Insights Add-on on ZAP

Insights Fields

Mon, 01 Jan 0001 00:00:00 +0000

An indication of how significant an Insight is.

The following Levels are supported:

Info: An informational Insight which gives you more information about the target
Low: An Insight which is potentially a problem, depending on how your application works
Medium: A more significant Insight which should be investigated ASAP. It potentially means that the scan is not working as expected
High: A very significant Insight which is highly likely to impact the scan effectiveness

We recommend terminating a scan early and investigating if any Medium or High level Insights are reported.

Mon, 01 Jan 0001 00:00:00 +0000

This is the full set of Insights currently supported:

Key	Description	Site	Type	Low	High
insight.database.full	Database full			High	High
insight.diskspace.full	Diskspace full			High	High
insight.memory.usage	Percentage of memory used		Mem	Medium	High
insight.log.error	Count of ZAP errors			Low	Low
insight.log.warn	Count of ZAP warnings			Low	Low
insight.network.failure	Percentage of network failures		Msg	Low	Med
insight.auth.failure	Percentage of authentication failures	Yes	Msg	Low	High
insight.code.Xxx	Percentage of Xxx response codes	Yes	Msg	Info	Low
insight.response.slow	Percentage of slow responses	Yes	Msg	Info	Low
insight.endpoint.content.CCC	Percentage of responses with content-type CCC	Yes		Info	Info
insight.endpoint.method.MMM	Percentage of responses with method MMM	Yes		Info	Info
insight.endpoint.total	Total number of endpoints	Yes		Info	Info

The columns show the Insight fields with the following additions:

Mon, 01 Jan 0001 00:00:00 +0000

This add-on supports the Automation Framework.

The insights job allows you to configure the insights options.

Mon, 01 Jan 0001 00:00:00 +0000

This screen allows you to configure the Insights options.

If set then a High Level Insight will stop automation.