DAST (Dynamic Application Security Testing)

Dynamic Application Security Testing executes a running application and probes it for vulnerabilities (injection, broken auth, misconfiguration). DAST complements SAST by finding flaws that only manifest at runtime, but requires a deployed test environment and produces no source-line attribution.