How to uninstall OWASP ZAP on Windows
Save ZAP sessions and reports, stop scans and turn off proxying before closing the app.
Quit the app
Close OWASP ZAP and any work it is running, then use Task Manager (Ctrl+Shift+Esc) to check for its remaining processes.
Use its uninstaller
Open Settings › Apps › Installed apps, find OWASP ZAP and choose Uninstall. Use the vendor uninstaller rather than deleting its program folder.
winget uninstall --id ZAP.ZAP --exact
For this installation, winget invokes the registered removal method. It is not a separate cleanup of user data. Windows may ask for administrator approval.
Check the result
winget list --id ZAP.ZAP --exact
Test-Path -LiteralPath "${env:ProgramFiles}\ZAP\Zed Attack Proxy" -ErrorAction Stop
Read winget's result as well as its exit status: an explicit no-installed-package result concerns only this package, while a source, access or query error leaves the answer unknown. A successful Test-Path returning True means that exact location remains; False means it is absent. Neither result checks other paths. The commands do not delete anything.
What Mole lists
| Location | Item | Default |
|---|---|---|
%ProgramFiles%\ZAP\Zed Attack Proxy |
Program files | Goes with the app row |
%ProgramData%\Microsoft\Windows\Start Menu\Programs\ZAP\Zed Attack Proxy\ZAP 2.17.0.lnk |
Shortcut | Selected by default |
%ProgramData%\Microsoft\Windows\Start Menu\Programs\ZAP\Zed Attack Proxy\Zed Attack Proxy by Checkmarx Uninstaller.lnk |
Shortcut | Selected by default |
%PUBLIC%\Desktop\ZAP 2.17.0.lnk |
Shortcut | Selected by default |
%ProgramFiles%\ZAP\Zed Attack Proxy |
Usage records for this program | Selected by default |
The program and selected shortcuts were removed or already absent, and the uninstaller requested a restart. %USERPROFILE%\ZAP remained unlisted with first-run data. The separate Temurin JRE dependency stayed installed; other programs may use it.
These defaults assume Remove data and settings with apps is off. Explicit Select all or Also remove user data can include the listed personal-data rows. Check the selection before confirming. Selected files that Mole removes go to the Recycle Bin; selected registry entries are backed up before removal. The vendor uninstaller has its own deletion behavior.
What this test covered
Recorded on 2026-10-20: OWASP ZAP, version 2.17.0, machine-wide, vendor uninstaller, winget package ZAP.ZAP. The evidence comes from an ARM64 Windows test environment and a development build of Mole. It does not certify the current downloadable package or removal of real signed-in accounts, synchronized data or production projects.
Vendor documentation. The paths and removal results above are observations from the Windows test unless explicitly attributed to the vendor.