Dynamic Application Security Testing (DAST) Glossary Definition

Dynamic Application Security Testing (DAST) tests a running application from the outside to identify exploitable behavior.

Dynamic Application Security Testing (DAST) is a DevOps security concept that integrates security, compliance, and risk controls into software delivery and operational workflows.

DAST is useful for finding runtime and configuration issues, but it may miss flaws hidden in source code or unreachable paths.

Security, development, and operations teams use this concept to make security checks continuous instead of treating them as a late-stage review.

Related concepts include DevOps, DevSecOps, Security Automation and Software Supply Chain.

Additional Resource: OWASP DevSecOps Guideline.

Related concepts include Dynamic Analysis and Penetration Testing.