The ZAP security testing report can be generated by one of the followings:
$ CURL "http://127.0.0.1:8090/OTHER/core/other/htmlreport/?formMethod=GET" > ZAP_Report.HTML
Should I select Selenium or JMeter as our security automation framework? Both tools can achieve similar testing results. Selenium simulates user behaviors in a real browser, but it may produce unexpected errors during UI testing. On the other hand, JMeter only sends HTTP requests and verifies HTTP responses, without rendering the UI in a browser. In addition, for the selection of tools, we may also consider integration with existing security or automation frameworks. For example, if the team has built all the automation based on JMeter, then JMeter may be a better choice for security automation.