This page's audience our own tag's counts — open to see them

Period

–Visits

–Page views

–Clicks to vendors

–Time on page

–Reading now

Clicks to vendors, by tool

Top countries

Devices

– · visits, page views and clicks counted by our own tag, which counts more than our checked analytics; every figure rounded down · how we count

FortiDAST

Paid#11 of 26 in Dynamic Application Security Testing SoftwareWeb Application Security Scanners

FortiDAST: A Fortinet-aligned DAST platform with deep web, API, and CI/CD scanning. Ranked #11 of 26 in Dynamic Application Security Testing Software by our editors (8.4/10); pricing: Pricing on request; best for fortinet-aligned web application teams.

8.4/10Editor score

Visit FortiDAST

FortiDAST8.4 Visit FortiDAST

At a glance

Editor score
8.4 / 10
Pricing
Pricing on request
Best for
Fortinet-aligned web application teams
Authenticated scanning
Yes
Founded
2000
Facts checked
22 Sep 2026

Where it wins
- Authenticated scanning, API crawling, and browser event simulation
- Advanced crawling covers application branches and pathways
- CI/CD integrations include FortiDevSec, GitLab CI, and Jenkins
Where it doesn't
- Focused on web applications rather than broader application types
- Pricing requires contacting sales
- Licensing is described in blocks of 10 IP/FQDN targets

Our verdict on FortiDAST

FortiDAST is a dynamic application security testing product for development, DevOps, and security teams responsible for web applications. It performs automated black-box testing with crawlers and fuzzers, covering OWASP Top 10 and non-OWASP vulnerabilities. Its web focus includes authenticated applications, API definitions in JSON, YAML, or WADL formats, browser event simulation, scheduled recurring scans, CVSS-based threat scoring, remediation guidance, and vulnerability reporting. It is designed for teams that need recurring application security checks within development and security workflows.

Its strongest capability is the breadth of testing paths it can examine. Advanced crawling maps application branches and pathways, while authenticated scanning and browser automation support applications that require login flows or interactive behavior. API crawling extends coverage beyond standard page testing. Results include summary and detailed vulnerability reports, with CVSS-derived risk analysis to help prioritize findings. FortiDAST also supports cloud-based and proxy deployment options, giving teams a hybrid deployment model for different application environments.

FortiDAST fits organizations already working with Fortinet tools or common delivery pipelines. Integrations include FortiDevSec, GitLab CI, Jenkins, Jira, FortiWeb Cloud, and a REST API, supporting security checks, issue tracking, and automation across those systems. The pricing model is contact sales, and licensing is described in blocks of 10 IP/FQDN targets. Fortinet materials describe a FortiCloud Premium subscriber trial limited to one IP address or FQDN. Choose FortiDAST for web-focused teams that value authenticated, API, browser, and recurring scans alongside CI/CD integration. Teams needing coverage beyond web applications or a public self-serve price should consider another fit.

Your product? Our editors can test FortiDAST in depth and publish a review, labelled as paid · from $149/mo →

FortiDAST pricing

Plans Pricing on requestPaid No free plan — trial or paid only. Prices checked 22 Sep 2026.

See plans on fortinet.com

FortiDAST fact sheet

Free plan	Not verified
Paid from	Not verified
Authenticated scanning	Yes
API testing	Yes
Browser-based scanning	Yes
CI/CD integration	Yes
Deployment model	Hybrid
Included scan targets	Not verified
Deployment	Cloud, Self-hosted
Platforms	Web
Support	Docs, Community
Built for	Mid-market, Enterprise (editorial estimate)
Integrations	6 integrations: GitLab CI, Jenkins, FortiDevSec, Jira, FortiWeb Cloud, REST API
Pricing	Pricing on request
Website	fortinet.com
Facts checked	22 Sep 2026

FortiDAST integrations

FortiDAST lists 6 integrations on its own site.

GitLab CI
Jenkins
FortiDevSec
Jira
FortiWeb Cloud
REST API

Alternatives to FortiDAST

See all FortiDAST alternatives →

Also Ranked In

FortiDAST is ranked in 2 of our directories.

#9Web Application Security Scanners29 tools ranked

Used FortiDAST? Be the first to review it

The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used FortiDAST for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.

Write a reviewTwo minutes · verified accounts only · read by an editor before it appears

Reviews come only from verified accounts. Sign in or create an account first — your e-mail is never shown.

Title

Your review

0 characters · at least 80, up to 3,000

Pros (optional · one per line)

Cons (optional · one per line)

Your name (shown with your review)

Role (optional)

Company (optional)

How long have you used it?

I've used FortiDAST myself and this is my honest opinion — nobody paid or asked me to write it.

Posted from your verified account. Reviews appear after an editor reads them, usually within two working days.

Featured on iTechGuides

FortiDAST is listed in our Dynamic Application Security Testing Software directory. Add the badge to your site — it links back to this page.

<a href="https://www.itechguides.com/products/fortidast/"><img src="https://www.itechguides.com/best/badge/fortidast.svg" alt="Featured on iTechGuides" width="230" height="46"></a>

Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Last updated 7 Oct 2026 · How we research and update