InsideEdgeInsideEdge
Download App

Phase 10 · Application Security (AppSec)

Topics

Dynamic Application Security Testing (DAST)

Part of the Cybersecurity Roadmap.

Summary

Testing a running application from the outside, simulating real attacks against live endpoints — catches runtime issues SAST can't see, at the cost of needing a running environment to test against.

How to Learn This

  • 1Run a free DAST tool (like OWASP ZAP) against a legal practice web application.
  • 2Learn the trade-off: DAST tests real behavior but can't see the source code directly.
  • 3Understand why SAST and DAST together catch a broader range of issues than either alone.

Previous

Static Application Security Testing (SAST)

Next

Software Composition Analysis (SCA)

More topics in Application Security (AppSec)

Secure SDLC ('Shift Left')Threat ModelingStatic Application Security Testing (SAST)Software Composition Analysis (SCA)API SecuritySecure Code ReviewSecurity Champions ProgramsDevSecOps Practices
InsideEdge

Stuck on this topic? Ask an Insider

Get 1:1 guidance from people who've walked this exact path — free on the InsideEdge app.

Download
InsideEdge