<![CDATA[The increasing reliance on web applications has expanded the attack surface and intensified the need for systematic vulnerability assessment. However, manual security testing remains resource intensive and often requires specialized expertise, while fragmented reporting can hinder vulnerability tracking, risk prioritization, and remediation. This study aims to design and develop a web-based vulnerability assessment system integrating the OWASP ZAP API to support automated scanning and centralized security monitoring. The system was developed using the Rapid Application Development methodology, which emphasizes iterative development, rapid prototyping, and reusable components. Its main features include administrator authentication, a monitoring dashboard, automated website scanning, scan history management, vulnerability risk classification, and automated mitigation recommendations. The system also incorporates controlled brute-force testing to assess the resilience of its login mechanism. By integrating scanning, reporting, and remediation guidance within a single interface, the proposed system is intended to reduce the operational complexity of routine vulnerability assessment and improve the accessibility of security information for developers and administrators. The resulting implementation demonstrates the feasibility of integrating OWASP ZAP into a web-based platform for managing vulnerability assessment workflows. Rather than replacing expert security analysis, the system provides a structured mechanism for identifying potential weaknesses, reviewing their reported severity, and supporting remediation decisions. This research contributes a practical implementation approach for integrating open-source security testing tools into application development and maintenance processes, with the broader goal of supporting consistent, traceable, and repeatable vulnerability management. Further empirical evaluation is required to quantify scanning accuracy, execution time, and operational effectiveness across different environments.]]>
Copyrights © 2026
