Suggestions appear as you type. Use the up and down arrows to choose one and Enter to open it.

This page's audience our own tag's counts — open to see them
–Visits
–Page views
–Clicks to vendors
–Time on page
–Reading now
Clicks to vendors, by tool
  • –
Top countries
  • –
Devices
  • –

– · visits, page views and clicks counted by our own tag, which counts more than our checked analytics; every figure rounded down · how we count

Astra DAST Scanner review

#4 of 26 in Dynamic Application Security Testing Software

A cloud DAST scanner with authenticated testing, API coverage, and CI/CD integrations.

9.1/10Editor score
Visit Astra Security
Astra DAST Scanner9.1 Visit Astra Security

Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026

Astra DAST Scanner is a cloud-based dynamic application security testing product from Astra Security. It is designed for engineering and security teams that need to scan web applications and APIs for issues such as OWASP Top 10 vulnerabilities, CVEs, XSS, SQL injection, IDOR, CSRF, and SSRF. Its coverage includes authenticated testing behind login forms, including TOTP-based MFA, browser crawling for JavaScript-heavy applications, and support for REST, SOAP, and GraphQL APIs. The product is web-based and was founded in 2018.

The published plans are structured around scan volume and target coverage. Scanner Lite costs $69 per month or $699 per year and includes 3 monthly vulnerability scans, 1 target, authenticated scanning, and 1 integration; its monthly plan also lists AI-powered remediation assistance. Scanner costs $199 per month or $1,999 per year, adding unlimited vulnerability scans and unlimited integrations for 1 target, while the monthly plan includes four expert-vetted scans on annual billing. Scanner Agency costs $499 per month or $4,999 per year, with unlimited scans, a 5-target pool, target swapping every 30 days, four expert-vetted scans, and an account manager. A 7-day free trial is available.

Astra DAST Scanner fits teams that want security testing connected to development workflows. GitHub Actions, GitLab CI, Jenkins, and Bitbucket integrations support CI/CD use, while Slack and Jira connect findings with team communication and issue tracking. Scheduled and post-deployment scans, individual vulnerability rescanning, PDF, CSV, and JSON reports, role-based access control, secret scanning, and AI-assisted remediation guidance extend the workflow beyond initial discovery. Teams needing authenticated API and browser coverage should consider it; organizations seeking a free plan, more than 1 target on the lower tiers, or a non-cloud deployment should look elsewhere.

Astra DAST Scanner pros and cons

  • Where it wins
    • Authenticated scanning supports login forms and TOTP-based MFA
    • Tests REST, SOAP, GraphQL, and JavaScript-heavy applications
    • CI/CD integrations, rescanning, reports, and scheduled scans
  • Where it doesn't
    • No free plan; paid access starts at $69 per month
    • Scanner Lite limits coverage to 3 monthly scans and 1 target
    • The web deployment model may not suit teams requiring another model

Astra DAST Scanner fact sheet, pricing and score →

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Last updated · How we research and update