BreachLock DAST
BreachLock DAST checks running applications from the outside by sending inputs and analyzing their responses.
What BreachLock DAST is
BreachLock DAST checks running applications from the outside by sending inputs and analyzing their responses. This black-box approach lists coverage for vulnerable applications, open-source component CVEs, and runtime vulnerabilities. The service supports scheduled and API scans, customized reports, compliance reports, and retesting. Authenticated scans can use BreachLock’s Login Assistant Chrome extension with a session cookie or recorded login sequence. Its API integrations support ticketing and real-time alerts through Jira, Slack, Okta, Trello, ServiceNow, Azure DevOps, and GitHub. BreachLock says its DAST and penetration-testing methodology aligns with WASC Threat Classification v2.0 and the OWASP Top 10. Deployment is cloud-based, with API, extension, and web platform access. Pricing is on request, and the company describes pricing as flexible and itemized by services; platform use is optional. Listed starting options are $2,500, paid once for one-time validation and $5,000 a year for annual validation. Continuous validation uses custom pricing.
Good
- Tests running applications using a black-box approach.
- Lists API scanning and scheduled scans.
- Authenticated scans can use cookies or recorded login sequences.
- Supports ticketing and alerts through named integrations.
- Retesting and customized reporting are included.
Watch out
- Pricing is on request.
- Continuous Security Validation uses custom pricing.
- Support services depend on the package.
Who it suits
BreachLock DAST is aimed at growing organizations and enterprises seeking application security testing, including teams that need authenticated scans, scheduled checks, or ticketing and alert integrations.
Verdict
BreachLock DAST combines external application testing with authenticated scans, reporting, and retesting. Organizations should request pricing and confirm which package-dependent support services they need.
Plans and prices
From BreachLock DAST's own pricing page, checked 4 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| 1-Time Security Validation | $2,500, paid once | Starts at · Suitable for point-in-time security assessments · PTaaS platform use is optional |
| Annual Security Validation | $5,000 a year | Starts at · Suitable for annual comprehensive security assessment coverage · PTaaS platform use is optional |
| Continuous Security Validation | Priced on request | High testing workloads · Custom package · Custom Pricing |
The facts
Each one read from BreachLock DAST's own pages, with the date it was checked.
What it does
- Authenticated scans
- BreachLock’s Login Assistant Chrome extension supports DAST authentication using a session cookie or a recorded login sequence.checked 4 Oct 2026
- Compliance
- BreachLock states that it complies with the EU-U.S. Data Privacy Framework and has self-certified to the U.S. Department of Commerce.checked 4 Oct 2026
- Integrations
- BreachLock lists API integrations for automated ticketing and real-time alerts with Jira, Slack, Okta, Trello, ServiceNow, Azure DevOps, and GitHub.checked 4 Oct 2026
- Pricing flexibility
- BreachLock describes pricing as flexible and itemized by services such as ASM and PTaaS, and says platform use is optional.checked 4 Oct 2026
- Reporting and retesting
- The DAST feature list includes customized reporting and retesting.checked 4 Oct 2026
- Security methodology
- BreachLock says its DAST and penetration-testing methodology aligns with WASC Threat Classification v2.0 and the OWASP Top 10.checked 4 Oct 2026
- Vulnerability coverage
- The DAST offering lists identification of vulnerable applications, open-source component CVEs, and runtime vulnerabilities.checked 4 Oct 2026
- Who it is for
- BreachLock describes its mission as helping growing organizations and enterprises improve the accuracy, agility, cost-effectiveness, and scalability of offensive security.checked 4 Oct 2026
Where it runs
- DAST approach
- BreachLock DAST is a black-box testing method that tests a running application from the outside by sending inputs and analyzing responses.checked 4 Oct 2026
- Platform support
- The company says it provides technical and security-related support, onboarding, training, and technical assistance, with package-dependent services.checked 4 Oct 2026
The company
- Founded
- BreachLock says it was founded in 2019 by Seemant Sehgal.checked 4 Oct 2026
- Headquarters
- New York, New York, United Stateschecked 28 Sep 2026
Alternatives to BreachLock DAST
- 1
OWASP ZAP
Free planOpen sourceAPIExtensionLinuxmacOS7.6Free plan - 2
Beagle Security
Free planWebAPI6.9From $99 a month - 3
ImmuniWeb
AndroidiOSWebAPI6.8From €595 a year - 4
Nuclei
Free planLinuxmacOSSelf-hostedWindows6.8Free plan - 5
ZeroThreat
Free planWebAPI6.7From $100 a month - 6
VAddy
WebAPILinuxmacOS6.6From ¥19,800 a month