Best Dynamic Application Security Testing (DAST) Software - Page 3
Dynamic application security testing (DAST) tools automate security tests for a variety of real-world threats. These tools typically test HTTP and HTML interfaces of web applications. DAST is a black-box testing method, meaning it is performed from the outside. Companies use these tools to identify vulnerabilities in their applications from an external perspective to better simulate threats most easily accessed by hackers outside their organization. There are similarities between DAST tools and other application security and vulnerability management solutions, but most other technologies perform internal tests and code analysis instead of focusing on black-box testing.
SAST vs DAST — Learn the difference
To qualify for inclusion in the Dynamic Application Security Testing (DAST) category, a product must:
Featured Dynamic Application Security Testing (DAST) Software At A Glance
G2 takes pride in showing unbiased reviews on user satisfaction in our ratings and reports. We do not allow paid placements in any of our ratings, rankings, or reports. Learn about our scoring methodologies.
A weekly snapshot of rising stars, new launches, and what everyone's buzzing about.
- Overview
- User Satisfaction
- Seller Details
Veracode Dynamic Analysis helps companies scan their web applications for exploitable vulnerabilities at scale. With an ability to test thousands of applications simultaneously and a less than 1% fals
- 73% Enterprise
- 20% Mid-Market
22,091 Twitter followers
- Overview
- User Satisfaction
- Seller Details
Probely is a web vulnerability scanner that enables customers to easily test the security of their Web Applications & APIs. Our goal is to narrow the gap between development, security, and operat
- 47% Small-Business
- 37% Mid-Market
528 Twitter followers
- Overview
- User Satisfaction
- Seller Details
DerScanner is a complete application security testing solution to eliminate known and unknown code threats across Software Development Lifecycle. DerScanner static code analysis offers developers the
- Information Technology and Services
- 64% Small-Business
- 45% Mid-Market
- Overview
- Pros and Cons
- User Satisfaction
- Seller Details
ZAP by Checkmarx, formerly known as Zed Attack Proxy , is a leading open-source web application security scanner designed to help developers, testers, and security professionals identify vulnerabiliti
- Computer & Network Security
- 75% Small-Business
- 17% Enterprise
7,205 Twitter followers
- Overview
- User Satisfaction
- Seller Details
Application security testing for the modern web
- 60% Enterprise
- 40% Small-Business
123,047 Twitter followers
- Overview
- Pros and Cons
- User Satisfaction
- Seller Details
Rainforest is the all-in-one cyber security platform with an end-to-end approach to simplify corporate reputation protection by using multiple intelligences and proactive observability, adding Applica
- 42% Mid-Market
- 42% Small-Business
- Overview
- Pros and Cons
- User Satisfaction
- Seller Details
BugDazz API Security Scanner by SecureLayer7 is a comprehensive tool designed to automatically detect vulnerabilities, misconfigurations, and security gaps in API endpoints, aiding security teams in p
- 89% Small-Business
- 11% Mid-Market
2,517 Twitter followers
- Overview
- Pros and Cons
- User Satisfaction
- Seller Details
ResilientX Unified Exposure Management Platform is the leading platform that unifies Attack Surface Management, Web Application Security Testing, Network Security Testing, Cloud Security Posture Manag
- 47% Mid-Market
- 35% Small-Business
33 Twitter followers
- Overview
- Pros and Cons
- User Satisfaction
- Seller Details
Threatspy, is a developer-first, AI-powered AppSec management platform. Threatspy empowers developers and security teams to proactively identify and mitigate both known and unknown vulnerabilities in
- Information Technology and Services
- 42% Mid-Market
- 42% Small-Business
- Overview
- Pros and Cons
- User Satisfaction
- Seller Details
Traceable is the industry’s leading API Security company that helps organizations protect their digital systems and assets in a cloud-first world where everything is interconnected. Traceable is the o
- Financial Services
- 70% Enterprise
- 17% Mid-Market
1,456 Twitter followers
- Overview
- Pros and Cons
- User Satisfaction
- Seller Details
HostedScan provides 24x7 alerts and detection for security vulnerabilities. Industry-standard, open-source, vulnerability scans. Automated alerts when something changes. Manage target list manually or
- 85% Small-Business
- 15% Mid-Market
59 Twitter followers
- Overview
- Pros and Cons
- User Satisfaction
- Seller Details
Cyber Chief is a vulnerability scanner & issue management tool that helps you ship software with zero known security vulnerabilities. It gives your software team the power to find and fix thousan
- 43% Small-Business
- 43% Mid-Market
- Overview
- Pros and Cons
- User Satisfaction
- Seller Details
WebInspect offers automated dynamic application security testing (DAST) and interactive application security testing (IAST) technologies that mimics real-world hacking techniques and attacks, provides
- 80% Enterprise
- 20% Mid-Market
21,628 Twitter followers
- Overview
- Pros and Cons
- User Satisfaction
- Seller Details
Code Dx’s automated application vulnerability correlation shaves weeks off that process so you can get right to fixing your code. Its vulnerability management lets you quickly prioritize vulnerabiliti
- 67% Enterprise
- 33% Mid-Market
- Overview
- Pros and Cons
- User Satisfaction
- Seller Details
Escape is the only DAST that works with your modern stack and tests business logic instead of missing headers Escape helps teams secure modern applications: • Document all your APIs in minutes a
- 56% Small-Business
- 33% Mid-Market
345 Twitter followers
