Dynamic Application Security Testing (DAST)
Tools that dynamically test web applications in runtime to find security vulnerabilities.
Updated June 14, 2026
Products that define this theme
A representative set of Penetration Testing Tools products that exemplify Dynamic Application Security Testing (DAST), curated as a starting point for finding similar software.
Selected from G2's verified user reviews and ratings, then matched to this theme for relevance.
How Did G2 Choose These Dynamic Application Security Testing (DAST) Products?
The 13 products shown represent a defining sample for the "Dynamic Application Security Testing (DAST)" theme within Penetration Testing Tools on G2 — not an exhaustive list. They are a curated starting point for discovering similar software.
- Sourced from products with verified G2 user reviews and ratings.
- Matched to this theme based on each product's described capabilities and fit, ordered by relevance.
- Rankings and inclusion are unbiased and are not influenced by vendor payment.
Refreshed weekly. Last updated: June 14, 2026.
Burp Suite is a complete ecosystem for web application and API security testing, combining two products: Burp Suite DAST - a best-of-breed, precision DAST solution that automates runtime testing,...
Intruder is an exposure management platform for scaling to mid-market businesses. Over 3000 companies - across all industries - use Intruder to find critical exposures, respond faster and prevent...
What Is Edgescan? Edgescan is a cybersecurity company that helps organizations proactively identify, validate, and prioritize vulnerabilities across their applications, API’s and digital...
Qodex is a continuous testing platform that runs your test scenarios against your real app on every pull request and deploy, then shows you exactly what broke with the failing request, response,...
Pynt is an innovative API Security Testing platform exposing verified API threats through simulated attacks. Hundreds of companies rely on Pynt to continuously monitor, classify and attack...
AppCheck is a Dynamic Application Security Testing (DAST) and network vulnerability testing solution, developed and supported by experienced penetration testers. We approach security testing as...
Beagle Security helps you identify vulnerabilities in your web applications, APIs, GraphQL and remediate them with actionable insights before hackers harm you in any manner. With Beagle Security,...
StackHawk is reimagining AppSec for AI-driven development, where applications are built faster than traditional AppSec tools can keep up. Our AppSec Intelligence Platform combines scalable runtime...
Acunetix (by Invicti) is an automated application security testing tool that enables small security teams to tackle huge application security challenges. With fast scanning, comprehensive results,...
Invicti (formerly known as Netsparker) is an enterprise application and API security testing platform that helps organizations secure thousands of web applications and APIs at scale while...
Discover what's possible. Prove what's real. With proprietary tech and key experts in offensive security. Pentest-Tools.com is built for actual security testing, not just detection. We...
ZAP by Checkmarx, formerly known as Zed Attack Proxy , is a leading open-source web application security scanner designed to help developers, testers, and security professionals identify...
Detectify sets a new standard for advanced application security testing, challenging traditional DAST by providing evolving coverage of each and every exposed asset across the changing attack...