Veracode DAST

Input—per 1M tokens

Output—per 1M tokens

Context—tokens

WeightsClosed

About

Veracode DAST is ranked #5 of 18 in dynamic application security testing software on Inferse. It runs on API, Linux, macOS, Web, Windows. A free trial is offered.

Compared on dynamic application security testing software

Authenticated scanning: Yesveracode.com
API testing: Yesveracode.com
Browser-based scanning: Yesveracode.com
CI/CD integration: Yesveracode.com
Deployment model: hybridveracode.com

Facts

Purpose: Veracode DAST is a Dynamic Application Security Testing solution for automated, scalable scanning of web applications and REST APIs.docs.veracode.com · 1 Oct 2026
Runtime testing: It runs security tests against live web applications and APIs, including authenticated or unauthenticated analyses and assets behind firewalls.docs.veracode.com · 1 Oct 2026
False positives: Veracode states that DAST has a false positive rate below 5%.veracode.com · 1 Oct 2026
Scan configuration: Scans can be automated or scheduled with configurable scan depth, speed and accuracy.veracode.com · 1 Oct 2026
Scale: The cloud-native engine is designed to scan hundreds of assets across environments, including applications behind firewalls.veracode.com · 1 Oct 2026
API security: DAST probes API endpoints and entire workflows to detect vulnerabilities and validate business logic.veracode.com · 1 Oct 2026
CI/CD integration: DAST integrates with CI/CD pipelines through webhooks or the Veracode CLI, and reports can be downloaded in PDF, JUnit or CSV formats.docs.veracode.com · 1 Oct 2026
Ticketing integrations: The integration documentation describes ticketing workflows for Jira, DefectDojo and Asana.docs.veracode.com · 1 Oct 2026
Trial: Veracode offers a free 14-day DAST trial through the Veracode Platform.docs.veracode.com · 1 Oct 2026
Scan modes: A Quick scan takes approximately three to five minutes and runs non-invasive scanners for basic misconfigurations.docs.veracode.com · 1 Oct 2026
API specification limit: API scans require an OpenAPI 2.0 or 3.0 specification in JSON or YAML; HAR files are not supported.docs.veracode.com · 1 Oct 2026
Region limit: The United States Federal Region is not supported for DAST.docs.veracode.com · 1 Oct 2026
Security compliance: Veracode reports SOC 2 Type II attestation and a FedRAMP Moderate Authority to Operate for its cloud-based application security platform.veracode.com · 1 Oct 2026
Support: Veracode directs users to Technical Support for help with DAST integrations.docs.veracode.com · 1 Oct 2026