DAST: best apps and software

PortSwigger

PortSwigger is a web security testing platform that helps identify vulnerabilities in applications using both automated and manual security testing tools.

Pentest Tools

Pentest Tools is a cloud-based app for security testing that identifies vulnerabilities in systems and web applications through automated and manual testing.

Acunetix

Acunetix is a web application security scanner that detects vulnerabilities in websites, web apps, and APIs, providing detailed reports for remediation.

Invicti

Invicti is an application security tool that automates testing to identify vulnerabilities in web apps and APIs, supporting DevOps workflows for continuous security.

HostedScan

HostedScan offers 24/7 vulnerability scanning and alerts, integrating open-source tools for security assessments of IT assets, with management features for collaborative risk tracking.

Detectify

Detectify is an attack surface monitoring tool that scans web applications for vulnerabilities, offers remediation guidance, and integrates with collaboration tools.

Aikido Security

Aikido Security is a platform for code scanning and cloud vulnerability assessments, integrating various security tools for comprehensive protection throughout the software development lifecycle.

Bright Security

Bright Security offers a DAST platform for developers and AppSec professionals, providing security testing for web apps, APIs, and GenAI applications with minimal false positives.

Revelion AI

Autonomous AI pentesting app that tests web apps and networks, finds vulnerabilities, and generates compliance-ready security reports.

ZeroThreat

ZeroThreat is a security testing platform that uses AI to simulate attacks on web applications and APIs, verify exploitable vulnerabilities, and help teams prioritize remediation.

Securily Pentest

Securily Pentest is a penetration testing app that helps assess and improve the security of systems and applications through scanning, exploitation, and reporting.

Beagle Security

Beagle Security identifies vulnerabilities in web applications and APIs, offering actionable insights and automated penetration testing integrated into CI/CD pipelines.

SOOS

SOOS is an Application Security Posture Management platform that identifies vulnerabilities in web applications and APIs, offering scanning and integration tools for security management.

MindFort

MindFort runs autonomous AI agents to continuously find, validate, score, simulate, and patch vulnerabilities in web applications and external networks.

Veracode

Veracode is an application security platform that identifies and mitigates software vulnerabilities throughout the development lifecycle, supporting various testing methods.

ReconwithMe

ReconwithMe is an automated vulnerability scanning tool that detects security issues like XSS, SQL injection, and API misconfigurations to enhance web application security.

Secureworks

Secureworks provides cybersecurity solutions that enhance threat detection, incident response, and compliance through AI-driven analytics.

GlitchSecure

GlitchSecure provides real-time security testing for products and infrastructure, helping organizations identify and mitigate vulnerabilities and threats.

Escape

Escape is an application security tool for detecting and fixing GraphQL vulnerabilities, automating API tests and documentation, and enhancing security in web applications.

Indusface WAS

Indusface WAS is a cloud-based web application scanner that detects and mitigates vulnerabilities through automated and manual testing with zero false positives.

Contrast Security

Contrast Security provides real-time application security by integrating code analysis and attack prevention directly into software development, enhancing security monitoring and vulnerability detection.

Pynt

Pynt is an API security testing platform that helps developers and testers identify and fix vulnerabilities during the software development lifecycle.

Halo Security

Halo Security is an app for vulnerability scanning, risk assessment, and penetration testing, helping users secure their websites and applications effectively.

SecureVibing

SecureVibing scans websites to identify security vulnerabilities like leaked API keys, missing security headers, RLS rules, and issues with Auth RateLimits and Captcha.

Probely

Probely is a web vulnerability scanner that tests the security of web applications and APIs, identifying real vulnerabilities and providing remediation guidance.

DerSecur

DerSecur is an application security testing platform that analyzes code vulnerabilities, manages dependencies, and integrates with CI/CD pipelines for secure software development.

Traceable

Traceable enhances API security by providing real-time testing, vulnerability reporting, and automated scans to identify and resolve security issues effectively.

VulnSign

VulnSign is an automated web application vulnerability scanner that detects and reports issues (e.g., SQL injection, XSS), supports authenticated scans, customizable settings, and CI integration.

Trident

Trident tests web apps, APIs, and cloud environments for vulnerabilities, maps verified attack paths across identities and data, and provides evidence and remediation fixes.

BestDefense

Runs automated security tests on deploys, creates remediation pull requests, and maps fixes to SOC 2, PCI DSS, and ISO 27001.