AppSecNews

DAST

Dynamic Application Security Testing

Probe a running application from the outside, the way an attacker would.

34 tools profiled

How it differs Tests the running application from the outside, with no access to source. SAST never runs the app; IAST instruments it from the inside.

License
Subcategory
Deployment
Languages
Integrations
Maturity
Signals
Clear

2 tools match

Active Bugzilla Clear all

  • Acunetix

    Invicti Security

    DAST

    Commercial dynamic application security scanner that crawls web apps with a headless browser engine and confirms many injection findings by exploiting them.

    Commercial
    Established

  • Qualys WAS

    Qualys

    DAST

    Web application scanning module of the Qualys platform, sharing its sensor network, asset model and reporting with infrastructure vulnerability management.

    Commercial
    Established

  • Acunetix

    Invicti Security

    Commercial dynamic application security scanner that crawls web apps with a headless browser engine and confirms many injection findings by exploiting them.

    Commercial Established
    DAST

  • Qualys WAS

    Qualys

    Web application scanning module of the Qualys platform, sharing its sensor network, asset model and reporting with infrastructure vulnerability management.

    Commercial Established
    DAST
Tick up to 4 tools above.