to help identify sections of a web application which are accessible by unauthorized clients.
</p>

<p>
    There are two main concepts related to this add-on that should be explained: the <b>Access Rules</b> and the <b>testing
    procedure</b>.
</p>

<h2>Access Rules</h2>

<p>
    In order to identify potential access control issues, ZAP needs to know which parts of the web application are
    supposed to be accessed by which user. In ZAP, the name for these rules is: <i>Access Rules</i> and generally have