Dynamic application security testing (DAST)

Dynamic application security testing (DAST) is a method of testing the security of an application while it’s running. DAST tools test web applications during their operating states to find security vulnerabilities using simulated attacks, such as SQL injection, cross-site scripting, and insecure server configuration. This application security (AppSec) testing type mimics a malicious hacker to find security issues in the running application, so developers can fix them before the application is deployed to the public.