App store for web apps
Find the right software and services.
Turn websites into desktop apps with WebCatalog Desktop, and access a wealth of exclusive apps for Mac, Windows. Use spaces to organize apps, switch between multiple accounts with ease, and boost your productivity like never before.
Top Dynamic Application Security Testing (DAST) Software - United States
Dynamic Application Security Testing (DAST) tools automate security assessments to detect a wide range of real-world vulnerabilities in web applications. These tools typically focus on testing HTTP and HTML interfaces, simulating attacks from an external perspective. As a black-box testing method, DAST is performed without access to the application's internal code or architecture, mirroring how an attacker would attempt to exploit vulnerabilities from the outside. DAST tools help organizations identify security weaknesses that could be exploited by external threats, providing a valuable layer of defense. Unlike other security solutions that focus on internal testing or code analysis, DAST evaluates the application from an outsider's point of view, offering insights into potential risks that could be easily exploited by external hackers. While similar to other application security and vulnerability management tools, DAST is unique in its emphasis on external-facing vulnerabilities, ensuring a comprehensive security posture against external threats.
Submit New App
GitLab
gitlab.com
GitLab is a web-based DevOps lifecycle tool that provides a Git-repository manager providing wiki, issue-tracking and continuous integration and deployment pipeline features, using an open-source license, developed by GitLab Inc. The software was created by Ukrainian developers Dmitriy Zaporozhets a...
Codacy
codacy.com
Codacy Helps Build High Quality, Secure Applications. You can get up and running effortlessly and start increasing quality, test coverage, and security today. Codacy is a plug-and-play solution to quickly onboard and scale your team’s projects without hassle. - Start scanning git repos and code chan...
Synack
synack.com
The Premier Platform for On-Demand Security. PTaaS Penetration Testing as a Service. Offensive Security Testing that Improves Your Security Posture Over Time One platform, many uses. Expect strategic penetration testing that provides full control and visibility, reveals patterns and deficiencies in ...
Semgrep
semgrep.dev
Semgrep is a highly customizable application security platform built for security engineers and developers. Semgrep scans first and third-party code to find security issues unique to an organization, with an emphasis on surfacing actionable, low-noise, and developer friendly results at lightning spe...
Webscale
webscale.com
Overview Webscale is the Cloud Platform for Modern Commerce, offering security, scalability, performance and automation for global brands. The Webscale SaaS platform leverages automation and DevOps protocols to simplify the deployment, management and maintenance of infrastructure in multi-cloud envi...
Pentest Tools
pentest-tools.com
Pentest-Tools.com is a cloud-based toolkit for offensive security testing, focused on web applications and network penetration testing.
HostedScan
hostedscan.com
HostedScan provides 24x7 alerts and detection for security vulnerabilities. Industry-standard, open-source, vulnerability scans. Automated alerts when something changes. Manage target list manually or import automatically from providers, such as AWS, DigitalOcean, and Linode, with read-only access. ...
Beagle Security
beaglesecurity.com
Beagle Security helps you identify vulnerabilities in your web applications, APIs, GraphQL and remediate them with actionable insights before hackers harm you in any manner. With Beagle Security, you can integrate automated penetration testing into your CI/CD pipeline to identify security issues ear...
Intruder
intruder.io
Intruder is an attack surface management platform that empowers organizations to discover, detect, and fix weaknesses on any vulnerable assets across their network. It provides actionable remediation advice on a continuous basis, by customizing the output of multiple industry-leading scanners using ...
Cobalt
cobalt.io
Cobalt unifies the best of human security talent and effective security tools. Our end-to-end offensive security solution enables customers to remediate risk across a dynamically changing attack surface. We are best known for the speed and quality of our pentests, and driven by customer demand, we n...
Probely
probely.com
Probely is a web vulnerability scanner that enables customers to easily test the security of their Web Applications & APIs. Our goal is to narrow the gap between development, security, and operations by making security an intrinsic characteristic of web applications development life-cycle, and only ...
Aikido Security
aikido.dev
Aikido Security is a developer-centric software security platform, providing advanced code scanning and cloud vulnerability assessments. Our platform prioritizes real threats, reduces false-positives and makes Common Vulnerabilities and Exposures (CVEs) easily understandable. With Aikido, ensuring t...
Detectify
detectify.com
Complete External Attack Surface Management for AppSec & ProdSec teams, Start covering your external attack surface with rigorous discovery, 99.7% accurate vulnerability assessments, and accelerated remediation through actionable guidance, all from one complete standalone EASM platform.
SOOS
soos.io
Application Security Posture Management Platform Your organization’s application security posture should be more than just a checklist. SOOS’s ASPM is a dynamic, comprehensive approach to safeguarding your application infrastructure from vulnerabilities across the Software Development Life Cycle (S...
Escape
escape.tech
Find and fix GraphQL security flaws at scale within your DevSecOps process. Leverage the new generation DAST & ASM for early, real-time Business Logic vulnerability detection and remediation in GraphQL, enhancing security from development to deployment.
Trickest
trickest.com
Trickest provides an innovative approach to offensive cybersecurity automation and asset and vulnerability discovery. Its platform combines extensive adversary tactics and techniques with full transparency, hyper customization, and hyper scalability, making it the go-to platform for offensive securi...
Strobes
strobes.co
Empower your business with complete visibility and control over your application security posture. Eliminate blind spots, prioritize threats effectively, and streamline remediation. Strobes ASPM Advantage: 1. Immediate efficiency boosts for both security and development teams, thanks to streamlined ...
prooV
proov.io
With prooV Red Cloud, you can assess how technologies will react in the case of a cyberattack before you implement them It is a tailored, cloud-based environment that gives you the flexibility to carry out complex cybersecurity attacks on any type of software you are testing. You can use Red Cloud w...
CyCognito
cycognito.com
CyCognito is a cybersecurity solution designed to help organizations discover, test, and prioritize security issues across their digital landscape. By leveraging advanced artificial intelligence, CyCognito scans billions of websites, cloud applications, and APIs to identify potential vulnerabilities...
Veracode
veracode.com
Veracode is a global leader in Application Risk Management for the AI era. Powered by trillions of lines of code scans and a proprietary AI-assisted remediation engine, the Veracode platform is trusted by organizations worldwide to build and maintain secure software from code creation to cloud deplo...
Secure Blink
secureblink.com
Threatspy, is a developer-first, AI-powered AppSec management platform. Threatspy empowers developers and security teams to proactively identify and mitigate both known and unknown vulnerabilities in applications and APIs through automated detection, prioritization, and remediation processes. By lev...
ResilientX
resilientx.com
ResilientX Security is a fast-growing Cyber Security company that helps organizations of all sizes identify, quantify and manage their cyber risks and cyber exposure. At ResilientX, we are committed to delivering state-of-the-art security solutions to help organizations safeguard their digital asse...
Phidata
phidata.com
An open-source platform to build, ship and monitor agentic systems.
Contrast Security
contrastsecurity.com
Contrast Security is the world’s leader in Runtime Application Security, embedding code analysis and attack prevention directly into software. Contrast’s patented security instrumentation disrupts traditional AppSec approaches with integrated and comprehensive security observability that delivers hi...
DerSecur
derscanner.com
DerScanner is a complete application security testing solution to eliminate known and unknown code threats across Software Development Lifecycle. DerScanner static code analysis offers developers the support for 43 programming languages ensuring thorough security coverage for almost any application....
Astra
getastra.com
Astra’s Pentest is a comprehensive penetration testing solution with an intelligent automated vulnerability scanner coupled with in-depth manual pentesting. Our Pentest platform emulates hackers behavior to find critical vulnerabilities in your application proactively. The automated scanner performs...
Jit
jit.io
Jit's Open ASPM Platform is the easiest way to secure your code and cloud, providing full application and cloud security coverage in minutes. Tailor a developer security toolchain to your use case and implement it across your repos in a few clicks.
Conviso
convisoappsec.com
Conviso Platform has got the whole security pipeline covered to empower developers to build secure applications. Because Security shouldn't be an isolated part of your development pipeline — it should be an ongoing, collaborative activity between all teams. Conviso now presents five products within ...
Data Theorem
datatheorem.com
RamQuest’s solutions include our fully integrated closing, escrow accounting, imaging, transaction management, esigning, and digital marketplace solutions and are available on-premise or in a hosted environment
Bright Security
brightsec.com
Bright Security’s dev-centric DAST platform empowers both developers and AppSec professionals with enterprise-grade security testing capabilities for web applications, APIs, and GenAI and LLM applications. Bright knows how to deliver the right tests, at the right time in the SDLC, in developers and ...
Akto
akto.io
Akto is a trusted platform for application security and product security teams to build an enterprise-grade API security program throughout their DevSecOps pipeline. Our industry-leading suite of — API discovery, API security posture management, sensitive data exposure, and API security testing solu...