BreachLock DAST

What BreachLock DAST is

BreachLock DAST is a cloud service that checks running applications from the outside. It uses a black-box approach: it sends inputs to an application and analyzes the responses. Its listed coverage includes identifying vulnerable applications, CVEs in open-source components, and runtime vulnerabilities. The service supports API scanning and scheduled scans, and includes compliance reports, customized reporting, and retesting.

For authenticated scans, BreachLock’s Login Assistant Chrome extension can use a session cookie or a recorded login sequence. API integrations support automated ticketing and real-time alerts through Jira, Slack, Okta, Trello, ServiceNow, Azure DevOps, and GitHub. BreachLock says its DAST and penetration-testing methodology aligns with WASC Threat Classification v2.0 and the OWASP Top 10. The company states that it complies with the EU-U.S. Data Privacy Framework and has self-certified to the U.S. Department of Commerce.

The service is available through API, extension, and web platforms. Pricing is on request and described as flexible, with services itemized; platform use is optional. Listed starting plans include a one-time assessment for $2,500, paid once and annual coverage for $5,000 a year. Continuous validation uses custom pricing. Support, onboarding, training, and technical assistance depend on the package.

Who it suits

BreachLock DAST suits growing organizations and enterprises seeking application security assessments, including API and scheduled scanning. Its point-in-time, annual, and custom continuous validation options accommodate different assessment workloads, and PTaaS platform use is optional.

Limits

The 1-Time Security Validation plan starts at $2,500, paid once and is intended for point-in-time assessments. Annual Security Validation starts at $5,000 a year; continuous validation uses custom pricing, and PTaaS platform use is optional.

Getting started

1. Visit the BreachLock DAST website.
2. Choose a one-time, annual, or custom continuous validation package.
3. Ask BreachLock for pricing and package details.
4. Use the cloud service through its API, extension, or web platform.
5. For authenticated scans, configure the Login Assistant Chrome extension with a session cookie or recorded login sequence.

Verdict

Choose BreachLock DAST if you need external application testing with API scanning, scheduled scans, reporting, and retesting. Its one-time and annual starting plans cover defined assessment intervals; organizations with high testing workloads can ask about custom continuous validation. Check the package details for support and other included services.