Bright Security DAST

What Bright Security DAST is

Bright Security DAST is a dynamic application security testing tool offered as SaaS. It tests websites, web applications, APIs, servers, and network devices, and can test mobile applications on the server side. Its checks include common vulnerabilities such as SQL injection, CSRF, XSS, and XXE, as well as business logic vulnerabilities. Bright says it validates findings in real time and does not report issues it cannot validate. Target discovery can use a crawler, HAR recording, or GraphQL and OpenAPI schemas; authentication objects let scans reach login-protected resources. Teams can start scans from CI/CD pipelines and control them through the CLI or REST API without using the interface. The CLI’s Repeater mode routes scan requests to local targets without exposing them to the internet. Deployment options include SaaS, private cloud, and a Repeater scan proxy. Scan quantity is unlimited, but concurrent scans depend on the organization’s engine count. Bright says scan data is held in memory temporarily and deleted after a scan. Pricing is on request, and the scanning engine cannot handle CAPTCHA.