Alternatives to Checkmarx DAST

17.6

OZ

OWASP ZAP

OWASP ZAP, now identified as ZAP or ZAP by Checkmarx, is a free, open-source web application scanner and proxy for security testing.

Free planOpen sourceAPIExtensionLinux

Free plan

VisitDetails

27.3

DASTA-AI

Free planWebAPI

From $100 a month

VisitDetails

36.9

Beagle Security

Beagle Security is an agentic AI penetration testing platform for web applications, APIs, and GraphQL.

Free planWebAPI

From $99 a month

VisitDetails

4. 4SH

   StackHawk HawkScan

   StackHawk HawkScan is a dynamic application security testing scanner for web applications and APIs.

   WebAPILinuxmacOS
   6.8From $10 a month
   Visit
5. 5W3

   w3af

   w3af is a free, open-source web application security scanner for developers and penetration testers assessing web vulnerabilities.

   Free planWebAPILinuxmacOS
   6.8Free plan
   Visit
6. 6

   Indusface WAS

   Indusface WAS is a cloud-based web application security scanner using dynamic application security testing to identify vulnerabilities.

   Web
   6.6From $599 a year
   Visit
7. 7WA

   Wapiti

   Wapiti is a free, open-source command-line tool for auditing websites and web applications.

   Free planLinuxmacOSSelf-hostedWindows
   6.6Free plan
   Visit
8. 8

   Bright Security DAST

   Bright Security DAST is a dynamic application security testing tool offered as SaaS.

   WebAPILinuxmacOS
   6.5
   Visit
9. 9

   Burp Suite DAST

   Burp Suite DAST is an automated dynamic web vulnerability scanner built on the scanning engine used in Burp Suite Professional.

   WebAPILinuxSelf-hosted
   6.4
   Visit
10. 10

    Astra DAST Scanner

    WebAPI
    6.3From $699 a year
    Visit
11. 11

    Invicti

    Invicti is an application security platform for finding, prioritizing, and fixing application risk.

    WebAPISelf-hosted
    6.3$500 one-time
    Visit
12. 12VD

    Veracode DAST

    Veracode DAST is a dynamic application security testing tool that scans live web applications and REST APIs.

    WebAPILinuxmacOS
    6.2
    Visit
13. 13

    Offensive360 DAST

    Offensive360 DAST dynamically tests live web applications and APIs with a headless browser, more than 40 active exploit checks, and 19 passive analyzers.

    WebAPISelf-hosted
    5.9
    Visit
14. 14

    Safeguard DAST

    Safeguard DAST is web-based security software with authenticated scanning, API testing, and CI/CD integration.

    WebSelf-hosted
    5.8
    Visit
15. 15HA

    HCL AppScan Source

    HCL AppScan Source is a static application security testing tool that analyzes source code for vulnerabilities early in the development lifecycle.

    LinuxSelf-hostedWindows
    5.7
    Visit
16. 16

    SecuDAST

    SecuDAST is a self-hosted dynamic application security testing tool for running applications inside an organization’s network.

    APILinuxSelf-hosted
    5.6
    Visit
17. 17

    Rapid7 InsightAppSec

    WebWindows
    5.5From $175 a month
    Visit
18. 18

    Tenable One Web App Scanning

    Tenable One Web App Scanning is a web application scanning product from Tenable, a company founded in 2002 and headquartered in Columbia, Maryland, United States.

    Web
    5.5From $3,578 a year
    Visit
19. 19

    Black Duck Continuous Dynamic

    Black Duck Continuous Dynamic is a cloud-based SaaS service for dynamic security testing of web applications in QA and production.

    WebAPI
    5.3
    Visit
20. 20OF

    OpenText Fortify DAST

    OpenText Fortify DAST is a paid application security testing product for Linux and web platforms.

    WebLinux
    4.9
    Visit
21. 21AD

    apPosture DAST

    Web
    4.8
    Visit
22. 22DA

    Detectify Application Scanning

    Web
    4.8
    Visit
23. 23QW

    Qualys Web Application Scanning

    Web
    4.8
    Visit
24. 24

    FortiDAST

    Web
    4.7
    Visit
25. 25HS

    Holm Security Web Application Security

    Web
    4.7
    Visit

Back to Checkmarx DAST