Buyer's guide

Best Dynamic Application Security Testing software

DAST tools that test running applications for security vulnerabilities by simulating attacks on deployed environments. Open any profile for real pricing, compliance, and buyer-fit detail, or jump into the dynamic application security testing directory to filter by industry, company size, and certifications.

15 profiled toolsUpdated 2026

1
Aikido Security
Code Security Scanning
Aikido Security brings together code, cloud, dependency, and runtime security workflows in a more approachable platform for modern engineering teams.
View profile >
2
StackHawk
Dynamic Application Security Testing
Developer-centric DAST tool that runs application security testing in CI/CD pipelines to find and fix AppSec bugs before they hit production.
View profile >
3
Waratek
Dynamic Application Security Testing
Runtime application security platform providing virtual patching and RASP protection for Java applications without code changes.
View profile >
4
Qualys
Vulnerability Management
Qualys provides cloud-based vulnerability management and web application scanning that helps organizations identify and prioritize security risks across their attack surface.
View profile >
5
Bishop Fox
Attack Surface Management
Bishop Fox provides continuous attack surface management and offensive security testing through its Cosmos platform and expert consultants.
View profile >
6
Mend.io
Software Composition Analysis
Mend.io is a software composition analysis and application security platform that helps development teams identify and remediate vulnerabilities in open-source dependencies.
View profile >
7
Docker
Container Orchestration
Docker is a platform for developing, shipping, and running applications in containers. It provides tools for building container images, managing registries, and orchestrating containerized w…
View profile >
8
SOOS
Software Composition Analysis
SOOS provides affordable software composition analysis and DAST solutions that help development teams identify vulnerabilities and license issues in open-source dependencies.
View profile >
9
Detectify
Attack Surface Management
Detectify provides external attack surface management powered by a crowdsourced network of ethical hackers who discover vulnerabilities in web applications.
View profile >
10
Astra Security
Dynamic Application Security Testing
Pentest and WAF platform delivering continuous security testing for web apps, APIs, mobile apps, and cloud infrastructure.
View profile >
11
AppTrana
Web Application Firewall
Managed web application and API protection service (from Indusface) combining DAST, WAAP, and 24/7 managed security rules.
View profile >
12
Checkmarx
DevSecOps Platforms
Checkmarx provides a comprehensive application security platform including software composition analysis, SAST, DAST, and API security for enterprise DevSecOps programs.
View profile >
13
Invicti
Dynamic Application Security Testing
Invicti provides automated web application security testing that combines DAST and IAST approaches for comprehensive vulnerability detection with proof-based scanning.
View profile >
14
OWASP ZAP
Dynamic Application Security Testing
Free, open-source web application security scanner maintained by OWASP for finding vulnerabilities in web applications during development and testing.
View profile >
15
Cobalt
Penetration Testing as a Service
Cobalt provides Pentest as a Service combining a vetted community of pentesters with a SaaS platform for on-demand security testing.
View profile >
16
AppCheck NG
Dynamic Application Security Testing
Dynamic application and infrastructure security scanner providing automated penetration testing at scale.
View profile >
17
Nuclei
Vulnerability Scanning
Open-source vulnerability scanner using YAML-based templates to find security issues across modern tech stacks.
View profile >
18
GuardRails AppSec
Software
Application security platform scanning for vulnerabilities in code.
View profile >
19
Corellium
Mobile Application Security
ARM-native mobile app and IoT security research platform
View profile >
20
Bright Security
Dynamic Application Security Testing
Developer-friendly DAST for APIs and applications
View profile >
21
Beagle Security
Penetration Testing as a Service
AI-powered web and API penetration testing platform with continuous monitoring.
View profile >
22
ForAllSecure
Dynamic Application Security Testing
Next-generation fuzz testing for software security
View profile >
23
Mayhem
Dynamic Application Security Testing
Application and API security fuzzing from ForAllSecure
View profile >
24
Contrast Labs
Application Security Posture Management
AppSec platform offering runtime protection and observability.
View profile >
25
Pynt
API Security
Automated API security testing integrated with CI and QA
View profile >
26
NowSecure
DevSecOps Platforms
Mobile application security platform with continuous automated testing and SDK integration.
View profile >
27
Metasploit
Penetration Testing
Rapid7's open-source penetration testing framework with thousands of exploits and auxiliary modules.
View profile >
28
Code Intelligence
Code Security Scanning
Continuous fuzz testing platform integrated with CI/CD
View profile >
29
Kryptowire
Application Security Posture Management
Quokka's mobile app security platform formerly Kryptowire analyzing iOS and Android apps for vulnerabilities.
View profile >
30
Fluid Attacks
Vulnerability Management
Continuous hacking service combining AI and expert pen testers to find vulnerabilities across application stacks.
View profile >
31
Escape
API Security
API security platform finding and fixing vulnerabilities in APIs with business logic testing and runtime monitoring.
View profile >
32
ImmuniWeb
Software
AI-driven ASM and application security testing
View profile >
33
Caido
Dynamic Application Security Testing
Lightweight web security auditing toolkit alternative to Burp Suite with modern interface and speed.
View profile >
34
Akto
API Security
Open-source API security platform for testing, finding, and protecting against API vulnerabilities.
View profile >

Best dynamic application security testing by company size

Best dynamic application security testing for Solo / freelancer Best dynamic application security testing for Startup (1-50)Best dynamic application security testing for Small business (51-200)Best dynamic application security testing for Mid-market (201-1,000)Best dynamic application security testing for Enterprise (1,000+)

Keep exploring

Dynamic Application Security Testing directory & filters All software categories Software deals

Frequently asked

What is the best dynamic application security testing software?

Cubbie ranks 15 profiled dynamic application security testing tools by profile completeness, verified-vendor status, and active deals. The list above leads with the products that carry the most complete, vendor-maintained profiles.

How does Cubbie choose these dynamic application security testing tools?

Listings are drawn from the live catalog and ordered so products with substantive, vendor-maintained profiles surface first. Cubbie does not accept payment for ranking position.

Ranked from Cubbie's live catalog, https://www.cubbie.com/best/dynamic-application-security-testing