What does PortSwigger do? It focuses on web application security testing. See Burp Suite Community Edition, deployment options and leading alternatives.
Application Security
DAST Tools: Dynamic Application Security Testing Scanners
Test running web apps and APIs the way an attacker would. Compare DAST scanners for crawl depth, authenticated scans, API support, CI/CD hooks and free editions.
16 vendors32 products
See the Top 16 rankingDAST vendors 16
Companies that offer DAST.
Featured vendors
OpenText offers enterprise cybersecurity. Explore OpenText Core Endpoint Protection, compare key features and see the top Endpoint Security alternatives before you buy.
These vendors are highlighted by Cyber Rank. This does not affect our rankings, reviews or the order of the list below.
Black Duck
Burlington, Massachusetts, USA
Bright Security
San Rafael, California, USA
Checkmarx
Tel Aviv, Israel
Detectify
Stockholm, Sweden
GitLab
San Francisco, California, USA
HCLSoftware
Noida, India
Invicti
Austin, Texas, USA
OWASP
Global nonprofit organization
OpenText
Waterloo, Ontario, Canada
PortSwigger
Knutsford, United Kingdom
ProjectDiscovery
Global / Remote
Qualys
Foster City, California, USA
Rapid7
Boston, Massachusetts, USA
StackHawk
Denver, Colorado, USA
Tenable
Columbia, Maryland, USA
Veracode
Burlington, Massachusetts, USA
DAST products 32
Open a product to see its features, pricing and reviews, or compare it with others.
Acunetix
byInvicti
Acunetix by Invicti: reports and DeepScan DOM crawler. Ideal for Web Application Security. Deployment: cloud. See how it compares with top DAST alternatives.
Vulnerability & Exposure ManagementView details
AppScan 360
AppScan 360 offers unified AppSec platform and SAST, DAST, IAST, and SCA correlation. Use it for compliance auditing. See Application Security Testing alternatives.
Application SecurityView details
AppScan Enterprise
AppScan Enterprise covers jira integration and modern SPA and API scanning for portfolio-wide web application scanning. Compare top Application Security Testing tools.
Application SecurityView details
AppScan on Cloud
AppScan on Cloud: cloud-delivered ASTaaS and multi-engine scanning. Built for CI/CD pipeline automation. Compare Application Security Testing alternatives.
Application SecurityView details
Bright STAR
Bright STAR: BOLA & SSRF detection and automated exploit validation. Built for automated dynamic security testing. Compare Application Security Testing alternatives.
Application SecurityView details
Bright Security
Bright Security delivers developer DAST and automated API fuzzing for CI/CD security quality gates. Explore its DAST capabilities, deployment choices and top competitors.
Application SecurityView details
Burp Scanner
Burp Scanner, from PortSwigger, provides API scanning and authenticated crawling. Common uses: automated web scanning. Check deployment options and top DAST competitors.
Application SecurityView details
Burp Suite Community Edition
Burp Suite Community Edition: HTTP/S interception proxy, Burp Repeater and Burp Decoder. Built for security education. Compare Application Security Testing alternatives.
Application SecurityView details
Burp Suite Enterprise Edition
What does Burp Suite Enterprise Edition do? It covers SSO and RBAC. See typical use cases, cloud or on-premises deployment and how it compares to rivals.
Application SecurityView details
Burp Suite Professional
Get the facts on Burp Suite Professional: Burp Repeater. Built for ethical hacking. Compare it with other Penetration Testing options before you decide.
Application SecurityView details
Checkmarx DAST
Checkmarx DAST helps teams with Web Security. Explore features like crawling complex web apps, cloud or hybrid deployment and the closest DAST competitors.
Application SecurityView details
Detectify
Evaluating Detectify? See how this Attack Surface Management tool handles DNS monitoring and OWASP Top 10 scanning, where it fits best and which alternatives to compare.
Vulnerability & Exposure ManagementView details
Detectify Application Scanner
Detectify Application Scanner: low false positives and automated scheduling. Built for vulnerability remediation. Compare Application Security Testing alternatives.
Application SecurityView details
Fortify WebInspect
byOpenText
Looking for Application Security Testing software? Fortify WebInspect by OpenText provides IAST agent for API security validation. Compare features and alternatives.
Application SecurityView details
Fortify on Demand
byOpenText
Fortify on Demand: Application Security Testing as a Service and SAST and DAST scans. Built for CI/CD security gating. Compare Application Security Testing alternatives.
Application SecurityView details
GitLab Application Security Testing
byGitLab
GitLab Application Security Testing by GitLab: SAST. Ideal for Code Security. Deployment: cloud. See how it compares with top Application Security Testing alternatives.
Application SecurityView details
HCL AppScan Standard
Looking for SCA software? HCL AppScan Standard by HCLSoftware provides compliance reports for black-box vulnerability assessment. Compare features and alternatives.
Application SecurityView details
Invicti Enterprise
byInvicti
Evaluating Invicti Enterprise? See how this DAST tool handles DAST scanning and Proof-Based Scanning, where it fits best and which alternatives to compare.
Vulnerability & Exposure ManagementView details
Invicti Standard
byInvicti
Evaluating Invicti Standard? See how this Application Security Testing tool handles vulnerability testing, where it fits best and which alternatives to compare.
Vulnerability & Exposure ManagementView details
Netsparker
byInvicti
Shortlisting Application Security Testing tools? Netsparker by Invicti brings automated security reports, with cloud deployment. See strengths and alternatives.
Vulnerability & Exposure ManagementView details
Nuclei
Looking for Vulnerability Management software? Nuclei by ProjectDiscovery provides community templates for Security Testing. Compare features and alternatives.
Vulnerability & Exposure ManagementView details
Nuclei Cloud
Nuclei Cloud: cloud-hosted vulnerability scans, automated scheduling and team collaboration. Built for Security Testing. Compare Vulnerability Management alternatives.
Vulnerability & Exposure ManagementView details
OWASP ZAP
byOWASP
OWASP ZAP from OWASP focuses on API security testing. Key capabilities: REST API control. Compare it with the leading Application Security Testing alternatives.
Application SecurityView details
OpenText Fortify Static Code Analyzer
byOpenText
What does OpenText Fortify Static Code Analyzer do? It covers ML triage. See typical use cases, on-premises or cloud deployment and how it compares to rivals.
Application SecurityView details
Showing page 1 of 2 (32 products)
← PreviousNext →