Learn a controlled ZAP workflow for your own web security lab, from a passive baseline to verified alerts and repeatable remediation checks.