ZAP is a free tool designed to help everyone secure their own websites. Unfortunately this means that other people can use it to attack your website as well. ZAP is not designed to be a covert tool - it uses various variations of “ZAP” in its attacks, so if someone does use ZAP to attack your site then this should be apparent in your web server logs.
