No. 15 of 65 ·Software Composition Analysis Software

Veracode DAST

Web · Windows · Mac · Linux · API

Freedom report

Two barsScore 5.7

Free tierNo free tier on record
Open codeNo open-source code on record
Runs widely4 of 6 device platforms
DocumentedPlans, terms and facts published

Veracode DAST is ranked #15 of 65 in software composition analysis software on Freedom251. It runs on API, Linux, macOS, Web, Windows. A free trial is offered.

Veracode DAST plans and pricing

All plans

Veracode DAST Not published Web applications and APIs · Request a live demo · Contact Us veracode.com · 1 Oct 2026

Compared on software composition analysis software

Authenticated scanning: Yes
API testing: Yes
Browser-based scanning: Yes
CI/CD integration: Yes
Deployment model: hybrid

Best Veracode DAST alternatives

See all 12

Two bars Snyk Open Source Free tier No. 1$25/mo6.7 Two bars Sonatype Nexus Repository Free tier No. 2$162.50/mo6.7 Two bars Accessibility Test Framework for Android Free tier No. 3Free6.6 Two bars Docker Desktop Free tier No. 4$9/mo6.6 Two bars Endor Labs Free tier No. 5Free6.6 Two bars Socket Free tier No. 6$25/mo6.6

The record

Purpose: Veracode DAST is a Dynamic Application Security Testing solution for automated, scalable scanning of web applications and REST APIs.
Runtime testing: It runs security tests against live web applications and APIs, including authenticated or unauthenticated analyses and assets behind firewalls.
False positives: Veracode states that DAST has a false positive rate below 5%.
Scan configuration: Scans can be automated or scheduled with configurable scan depth, speed and accuracy.
Scale: The cloud-native engine is designed to scan hundreds of assets across environments, including applications behind firewalls.
API security: DAST probes API endpoints and entire workflows to detect vulnerabilities and validate business logic.
Ticketing integrations: The integration documentation describes ticketing workflows for Jira, DefectDojo and Asana.
Trial: Veracode offers a free 14-day DAST trial through the Veracode Platform.
Scan modes: A Quick scan takes approximately three to five minutes and runs non-invasive scanners for basic misconfigurations.
API specification limit: API scans require an OpenAPI 2.0 or 3.0 specification in JSON or YAML; HAR files are not supported.
Region limit: The United States Federal Region is not supported for DAST.
Security compliance: Veracode reports SOC 2 Type II attestation and a FedRAMP Moderate Authority to Operate for its cloud-based application security platform.
Support: Veracode directs users to Technical Support for help with DAST integrations.
Founded: 2006

Where it ranks on Freedom251

Best Software Composition Analysis Software in 2026#15 of 65
Best Static Analysis Tools in 2026#16 of 39
Best Dynamic Application Security Testing Software in 2026#6 of 28
Best SAST Tools in 2026#4 of 26
Best DevSecOps Platforms in 2026#11 of 26
Best Dependency Management Software in 2026#12 of 25
Best Static Application Security Testing Software in 2026#8 of 25
Best Interactive Application Security Testing Software in 2026#7 of 15

Is Veracode DAST yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote Veracode DAST

Sources

docs.veracode.com/r/Dynamic_Analysis· checked 1 Oct 2026
veracode.com/products/dynamic-analysis-dast· checked 1 Oct 2026
docs.veracode.com/r/DAST_integrations· checked 1 Oct 2026
docs.veracode.com/r/DAST_quickstart· checked 1 Oct 2026
veracode.com/about/certifications· checked 1 Oct 2026