Following the steps used to spider/scan DVWA. This was tested with DVWA 2.3 ZAP 2.15.0 To set up DVWA follow the instructions on https://github.com/digininja/DVWA In this case the following commands were used, but you should check to see if anything has changed: git clone https://github.com/digininja/DVWA.git cd DVWA docker compose up -d To run a full authenticated scan against DVWA download and import the Automation Framework plan: