What does PortSwigger do? It focuses on web application security testing. See Burp Suite Community Edition, deployment options and leading alternatives.
Application Security
DAST Tools: Dynamic Application Security Testing Scanners
Test running web apps and APIs the way an attacker would. Compare DAST scanners for crawl depth, authenticated scans, API support, CI/CD hooks and free editions.
16 vendors32 products
See the Top 16 rankingDAST vendors 16
Companies that offer DAST.
Featured vendors
OpenText offers enterprise cybersecurity. Explore OpenText Core Endpoint Protection, compare key features and see the top Endpoint Security alternatives before you buy.
These vendors are highlighted by Cyber Rank. This does not affect our rankings, reviews or the order of the list below.
Black Duck
Burlington, Massachusetts, USA
Bright Security
San Rafael, California, USA
Checkmarx
Tel Aviv, Israel
Detectify
Stockholm, Sweden
GitLab
San Francisco, California, USA
HCLSoftware
Noida, India
Invicti
Austin, Texas, USA
OWASP
Global nonprofit organization
OpenText
Waterloo, Ontario, Canada
PortSwigger
Knutsford, United Kingdom
ProjectDiscovery
Global / Remote
Qualys
Foster City, California, USA
Rapid7
Boston, Massachusetts, USA
StackHawk
Denver, Colorado, USA
Tenable
Columbia, Maryland, USA
Veracode
Burlington, Massachusetts, USA
DAST products 32
Open a product to see its features, pricing and reviews, or compare it with others.
Qualys Web Application Scanning
byQualys
Evaluating Qualys Web Application Scanning? See how this Application Security Testing tool handles DAST crawling, where it fits best and which alternatives to compare.
Application SecurityView details
Rapid7 InsightAppSec
byRapid7
Get the facts on Rapid7 InsightAppSec: REST API testing. Built for CI/CD security gating. Compare it with other Application Security Testing options before you decide.
Application SecurityView details
Seeker
What does Seeker do? It covers code tracing and runtime API analysis. See typical use cases, cloud, on-premises or hybrid deployment and how it compares to rivals.
Application SecurityView details
StackHawk DAST
Get the facts on StackHawk DAST: developer-first DAST and automated pull request testing. Built for DevSecOps. Compare it with other DAST options before you decide.
Application SecurityView details
StackHawk HawkScan
StackHawk HawkScan offers containerized DAST engine, hawkscan.yml configuration as code and OpenAPI parsing. Use it for local debugging. See DAST alternatives.
Application SecurityView details
Tenable Web App Scanning
byTenable
Looking for Application Security Testing software? Tenable Web App Scanning by Tenable provides SPA support for API security testing. Compare features and alternatives.
Vulnerability & Exposure ManagementView details
Veracode Dynamic Analysis
byVeracode
Free trial available. Veracode Dynamic Analysis by Veracode offers automated DAST scanning. Compare features, use cases and leading DAST alternatives.
Application SecurityView details
Veracode Platform
byVeracode
What does Veracode Platform do? It covers comprehensive AppSec platform and SAST, DAST, SCA, IAST. See typical use cases, cloud deployment and how it compares to rivals.
Application SecurityView details
Showing page 2 of 2 (32 products)
← PreviousNext →