Safeguard DAST

6.0easy start · #33 of 65
in Software Composition Analysis Software

Free to practise onnot on record
Free trialnot on record
Well documentedyes
Runs where you worknot on record

Runs on self-hosted, Web.

Safeguard DAST is ranked #33 of 65 in software composition analysis software on The Geeks Club. It runs on Self-hosted, Web.

Compared on software composition analysis software

Free plan: Yes
Paid from: $9/mo

Best Safeguard DAST alternatives

See all 20

Sonatype Nexus Repository 0 of 4 in the starter kit Lesson 18.0 Xygeni 0 of 4 in the starter kit Lesson 27.9 FOSSA 0 of 4 in the starter kit Lesson 37.7 Snyk Open Source 0 of 4 in the starter kit Lesson 47.4 Docker Desktop 0 of 4 in the starter kit Lesson 57.3 Socket 0 of 4 in the starter kit Lesson 67.3

The record

Purpose: Safeguard DAST dynamically tests running applications and reports attack surface coverage alongside findings.
Graph-aware crawling: The scanner uses Safeguard SAST call graphs, route tables, and authentication middleware to guide its crawl.
Targeted fuzzing: It generates payloads for sink classes including SQL, OS command, SSRF, XSS, and deserialization, informed by expected parameter shapes.
API discovery: Endpoint discovery draws on OpenAPI, GraphQL introspection, gRPC reflection, and live traffic samples.
Authentication: Supported authenticated flows include form auth, OAuth 2.0 with refresh, JWT bearer, session cookies, SAML, and mutual TLS.
Vulnerability coverage: The product states coverage for the OWASP Top 10 and API Top 10.
Scan modes: The launch page lists Fast, Deep, Progressive, and Reconnaissance scan modes, with Reconnaissance sending no probes.
Coverage reporting: A Coverage Score reports how much discovered attack surface the scan reached and why it stopped.
JavaScript analysis: DAST analyzes served JavaScript, JSON, and source maps for exposed credentials, API endpoints, routes, cloud-storage references, personal data, configuration, and developer comments.
Secret handling: Reported secret samples are redacted at detection time, and the launch page says raw credentials are not stored or returned.
Target authorization: Ownership verification is required before requests are sent, and requests are gated by scope, rate, and budget limits.
CI integrations: The DAST page lists GitHub Actions, GitLab CI, Buildkite, CircleCI, and Jenkins integrations.
Deployment: Internal-network and on-prem scanning is supported through a self-hosted scanner pod with mTLS to the control plane.
Findings workflow: DAST findings join the same ranked triage queue as Safeguard SAST and SCA results, with code-level context attached.

Where it ranks on The Geeks Club

Best Software Composition Analysis Software in 2026#33 of 65
Best Dynamic Application Security Testing Software in 2026#16 of 28
Best Software Supply Chain Security Software in 2026#19 of 23
Best Infrastructure as Code Security Software in 2026#19 of 22
Best Application Security Orchestration Platforms in 2026#18 of 22

Is Safeguard DAST yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote Safeguard DAST

Sources

safeguard.sh/products/dast· checked 7 Oct 2026
safeguard.sh/resources/press/2026-08-11-safeguard-da· checked 7 Oct 2026