Safeguard DAST
Safeguard DAST is web-based security software with authenticated scanning, API testing, and CI/CD integration.
What Safeguard DAST is
Safeguard DAST is web-based security software with authenticated scanning, API testing, and CI/CD integration. It supports hybrid deployment and can analyze Terraform, Kubernetes, and CloudFormation configurations. Its additional tools include custom policies, pull request scanning, IDE integration, SBOM generation, and reachability analysis. The listed supported ecosystems are npm, PyPI, Maven, Gradle, Go modules, Cargo, RubyGems, Composer, NuGet, and Hex. Safeguard DAST uses a freemium model, with a free plan and paid plans from $9/mo. It was founded in 2026 and is headquartered in Dublin, California, United States. These capabilities make it relevant to teams that need application security scanning alongside infrastructure configuration analysis and developer workflow integrations. The supplied details do not specify scan limits or which capabilities are restricted to paid plans.
Good
- Includes authenticated scanning and API testing
- Analyzes Terraform, Kubernetes, and CloudFormation
- Supports ten listed ecosystems
- Offers CI/CD, pull request, and IDE integrations
- Free plan available
Watch out
- Paid plans start at $9/mo
- Only web is listed as a platform
Who it suits
Safeguard DAST suits development and security teams seeking application scanning, API testing, or infrastructure configuration analysis. Its CI/CD, pull request, and IDE integrations may suit teams incorporating security checks into development workflows.
Verdict
Safeguard DAST brings application scanning, infrastructure analysis, and development workflow integrations together. A free plan is available, with paid plans from $9/mo.
The facts
Each one read from Safeguard DAST's own pages, with the date it was checked.
What it does
- API discovery
- Endpoint discovery draws on OpenAPI, GraphQL introspection, gRPC reflection, and live traffic samples.checked 7 Oct 2026
- Authentication
- Supported authenticated flows include form auth, OAuth 2.0 with refresh, JWT bearer, session cookies, SAML, and mutual TLS.checked 7 Oct 2026
- CI integrations
- The DAST page lists GitHub Actions, GitLab CI, Buildkite, CircleCI, and Jenkins integrations.checked 7 Oct 2026
- Coverage
- The product page states full OWASP Top 10 and API Top 10 coverage.checked 7 Oct 2026
- Coverage reporting
- A Coverage Score reports how much discovered attack surface the scan reached and why it stopped.checked 7 Oct 2026
- Delta scans
- Subsequent scans focus on changes from the last clean run, and the page describes nightly delta scans as taking minutes.checked 7 Oct 2026
- Deployment
- Internal-network and on-prem scanning is supported through a self-hosted scanner pod with mTLS to the control plane.checked 7 Oct 2026
- Endpoint discovery
- It builds endpoint inventories from OpenAPI, GraphQL introspection, gRPC reflection and live traffic samples.checked 7 Oct 2026
- Findings
- Findings can include the function and file reached by a request, the patch that introduced a regression, and a static call-graph annotation.checked 7 Oct 2026
- Findings workflow
- DAST findings join the same ranked triage queue as Safeguard SAST and SCA results, with code-level context attached.checked 7 Oct 2026
- Graph-aware crawling
- The scanner uses Safeguard SAST call graphs, route tables, and authentication middleware to guide its crawl.checked 7 Oct 2026
- Integrations
- The listed CI integrations are GitHub Actions, GitLab CI, Buildkite, CircleCI and Jenkins.checked 7 Oct 2026
- JavaScript analysis
- DAST analyzes served JavaScript, JSON, and source maps for exposed credentials, API endpoints, routes, cloud-storage references, personal data, configuration, and developer comments.checked 7 Oct 2026
- Pricing
- The DAST page offers a demo and a “Try It” button but does not state a DAST-specific price.checked 7 Oct 2026
- Purpose
- Safeguard DAST dynamically tests running applications and reports attack surface coverage alongside findings.checked 7 Oct 2026
- Scan modes
- The launch page lists Fast, Deep, Progressive, and Reconnaissance scan modes, with Reconnaissance sending no probes.checked 7 Oct 2026
- Scanning
- It generates targeted SQL, OS command, SSRF, XSS and deserialization payloads based on expected parameter shapes.checked 7 Oct 2026
- Secret handling
- Reported secret samples are redacted at detection time, and the launch page says raw credentials are not stored or returned.checked 7 Oct 2026
- Target authorization
- Ownership verification is required before requests are sent, and requests are gated by scope, rate, and budget limits.checked 7 Oct 2026
- Targeted fuzzing
- It generates payloads for sink classes including SQL, OS command, SSRF, XSS, and deserialization, informed by expected parameter shapes.checked 7 Oct 2026
- Triage
- DAST findings join SAST and SCA results in a shared ranked queue, with cross-links between runtime hits and related SAST findings.checked 7 Oct 2026
The company
- Founded
- 2026checked 28 Sep 2026
- Headquarters
- Dublin, California, United Stateschecked 28 Sep 2026
- Maker
- The DAST page footer identifies the company as Safeguard.sh Inc and lists its headquarters at 7779 Topaz Circle, Dublin, California 94568, United States.checked 7 Oct 2026
Alternatives to Safeguard DAST
- 1
OWASP ZAP
Free planOpen sourceAPIExtensionLinuxmacOS7.6Free plan - 2
DASTA-AI
Free planWebAPI7.3From $100 a month - 3
Beagle Security
Free planWebAPI6.9From $99 a month - 4
StackHawk HawkScan
WebAPILinuxmacOS6.8From $10 a month - 5
w3af
Free planWebAPILinuxmacOS6.8Free plan - 6
6.6From $599 a year