Veracode logo
    Product · Veracode

    DAST

    Cloud-native Dynamic Application Security Testing platform designed to identify and remediate runtime vulnerabilities in web applications and APIs with industry-low false positive rates.

    Start with a briefWebsite

    Be the first to recommend

    Recommend and Save apply to Veracode.

    Enterprise security teams managing broad web app and API portfolios who need scalable, low-noise runtime vulnerability testing integrated into their broader AppSec program.

    Best for
    • Large-scale web application portfolios
    • API runtime vulnerability discovery
    • Centralized AppSec vulnerability management
    May not be ideal if
    • Teams seeking lightweight, free, or purely open-source DAST tooling
    • Organizations needing deep, real-time interactive/agent-based instrumentation (IAST) instead of black-box testing
    • Very small engineering teams with single, simple static websites
    Next Step
    Considering DAST?

    Ask about pricing, alternatives, or if DAST is right for you.

    • Personalized fit analysis
    • See relevant alternatives
    • Run an evaluation when you're ready
    Configurable scan depth, speed, and accuracy
    Large-scale portfolio scanning for hundreds of assets
    Rapid dynamic scanning with less than 5 percent false positive rate
    Web application and API vulnerability detection
    01

    Agile development environments

    02

    Compliance requirement management

    03

    DevOps workflow automation

    04

    Shadow application discovery

    Every product has trade-offs, and which of them matter depends on your environment, your team and your timeline.

    Ask Picari about Veracode DAST

    Frameworks Veracode DAST reports for security, privacy, and regulatory compliance.

    SOC 2 Type II

    AICPA security & availability audit

    Publicly available

    FedRAMP

    US federal cloud authorization

    Publicly available

    For Veracode DAST integration and pricing details, ask Picari. Start a briefing with your question, such as whether it connects to your SIEM, identity provider and ticketing stack, or how it is priced at your seat count and data volume.

    Unverified profile

    This profile hasn't been verified by Veracode yet. Information may be incomplete.

    Are you from Veracode? Verify this profile

    Profile last updated on 9 October 2026 by Picari.