Search the reference library
Browse the practical guides, working resources, and primary-source entries for dynamic application security testing.
Entries
Dynamic Application Security Testing
Rapid7 InsightAppSec is the featured DAST product in this reference. Rapid7 describes black-box assessment of modern web applications and APIs, with finding review and reporting. A useful evaluation still needs a valid session, reached workflows, and evidence connecting a finding to the application’s actual behavior.
Preparation & accessDynamic application security testing (DAST): how it works
Understand the method, evidence, limitations, and operating decisions for dynamic application security testing.
Preparation & accessRapid7 InsightAppSec: scope and evaluation
Rapid7 describes InsightAppSec as dynamic testing for modern web applications and APIs, with vulnerability review and reporting capabilities. Confirm the configured target scope, authentication, scan policy, and evidence delivered for the actual evaluation.
Preparation & accessProducts, services, and reference material
Compare the roles of named providers, tools, examples, and primary resources for this task.
Preparation & accessRun authenticated scanning with a session you can verify
Run authenticated scanning with a session you can verify.
Execution & coverageDefine the scan policy before it touches the target
Define the scan policy before it touches the target.
Evidence & retestRecord coverage before accepting a clean result
Record coverage before accepting a clean result.
Evidence & retestDAST scan-readiness and coverage checklist
Record the approved target, scan policy, session checks, reached workflows, finding evidence, and retest decision.
Reference libraryReading paths
Choose a reading path for the decision you need to make.
Reference librarySources and their scope
Read the primary evidence and understand what it supports.
Reference libraryHow this reference is assessed
Reachable workflows, session validity, enforced scan boundaries, reproducible findings, and comparable retests.
Reference libraryHow the concepts connect
Follow the subject, evidence, ownership, and next decision.
Reference libraryTerms used in this reference
Read the definitions that affect the operating decision.
Reference libraryAbout Dynamic Application Security Testing
Publisher, editorial method, source status, and visit measurement.
Reference libraryRelated security references
Move to a neighboring guide when the task changes.
Products & resourcesPortSwigger Burp Suite DAST
Automated web-application security testing.
Products & resourcesHostedScan DAST
Hosted dynamic scanning of web applications.
Continue reading
Cite this entry
Dynamic Application Security Testing. “Search the reference library.” Reviewed November 12, 2026.
https://dynamicapplicationsecuritytesting.com/library/