Enterprise Platform

ZAP integrates with
your entire toolchain.

ZAP works with the tools your teams already use — GitHub, Azure DevOps, Terraform, ServiceNow, Jira, Sentinel, Defender, Security Hub and Chronicle. No rip-and-replace. No new tooling to learn.

GitHub Azure DevOps Terraform ServiceNow Jira Sentinel Defender Security Hub Chronicle SAML 2.0 SSO

Book a session

Integration categories

SCM · IaC · ITSM · SIEM · Identity · API

RBAC roles

Platform Lead · Engineer · Analyst · Read Only

Zero

Identity silos

Your IdP — Azure AD, AWS IAM, SAML 2.0

REST

API available

CI/CD integration and custom tooling

Platform integrations

Works with your stack.

ZAP does not require new tooling. It connects to the platforms your platform and security teams already use — and adds governed automation on top.

Source Control Management

GitHub

GitHub Cloud · GitHub Enterprise Server · PR approval workflows · Branch protection enforcement · Required status checks · Full Git audit trail

Azure DevOps

Azure DevOps Services · Azure DevOps Server · Pull request creation · Branch policies · Work item linking · Pipeline triggers

Infrastructure as Code

Terraform

Terraform 1.4+ · Production-quality Terraform generated by ZAP IaC Engine · CIS-compliant by default · State management included · Module registry integration · OpenTofu on roadmap

ITSM & CMDB

ServiceNow

Incident auto-raise on findings · Change requests for IaC deployments · CMDB configuration item sync · Auto-close on resolution · Full audit trail in ServiceNow

Jira

Issue auto-raise on findings · Project and sprint integration · Status sync with ZAP remediation lifecycle · Jira Cloud and Server

SIEM & Security

Microsoft Sentinel

Findings ingested automatically · Analytics rule integration · Incident creation · Log Analytics workspace connection

Microsoft Defender

Defender for Cloud findings surface in ZAP Dashboard · Alert enrichment · Resource context preserved

AWS Security Hub

Security Hub findings ingested in real time · Custom insight creation · Multi-account aggregation supported

Google Chronicle

Chronicle SIEM integration · Finding normalisation · Cross-cloud correlation

Identity & Access

Azure Active Directory

SSO via Azure AD · Group-based RBAC mapping · Conditional Access policy respected · MFA enforced

AWS IAM

IAM Identity Center integration · Permission Set mapping to ZAP roles · OIDC federation

SAML 2.0

Any SAML 2.0 compatible identity provider · Okta · Ping Identity · ADFS · On-premises IdP support

API & Pipelines

REST API

Full ZAP REST API · CI/CD pipeline integration · Custom tooling and dashboards · Webhook support · Automated compliance gates · API documentation post-onboarding

Access control

Four roles. Every team covered.

ZAP RBAC maps to your existing identity provider — no new user management, no additional passwords, no separate admin console. Your groups, your access control.

Platform Lead

Full

Full access

Approve and reject deployment PRs
Configure ZAP platform settings
Manage RBAC assignments
Review and approve ZAP AI remediation PRs
Configure integration connections
Access all audit logs and evidence packs
Override compliance findings with documented justification

Platform Engineer

Deploy

Deploy access

Request new landing zones
Run ZAP Compliant Scans
Trigger ZAP AI queries
Raise ITSM tickets manually
View compliance dashboard and findings
Generate evidence packs
Cannot approve own deployments

Security Analyst

Audit

Read + audit

View all findings across all clouds
Raise manual compliance findings
Generate and export evidence packs
View ZAP AI remediation status
Access audit logs
View RBAC assignments (cannot modify)
Cannot deploy or approve changes

Read Only

View

View only

View compliance dashboard
View evidence pack summaries
View finding status (no details)
View FinOps summaries
Cannot access resource-level data
Suitable for executive and board reporting

Identity & SSO

Your identity provider. Zero silos.

ZAP integrates with your existing IdP. No new identity store. No additional passwords. RBAC assignment via existing group membership.

Azure Active Directory

Azure-primary and hybrid estates

SSO via Azure AD
Group-based RBAC — map your AD groups to ZAP roles
Conditional Access policy respected
MFA enforcement inherited
Privileged Identity Management integration

AWS IAM Identity Center

AWS-primary estates

IAM Identity Center integration
Permission Set mapping to ZAP RBAC roles
OIDC federation — no standing access
AWS Organizations multi-account support
SCIM provisioning

SAML 2.0

Any SAML-compatible IdP

Okta · Ping Identity · ADFS · Auth0
On-premises IdP support
Attribute-based RBAC mapping
JIT provisioning
MFA respected from IdP policy

REST API

Integrate ZAP into
your own pipelines.

ZAP exposes a REST API that enables your platform engineering team to integrate governance checks directly into CI/CD pipelines, custom dashboards and automation workflows.

CI/CD pipeline compliance gates — block non-compliant deployments automatically

Custom dashboard and reporting integration

Webhook notifications for findings and remediations

External tooling — SOAR platforms, custom ITSM systems

Automated evidence generation in build pipelines

Full API documentation provided post-onboarding.

ZAP REST API

GET/v1/deployments/{id}/compliance

Deployment Check

Returns compliance status, gate results and findings for a specific deployment. Used in PR validation pipelines.

GET/v1/scans/latest?cloud=azure

Scan Results

Returns latest scan results across specified cloud. Filter by severity, framework or resource type.

POST/v1/evidence-packs

Evidence Pack

Generates and returns a compliance evidence pack for specified frameworks on demand.

GET/v1/findings?status=open&sev=critical

Finding Status

Returns open findings by severity, cloud, framework or resource. Paginated.

Frequently asked questions

Common questions about the ZAP platform.

No. ZAP integrates with GitHub and Azure DevOps as they are. Existing repositories, branch protection rules and team permissions are respected. ZAP adds governance on top — it does not replace your existing workflows.

ServiceNow and Jira. Incidents are auto-raised on findings, change requests created for IaC PRs and tickets auto-closed on resolution. CMDB sync is native for ServiceNow.

No. ZAP integrates with your existing identity provider — Azure Active Directory, AWS IAM or SAML 2.0 compatible IdPs. ZAP RBAC maps to your existing groups. No new identity store.

Platform Lead: full access — approve deployments, manage policy, configure integrations. Platform Engineer: deploy, scan, raise PRs. Security Analyst: view all findings, raise manual findings, generate evidence packs. Read Only: view dashboard and reports — no deployment or change access.

Yes. ZAP exposes a REST API that enables CI/CD pipeline integration, custom tooling, external dashboards and automated compliance checks. API documentation available post-onboarding.

Yes. ZAP Compliant Scan can be invoked at pipeline stages — pull request validation, pre-deployment gate, post-deployment verification. Results returned as pass/fail with finding details for developer feedback.

Microsoft Sentinel, Microsoft Defender for Cloud, AWS Security Hub and Google Chronicle. Findings flow automatically — no manual export, no connector configuration, no duplicate tooling.

Yes. ZAP Enterprise Platform supports multi-tenancy — separate workspaces with isolated data, independent RBAC and separate evidence packs per tenant. Used in managed service provider deployments.

Free · 30 minutes · No commitment

See the ZAP platform live.

30 minutes. We show you integrations, RBAC, ZAP AI and evidence packs on our live instance.