Loading...
Mend DAST is a commercial Dynamic Application Security Testing tool developed by Mend.io. Security professionals most commonly compare it with Astra Security DAST Scanner, . All 89 alternatives are matched by shared capabilities, tags, and NIST CSF 2.0 coverage.
A closer look at the 8 most relevant alternatives and competitors to Mend DAST, including their key features and shared capabilities.
DAST scanner for web apps & APIs with CI/CD integration & 15k+ test cases.
Shares 4 capabilities with Mend DAST: Web Security, DEVSECOPS, DAST, CI/CD
DAST platform for scanning web apps & APIs within CI/CD pipelines.
Shares 4 capabilities with Mend DAST: Web Security, DEVSECOPS, DAST, CI/CD
CI/CD-integrated DAST tool for automated web app and API vuln scanning.
Shares 4 capabilities with Mend DAST: Web Security, DEVSECOPS, DAST, CI/CD
AI-enhanced web app vulnerability scanner with zero false-positive SLA
Shares 3 capabilities with Mend DAST: Web Security, DAST, CI/CD
AppSec platform with API discovery, CI/CD-native DAST, and risk oversight
Shares 3 capabilities with Mend DAST: DEVSECOPS, DAST, CI/CD
DAST tool for scanning web apps, microservices, and APIs for vulnerabilities
Shares 3 capabilities with Mend DAST: Web Security, DAST, CI/CD
An enterprise-scale dynamic application security testing (DAST) platform that provides automated vulnerability scanning and security assessment for web applications.
Shares 3 capabilities with Mend DAST: Web Security, DEVSECOPS, CI/CD
Enterprise DAST solution for runtime app and API security testing
Shares 3 capabilities with Mend DAST: Web Security, DAST, CI/CD
DAST scanner for web apps & APIs with CI/CD integration & 15k+ test cases.
DAST platform for scanning web apps & APIs within CI/CD pipelines.
CI/CD-integrated DAST tool for automated web app and API vuln scanning.
AI-enhanced web app vulnerability scanner with zero false-positive SLA
AppSec platform with API discovery, CI/CD-native DAST, and risk oversight
DAST tool for scanning web apps, microservices, and APIs for vulnerabilities
An enterprise-scale dynamic application security testing (DAST) platform that provides automated vulnerability scanning and security assessment for web applications.
Enterprise DAST solution for runtime app and API security testing
Enterprise DAST platform for web apps, APIs, business logic, and LLM security
DAST tool for continuous automated security testing of web and mobile apps
DAST scanner with proof-based vulnerability validation and CI/CD integration
DAST scanner for APIs and web apps with AI-powered testing and low FP rate
DAST scanner for web apps & APIs with automated vuln detection & remediation
DAST solution for mobile and web app security testing and vulnerability scanning
Automated DAST tool for continuous web app and API vulnerability scanning.
Web app security platform for vulnerability scanning & secure dev.
DAST scanner for discovering and testing APIs and web apps for vulns.
DAST tool that tests running apps for runtime vulnerabilities via attack simulation.
DAST solution for web apps and APIs with automated scanning capabilities
Managed web app security scanning service covering OWASP Top 10 vulnerabilities
DAST platform for API and web app security testing with business logic focus
DAST platform for web app & API vulnerability scanning with AI-enabled features
Cloud-based DAST solution for web app & API security with AI-powered scanning
AI-powered AppSec platform for DAST, IAST, API security with auto-remediation
DAST tool for automated web app and API vulnerability scanning and testing
DAST scanner that identifies web app vulnerabilities and attack surfaces
AI-driven DAST tool for automated vulnerability testing of web applications
AI-powered DAST tool for business logic security testing of web apps and APIs
GraphQL-native DAST tool for security testing GraphQL applications
AI-powered DAST scanner for web app vulnerability detection with zero false positives
DAST tool that scans live web apps to detect vulnerabilities in real-time
AI-powered AppSec platform for DAST, IAST, and API security testing
Automated API security testing tool integrated into CI/CD pipelines
Web application vulnerability scanner with automated authentication support
DAST tool for automated web app and API vulnerability scanning
DAST scanner for Single Page Applications using headless browser technology
DAST scanner for web apps and APIs with OWASP Top 10 vulnerability detection
DAST tool for detecting web app vulnerabilities like SQL injection and XSS
DAST platform with API discovery, shift-left testing, and AppSec oversight
Full-stack web app security testing platform with SAST, DAST, SCA, and pentesting
Managed application security testing service for web applications
Continuous automated pentesting platform with GitHub integration and AI agents
Dynamic web app & API vulnerability scanner with free and paid tiers.
Black box fuzzer and DAST tool for testing application security
ImmuniWeb® On-Demand is a web application penetration testing platform that combines AI-powered automation with manual security testing to provide comprehensive vulnerability assessments and compliance reporting.
AI-powered agent for automated security reviews and penetration testing
Web app vulnerability scanner with continuous scanning and authenticated testing
DAST tool for scanning web apps and APIs for OWASP Top 10 vulnerabilities
AI-powered platform for continuous automated penetration testing of web apps
AI-driven automated security testing using fuzzing and symbolic execution
Custom blockchain fuzz testing service with bespoke harnesses & CI integration.
Akamai Client-Side Protection & Compliance is a security tool that monitors and protects against client-side threats on websites, aiding in PCI DSS v4.0 compliance.
DHS-funded program providing automated AppSec tools across the SDLC.
A web security tool that scans for vulnerabilities and known attacks.
A tool to find XSS vulnerabilities in web applications
Jaeles is an automated web application testing tool that helps identify vulnerabilities and security issues through customizable testing scenarios.
A comprehensive toolkit for web application security testing, offering a range of products and solutions for identifying vulnerabilities and improving security posture.
ConDroid is a concolic execution framework for Android applications that automates dynamic analysis by driving execution to specific code locations without manual interaction.
CakeFuzzer is an automated vulnerability discovery tool specifically designed for identifying security issues in CakePHP web applications with minimal false positives.
w3af is an open source web application security scanner that identifies over 200 types of vulnerabilities including XSS, SQL injection, and OS commanding in web applications.
A collection of Yara rules for the Burp Yara-Scanner extension that helps identify malicious software and infected web pages during web application security assessments.
Introspy-Android is a dynamic analysis framework that hooks Android APIs at runtime to monitor application behavior and identify security vulnerabilities on rooted devices.
IronBee is an open source web application security sensor framework that provides detection and prevention capabilities for web application vulnerabilities.
Container image definitions that create standardized testing environments for software applications with consistent dependencies and configurations.
ZAP is an open-source web application security scanner that helps identify vulnerabilities through automated scanning and manual testing capabilities.
A Java based HTTP/HTTPS proxy for assessing web application vulnerability with various useful features.
Web-application vulnerability scanner with extensive coverage of security testing modules.
A comprehensive web application security testing solution that offers built-in vulnerability assessment and management, as well as integration options with popular software development tools.
An open-source web application security scanner framework that identifies vulnerabilities in web applications.
A toolkit for detecting and tracking Blind XSS, XXE, and SSRF vulnerabilities
DOMdig is a DOM XSS scanner that uses static analysis, dynamic analysis, and fuzz testing to detect and exploit Cross-Site Scripting vulnerabilities in Single Page Applications.
Application monitoring and security platform that provides runtime visibility, threat detection, and automated response capabilities for application-layer security
Runtime application security library blocking zero-days & OWASP Top 10 attacks
Python tool for monitoring user-select APIs in Android apps using Frida.
A plugin for viewing, detecting weak configurations, and generating Content Security Policy headers.
A Python-based Burp Suite extension that integrates Yara scanning capabilities for detecting patterns and signatures in web application traffic using custom Yara rules.
DOMPurify is a fast XSS sanitizer for HTML, MathML, and SVG.
InQL is a Burp Suite extension for advanced GraphQL testing and vulnerability detection
A fast and simple DOM based XSS vulnerability scanner
Femida is a Python automation tool that integrates with Burp Suite to detect blind XSS vulnerabilities in web applications through HTTP request analysis.
A Burp Suite plugin that extracts keywords from HTTP responses using regex patterns and tests for reflected XSS vulnerabilities within the target scope.
A Burp Suite plugin for automatically adding XSS and SQL payload to fuzz
Track postMessage usage with this Chrome Extension
Node.js Goof is a vulnerable Node.js demo application containing multiple security vulnerabilities for testing and educational purposes.
EvoMaster is an AI-driven tool that automatically generates system-level test cases for web APIs and enterprise applications using evolutionary algorithms and dynamic program analysis.
Common questions security professionals ask when evaluating alternatives and competitors to Mend DAST.
The most popular alternatives to Mend DAST include Astra Security DAST Scanner, NightVision Platform, SOOS DAST, ImmuniWeb® Neuron, and StackHawk StackHawk. These Dynamic Application Security Testing tools offer similar capabilities and are frequently compared by security professionals evaluating their options.
