Probely (Snyk API & Web)

Probely, now acquired by Snyk and marketed as Snyk API & Web, is a DAST scanner for web applications and APIs. It helps organizations discover, inventory, and test their external attack surface for vulnerabilities. **Asset Discovery:** Continuously discovers and manages an inventory of APIs and web applications, enabling organizations to identify unknown assets within their external attack surface. **API & Web Application Vulnerability Scanning:** Scans web applications and APIs — including microservices and standalone APIs defined via OpenAPI (Swagger) specifications or Postman Collections — for security vulnerabilities. **Next-Generation Spider:** Uses a Headless Chrome-based crawler to index JavaScript-heavy applications and Single-Page Applications (SPAs). **DevSecOps Integration:** Provides a documented API for automation and supports two-way synchronization with issue trackers, enabling integration into CI/CD pipelines. **Evidence-Based Reporting:** Generates findings reports with contextual proof and remediation guidance, aiming to reduce false positives. **Compliance Reporting:** Produces compliance-oriented management reports with requirements checklists for standards including PCI DSS, OWASP Top 10, ISO 27001, HIPAA, and GDPR.