensuring that the software system meets security standards. To identify vulnerabilities, analysis with scanning tools like OWASP ZAP and Arachni is required. However, without a comprehensive understanding of the scope and criticality of vulnerabilities identified by these tools, it’s challenging to determine the accuracy and relevance of the results. Therefore, it is essential to perform thorough evaluations and benchmarking of vulnerability scanning tools to ensure they deliver reliable and accurate outcomes. This research aims to analyze and compare the performance of OWASP ZAP and Arachni in detecting vulnerabilities. The method used includes the preparation of testing equipment requirements, preparation of testing tools, vulnerability analysis, penetration testing, performance comparison of vulnerability scan tools, and performance evaluation of vulnerability scan tools. The results show that OWASP ZAP detected 16 vulnerabilities with a high level of consistency with the penetration testing results, while Arachni detected 9 vulnerabilities with lower consistency, making OWASP ZAP superior to Arachni.