DAST (Dynamic Application Security Testing)

A security testing method that analyzes a running application by simulating attacks from the outside. DAST detects exploitable vulnerabilities in real conditions: misconfigurations, missing headers, injections. It complements SAST by finding flaws that are only visible at runtime.