What is a DAST tool?
⚡
Quick Answer
DAST (Dynamic Application Security Testing) tests a running application from the outside, like an attacker, probing for vulnerabilities such as XSS and injection — e.g., OWASP ZAP, Burp Suite.
Detailed Answer
DAST finds issues only visible at runtime (auth flaws, misconfig, injection) without needing source code, so it catches things SAST misses, but it runs later (against a deployed environment) and gives less precise code-level location. Combine SAST + DAST + SCA for coverage across the lifecycle.
💡
Interview Tip
Say DAST needs a running app and finds runtime issues SAST cannot see — position it as complementary coverage.
dastsecuritydynamic-analysis