dast
Safeguard articles tagged "dast" — guides, analysis, and best practices for software supply chain and application security.
127 articles
Checkmarx DAST: What It Does and How It Fits an AppSec Program
Checkmarx DAST is the dynamic testing component of the Checkmarx One platform, scanning running web apps and APIs for vulnerabilities. Here is how it works and where it fits.
Web App Pen Testing: A Practical Guide for Developers
Web app pen testing simulates a real attacker to find exploitable flaws before they do. Here is how the process works, what it covers, and where it fits alongside automated scanning.
DAST tool buyer's guide
How Safeguard's unified, defensive-only DAST compares to Black Duck's WhiteHat-derived module on correlation, safety controls, and deployment for regulated teams.
How to Run an API Security Scan (and What It Catches)
An API security scan probes your endpoints for auth flaws, broken object-level access, injection, and misconfiguration. Here is how to scan an API properly.
What Is a Target URL? Definition and Security Implications
A target URL is the destination address a request, scan, or link is aimed at. Here is what the term means across different contexts and why getting it right matters for security testing and web safety.
ZAP Security Testing: Using OWASP ZAP in Your Pipeline
ZAP security testing works best as a pipeline stage, not a desktop tool. Docker scan modes, authentication, alert filters, and the CI wiring that makes findings stick.
Best DAST Tools in 2026: Web, API, and CI/CD Scanning Compared
An honest guide to the best DAST tools in 2026 — from OWASP ZAP and Burp Suite to Invicti, StackHawk, and Escape — with clear guidance on which fits web apps, APIs, and CI/CD-native pipelines, and where DAST stops and supply chain security begins.
Mobile Application Security Assessment: How It's Actually Done
What a mobile application security assessment actually involves, from static binary analysis through dynamic testing on real devices, and where it differs from a web app pen test.
Website Scanner: How It Works and What to Use
A website scanner probes a live site for security flaws like injection, misconfiguration, and known CVEs. Here is how the different scanner types work and when each one fits.
Code Vulnerability Scanning Tools: How to Choose the Right One
Code vulnerability scanning tools fall into distinct categories that see different risks. Knowing which does what is the difference between coverage and false confidence.
What is DAST? Dynamic Application Security Testing explained
DAST tests running applications like an attacker would. Learn how it works, how it differs from SAST, and where it falls short.
SAST vs DAST vs SCA: choosing the right tool
SAST, DAST, and SCA each answer a different security question — here's what each catches, when to run them, and how to prioritize the flood of findings.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.