Safeguard
Tag

dast

Safeguard articles tagged "dast" — guides, analysis, and best practices for software supply chain and application security.

119 articles

Security

Website Vulnerability Assessment: A Practical How-To Guide

A website vulnerability assessment systematically finds and ranks the security weaknesses in a web app. Here is the process, the tools, and the pitfalls.

Feb 14, 20255 min read
AppSec

Website Security Scan: What It Checks and How to Run One

A website security scan tests a live site for common weaknesses. Here is what the different scan types actually check, how to read the results, and where the free ones fall short.

Feb 11, 20256 min read
AppSec

DAST Solutions: How to Choose the Right Dynamic Testing Tool

DAST solutions test a running application from the outside to find exploitable flaws. Here is how they work, what they catch, and how to evaluate one for your pipeline.

Feb 8, 20256 min read
AppSec

Software Security Testing: A Practitioner's Overview

Software security testing spans static analysis, dynamic testing, dependency scanning, and manual review — a practical map of which method catches what, written for people who actually run these programs.

Sep 30, 20245 min read
Comparisons

SCA vs SAST vs DAST: Which Do You Actually Need First

Three scanner acronyms, one budget. A spec-level comparison of SCA, SAST, and DAST — what each catches, what each costs to run, and the order that pays off fastest.

Jul 2, 20246 min read
Concepts

What is IAST

IAST instruments a running application from the inside to find vulnerabilities with very low false positives. Here's how it works and how it compares to SAST and DAST.

Feb 14, 20247 min read
Concepts

What is Security Testing

Security testing is how teams find exploitable weaknesses before attackers do. Here's the main types — SAST, DAST, IAST, SCA, fuzzing, pentesting — and how they fit together.

Jan 11, 20247 min read
Application Security

DAST Tool Comparison for Enterprise: What Matters Beyond Feature Lists

Enterprise DAST tools differ in how they handle modern application architectures, API testing, and CI/CD integration. Here is what to evaluate when choosing a DAST solution.

Sep 5, 20235 min read
DevSecOps

GitLab CI Security Scanning Setup

Step-by-step guide to enabling SAST, DAST, dependency scanning, and container scanning in GitLab CI pipelines.

Mar 22, 20236 min read
Application Security

Dynamic Application Security Testing: A Practitioner's Guide to DAST Done Right

DAST finds what source code analysis cannot. Here is how to set it up, tune it, and actually get value from it in a modern CI/CD pipeline.

Mar 18, 20237 min read
Application Security

SAST vs DAST vs IAST: Which Application Security Testing Approach Fits Your Pipeline?

A practical comparison of SAST, DAST, and IAST — when to use each, where they overlap, and why most teams need more than one.

Jul 8, 20227 min read

Self-healing security runs on Safeguard.

Your first fix PR is minutes away.

No sales call required, even your agent can complete the purchase over MCP.

dast (Page 10) — Safeguard Blog