API scans

To run an API scan specify the URL path to OpenAPI specification and choose ZAP OpenAPI scanner. It will parse the specification and execute the scan against discovered routes and parameters.

Both Cookies and Authorization header supported by this scan.