Veracode DAST

Paid#17 of 26 in Dynamic Application Security Testing Software

Veracode DAST: A managed DAST option for authenticated web and API testing behind firewalls. Ranked #17 of 26 in Dynamic Application Security Testing Software by our editors (7.8/10); pricing: Pricing on request · 14-day trial; best for teams needing managed DAST behind firewalls.

7.8/10★★★★☆Editor score

Visit Veracode

Veracode DAST7.8 Visit Veracode

At a glance

• Editor score
  7.8 / 10
• Pricing
  Pricing on request · 14-day trial
• Best for
  Teams needing managed DAST behind firewalls
• Authenticated scanning
  Yes
• Founded
  2006 · Burlington, Massachusetts, United States
• Facts checked
  22 Sep 2026

• Where it wins

  • Authenticated and unauthenticated scanning for web applications and APIs
  • Internal Scanning Management supports targets behind firewalls
  • Scheduled scans, CI/CD integration, and REST API automation

• Where it doesn't

  • Pricing is handled through sales rather than a self-serve plan
  • Internal targets require Internal Scanning Management
  • No open-source edition is offered

Our verdict on Veracode DAST

Veracode DAST is a cloud-based dynamic application security testing product for security and development teams. It analyzes running web applications and REST APIs for runtime vulnerabilities, including single-page applications, multi-page applications, and API specifications. Teams can run authenticated or unauthenticated analyses, making it suitable for environments where testing both public and protected application paths matters. The product is delivered through the Veracode Platform and is designed for organizations that want managed DAST across web and API assets.

Its strongest differentiator is coverage for applications and APIs behind firewalls through Internal Scanning Management. That makes the product relevant to teams whose testing targets are not publicly reachable. Scan behavior is configurable, with quick or full scans and invasive or non-invasive options. Scheduled and automated analyses support recurring security checks, while real-time vulnerability findings and remediation guidance help connect discovery with follow-up work. Policy management and reporting add a governance layer for teams that need to organize findings and communicate results.

Veracode DAST also fits development workflows through CI/CD pipeline integration and REST API automation. The integration model centers on the Veracode Platform and REST API, rather than an open-source distribution. Pricing is handled through sales, so the product is better suited to teams evaluating a managed security platform than buyers looking for a self-service entry plan. Choose it when authenticated testing, API analysis, internal scanning, and workflow automation are priorities. Consider another option if you specifically need an open-source edition or a self-serve purchase path.

Veracode DAST pricing

Veracode DAST fact sheet

Veracode DAST integrations

Veracode DAST lists 1 integrations on its own site.

• CI/CD webhooks

See all Veracode DAST integrations →

Alternatives to Veracode DAST

• Safeguard DASTBroad authenticated web and API scanning with paid plans starting at $9/month.9.4
• OZOWASP ZAPA capable free DAST tool with broad web, API, browser, and automation coverage.9.3
• apPosture DASTEvidence-backed DAST for developers who need deep web and API testing.9.2

See all Veracode DAST alternatives →

Featured on iTechGuides

Veracode DAST is listed in our Dynamic Application Security Testing Software directory. Add the badge to your site — it links back to this page.

<a href="https://www.itechguides.com/products/veracode-dast/"><img src="https://www.itechguides.com/best/badge/veracode-dast.svg" alt="Featured on iTechGuides" width="230" height="46"></a>

Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026

Advertiser disclosure: iTechGuides is reader-supported. We may earn a commission when you click some links. How we rank.

Last updated 7 Oct 2026 · How we research and update