Back to Glossary

Security testing method

Dynamic Application Security Testing (DAST)

Assessing the security of a running application by examining its externally observable behaviour.

Related domain: CybersecurityConcept ID: concept-dast

Definition

Dynamic Application Security Testing (DAST) is a method for assessing the security of a running application by analysing its behaviour during execution.

Human Explanation

DAST examines an application from the perspective of a user or potential attacker without analysing its source code.

Why it Matters

It can identify Vulnerabilities that become visible only when the application is running.

Conceptual Boundary

DAST does not analyse source code and does not replace static methods such as SAST.

Practical Perspective

Combining static and dynamic testing within one development process provides broader evidence than either method alone.

Related Concepts