ication Firewall exceptions, ZAP is accompanied 
by a script "AddZapHeader.js" which can be used to add a specific header to all traffic that passes through 
or originates from ZAP. eg: <tt>X-ZAP-Initiator: 3</tt>
</p>
<p>
It should be noted that active scanning can only find certain types of vulnerabilities.<br/>
Logical vulnerabilities, such as broken access control, will not be found by
any active or automated vulnerability scanning.<br/>
Manual penetration testing should always be performed in addition 