Dynamic application security testing (DAST) tools automate security tests for a variety of real-world threats. These tools typically test HTTP and HTML interfaces of web applications. DAST is a black-box testing method, meaning it is performed from the outside. Companies use these tools to identify vulnerabilities in their applications from an external perspective to better simulate threats most easily accessed by hackers outside their organization. There are similarities between DAST tools and other application security and vulnerability management solutions, but most other technologies perform internal tests and code analysis instead of focusing on black-box testing.
SAST vs DAST — Learn the difference
To qualify for inclusion in the Dynamic Application Security Testing (DAST) category, a product must:
Test applications in their operational state
Perform external black-box security tests
Trace penetrations and exploits to their sources