---
title: Vulnerability Assessment
slug: docuflow-guides/vulnerability-assessment
docTags: 
createdAt: 2021-02-09T22:25:53.000Z
---

VersaFile software applications are scanned for vulnerabilities using the Open Web Application Security Project's Zed Attack Proxy (ZAP) software. 

OWASP ZAP provides penetration testing of web applications, providing coverage analysis for software security risks such as:

- Broken Authentication, Broken Access Control, Security Misconfiguration 
- Sensitive Data Exposure, Insecure Deserialization, Cross-Site Scripting
- Injection, XML External Entities, Insufficient Logging & Monitoring
- Using Components with Known Vulnerabilities