DAST
← Back to Secure Development Practices
Dynamic Application Security Testing scans running applications for vulnerabilities by simulating attacks. Tools like OWASP ZAP and Burp Suite test the application from the outside, finding issues that static analysis misses (configuration issues, runtime behavior).