Automated Security Testing of a Shopify Login Page Using OWASP ZAP

This repository presents a practical web security testing study performed against a public Shopify demo login page. The project demonstrates common application security testing techniques used in quality assurance and DevSecOps workflows. The study includes: • HTTP proxy interception using OWASP ZAP• request manipulation and login parameter analysis• manual and automated fuzzing experiments• automated vulnerability scanning• CI/CD security pipeline using GitHub Actions• vulnerability scoring and visualization Security tests were executed against the public demo Shopify login endpoint for educational purposes. All results indicate that malformed authentication requests were properly rejected by the application,demonstrating correct input validation mechanisms. The repository includes scripts, reports, security scan results and reproducible testing methodology for educational and research use.