AppSecNews

DAST

Dynamic Application Security Testing

Probe a running application from the outside, the way an attacker would.

34 tools profiled

How it differs Tests the running application from the outside, with no access to source. SAST never runs the app; IAST instruments it from the inside.

License
Subcategory
Deployment
Languages
Integrations
Maturity
Signals
Clear

5 tools match

Active Vulnerability Management Clear all

  • AppCheck

    AppCheck

    DAST

    Commercial scanning platform that covers web applications, APIs and network infrastructure from a single console, backed by an in-house research team.

    Commercial
    Established

  • Astra Security

    Astra Security

    DAST

    Pentest platform that pairs a continuous automated scanner with human driven testing, reporting findings through a shared remediation dashboard.

    Commercial
    Growing

  • Fluid Attacks

    Fluid Attacks

    DAST

    Continuous security testing service combining automated scanners with a standing team of testers, delivered through a shared platform with a build gate.

    Commercial
    Growing

  • HCL AppScan

    HCLSoftware

    DAST

    Long established enterprise application security suite whose dynamic scanner crawls and audits running applications with heavy scan configuration options.

    Commercial
    Established

  • Tenable Web App Scanning

    Tenable

    DAST

    Web application scanning module of the Tenable platform, using a browser-based crawler and sharing asset inventory and reporting with infrastructure scanning.

    Commercial
    Established

  • AppCheck

    AppCheck

    Commercial scanning platform that covers web applications, APIs and network infrastructure from a single console, backed by an in-house research team.

    Commercial Established
    DAST

  • Astra Security

    Astra Security

    Pentest platform that pairs a continuous automated scanner with human driven testing, reporting findings through a shared remediation dashboard.

    Commercial Growing
    DAST

  • Fluid Attacks

    Fluid Attacks

    Continuous security testing service combining automated scanners with a standing team of testers, delivered through a shared platform with a build gate.

    Commercial Growing
    DAST

  • HCL AppScan

    HCLSoftware

    Long established enterprise application security suite whose dynamic scanner crawls and audits running applications with heavy scan configuration options.

    Commercial Established
    DAST

  • Tenable Web App Scanning

    Tenable

    Web application scanning module of the Tenable platform, using a browser-based crawler and sharing asset inventory and reporting with infrastructure scanning.

    Commercial Established
    DAST
Tick up to 4 tools above.