Veracode Dynamic Analysis

Veracode Dynamic Analysis is a Dynamic Application Security Testing (DAST) solution that delivers an automated and scalable dynamic scanning capability that enables broad coverage at speed. You can scan both web applications and API specifications.

You can use Dynamic Analysis to:

• Run security tests against live web applications in the late stages of development, such as test or quality assurance, or applications in production.
• Use API Scanning to test the security of endpoints in API specifications.

Supported Technologies

• Web applications that you access using a browser-based user interface
• Web applications built using Java, ASP, ASP.NET, Ruby on Rails, JavaScript, Perl, PHP, Python, or similar languages
• Single-page (SPA) and HTML5 applications
• Web applications built with Angular, React, and Vue.js frameworks

Unsupported Technologies

• REST and SOAP APIs are not directly accessed using a user interface
• Sites that have MFA and 2FA that you cannot turn off for testing because of company policy
• Silverlight, Java applets, and ActiveX control technologies
• Sites with complex business logic that are unsuitable for automation using crawl scripts
• Sites that only support connection via TLS 1.0