DAST
Probe a running application from the outside, the way an attacker would.
34 tools profiled
How it differs Tests the running application from the outside, with no access to source. SAST never runs the app; IAST instruments it from the inside.
Detectify
Hosted platform that maps an organization's internet facing assets and tests them with checks built from findings submitted by a private hacker community.
ProjectDiscovery
Go-based scanner that executes YAML templates describing a request and a match condition, run at high concurrency across large target lists.
Tenable
Web application scanning module of the Tenable platform, using a browser-based crawler and sharing asset inventory and reporting with infrastructure scanning.
Detectify
Hosted platform that maps an organization's internet facing assets and tests them with checks built from findings submitted by a private hacker community.
ProjectDiscovery
Go-based scanner that executes YAML templates describing a request and a match condition, run at high concurrency across large target lists.
Tenable
Web application scanning module of the Tenable platform, using a browser-based crawler and sharing asset inventory and reporting with infrastructure scanning.