Analisis Kerentanan Keamanan Website Sekolah Menggunakan Metode Vulnerability Assessment Berbasis OWASP ZAP

Perkembangan teknologi informasi yang pesat telah mendorong pemanfaatan website dalam berbagai sektor, termasuk pada lingkungan pendidikan sebagai media penyampaian informasi dan layanan akademik. Website sekolah berperan penting dalam pengelolaan data dan akses informasi secara daring, namun juga rentan terhadap berbagai ancaman keamanan siber. Oleh karena itu, diperlukan pengujian keamanan secara terstruktur untuk mengidentifikasi celah yang berpotensi disalahgunakan. Penelitian ini bertujuan untuk menganalisis tingkat kerentanan keamanan pada website sekolah menggunakan metode vulnerability assessment berbasis OWASP. Proses pengujian dilakukan dengan memanfaatkan tools OWASP ZAP sebagai vulnerability scanner melalui tahapan scanning, analisis kerentanan, dan pelaporan hasil berdasarkan standar OWASP Top 10. Hasil pengujian menunjukkan ditemukan 1 kerentanan kategori high, 8 kerentanan kategori medium, dan 6 kerentanan kategori low yang menunjukkan masih terdapat celah keamanan pada website yang perlu segera diperbaiki. Oleh karena itu, diperlukan tindakan mitigasi melalui validasi input, peningkatan kontrol akses, serta konfigurasi keamanan server guna meningkatkan keamanan sistem secara keseluruhan.   The rapid development of information technology has encouraged the utilization of websites in various sectors, including the educational environment as a medium for delivering information and academic services. School websites play an important role in managing data and providing online access to information; however, they are also vulnerable to various cybersecurity threats. Therefore, structured security testing is required to identify potential vulnerabilities that could be exploited. This study aims to analyze the level of security vulnerabilities in a school website using an OWASP-based vulnerability assessment method. The testing process was conducted using the OWASP ZAP tool as a vulnerability scanner through several stages, including scanning, vulnerability analysis, and reporting based on the OWASP Top 10 standard. The results of the testing showed that there was 1 high-risk vulnerability, 8 medium-risk vulnerabilities, and 6 low-risk vulnerabilities, indicating that the website still contains security gaps that need immediate attention. Therefore, mitigation efforts are required through input validation, improved access control, and proper server security configuration to enhance the overall security of the system.