Dynamic application security testing
Testing of running web applications and APIs by sending crafted requests and observing responses.
18 vendors · alphabetical
- 42Crunch42Crunch sells a platform for governing the security of MCP servers, APIs and AI agents at enterprise scale. 42Crunch says it helps enterprises bring AI security under control. 42Crunch describes the job as discovering every MCP server that AI agents expose or consume, securing each one against attack, and assessing compliance with AI regulations and security frameworks.Ownership not established
- Astra SecurityAstra Security sells a platform that performs continuous offensive pentests across apps, APIs and cloud.Privately held
- AttaxionAttaxion sells a platform that maps an organization's entire attack surface, identifies critical vulnerabilities and supports remediation with guided next steps and workflows.Ownership not established
- Beagle SecurityBeagle Security's platform automates penetration tests across web apps and public APIs, with guidance down to a tech stack and code level.Ownership not established · primary category
- Black DuckBlack Duck sells application security testing products and services, including agentic AI AppSec, SAST, DAST, IAST and SCA.Owned by Clearlake Capital Group and Francisco Partners since 2024
- CheckmarxCheckmarx sells Checkmarx Developer Assist, which delivers context-aware security guidance directly within a developer's IDE.Owned by Hellman & Friedman since 2020
- Contrast SecurityContrast Security sells an Application and API Security platform built to detect and stop live application-layer attacks.Ownership not established
- DetectifyDetectify is an application security platform that combines Dynamic Application Security Testing (DAST) and Attack Surface Management (ASM).Owned by Insight Partners since 2024 · primary category
- EscapeEscape sells an offensive security platform that uses AI agents to discover, test and remediate vulnerabilities in engineering workflows.Privately held
- Fleuret AIFleuret AI sells pentesting that combines artificial intelligence and offensive expertise.Privately held
- IndusfaceIndusface sells the AppTrana platform for web apps, APIs and AI workloads, and the Indusface WAS platform for DAST scanning and pen-testing.Ownership not established
- InvictiInvicti sells an application security platform that combines DAST, SAST, SCA, IaC, Secrets, and Container testing in one platform.Ownership not established · primary category
- Mend.ioMend.io sells enterprise AI security and application security software, and secures the full chain from open source dependencies and AI models to container images.Ownership not established
- Outpost24Outpost24 sells security products and services delivered through its cloud platform with automation supported by its cyber security experts.Ownership not established
- PyntPynt sells a platform that discovers and secures APIs, LLMs and MCPs in one single solution.Ownership not established
- StackHawkStackHawk sells two plans, Wingman and StackHawk Scale, that run on HawkScan, a runtime testing engine for running applications.Ownership not established · primary category
- Traceable AITraceable offers continuous discovery and posture insights for APIs and MCP tools to identify and manage security risks across modern AI applications.Privately held
- VeracodeVeracode sells an Application Risk Management Platform that identifies risks across the software development lifecycle, automates flaw fixes, and simplifies governance and compliance.Owned by Thoma Bravo since 2019