System Installed: Install/Extract ZAP

Download ZAP
- ZAP releases can be found here.
- The .exe of the version (ZAP 2.6.0 Standard) which was used to test this release can be found here.
  Notice: If you're using a weekly release, remember that the weekly releases are removed after a while (there's no fixed schedule for it).
Determine path
- Determine where to keep ZAP, in my case ZAP is located in C:\Development\OWASP\Zed Attack Proxy\2.6.0\

System Installed: Environment Variable

Setup your %ZAPROXY_HOME% Environment Variable
Info: Remember to add %ZAPROXY_HOME% to your %PATH%.
Setup your %ZAPROXY_SETTINGS% Environment Variable
Info: Remember to add %ZAPROXY_SETTINGS% to your %PATH%.
Notice: Remember that if you're using a weekly release, %ZAPROXY_SETTINGS% will have a _D appeneded to the folder name.

Info: Ensure correct .jar is used.

Add %ZAPROXY_HOME%
Add double quotes
Required: The double quotes are mandatory if %ZAPROXY_HOME% has spaces. Otherwise it's an optional addition.
Increase allocated RAM
- See Database Size Vs. Available Memory.

Desktop shortcut

Create a shortcut to %COMSPEC% /k cd %HOMEDRIVE%%HOMEPATH% && "%ZAPROXY_HOME%\zap.bat" -installdir "%ZAPROXY_HOME%" .

Required: Name the Shortcut Zed Attack Proxy. Once created:

Info: If this works then it should also work from Jenkins.

Select System Installed
Specify ZAP Home
Specify Initialization Timeout
Add ZAP command line options
- Please see HelpCmdline for more information.
  Notice: Adding ZAP command line options can interfere with other UI option of the plugin. USE WITH CAUTION.
  Notice: The only required command line option is installdir as indicated above. If %ZAPROXY_HOME% contains spaces in the path, remember to use double quotes as indicated in the illustration above.