DAST
Probe a running application from the outside, the way an attacker would.
34 tools profiled
How it differs Tests the running application from the outside, with no access to source. SAST never runs the app; IAST instruments it from the inside.
Indusface
Managed web application and API protection platform that pairs dynamic scanning with a WAF, using scan findings to drive virtual patch rules.
Astra Security
Pentest platform that pairs a continuous automated scanner with human driven testing, reporting findings through a shared remediation dashboard.
Beagle Security
Hosted scanner that runs automated penetration tests against web applications and APIs, with pipeline triggers and remediation guidance per finding.
Black Duck
Hosted dynamic scanner offered alongside Black Duck's static and composition analysis, aimed at automated web and API testing inside a pipeline.
Indusface
Managed web application and API protection platform that pairs dynamic scanning with a WAF, using scan findings to drive virtual patch rules.
Astra Security
Pentest platform that pairs a continuous automated scanner with human driven testing, reporting findings through a shared remediation dashboard.
Beagle Security
Hosted scanner that runs automated penetration tests against web applications and APIs, with pipeline triggers and remediation guidance per finding.
Black Duck
Hosted dynamic scanner offered alongside Black Duck's static and composition analysis, aimed at automated web and API testing inside a pipeline.
Bright Security
Developer oriented dynamic scanner for web apps and APIs that validates each finding before reporting it, designed to run on every build.
Escape Technologies
API focused dynamic scanner that models a schema, generates traffic from it, and tests authorization and business logic as well as injection classes.
GitLab
Dynamic scanning built into GitLab pipelines, running a browser based analyzer against a deployed review environment and reporting into merge requests.
Bright Security
Developer oriented dynamic scanner for web apps and APIs that validates each finding before reporting it, designed to run on every build.
Escape Technologies
API focused dynamic scanner that models a schema, generates traffic from it, and tests authorization and business logic as well as injection classes.
GitLab
Dynamic scanning built into GitLab pipelines, running a browser based analyzer against a deployed review environment and reporting into merge requests.