# Dynamic Application Security Testing (DAST)

> Master Dynamic Application Security Testing (DAST) to identify runtime vulnerabilities in web applications, triage scanner findings, and integrate security into the SDLC.

Canonical: https://codelivly.com/rooms/dynamic-application-security-testing-dast
Last updated: 2026-10-29

| | |
|---|---|
| Level | Intermediate |
| Category | Cybersecurity |
| Lessons | 5 |
| Estimated time | 30 min |
| XP | 100 |

This module provides a comprehensive guide to Dynamic Application Security Testing (DAST). You will learn how DAST fits into the Secure Software Development Lifecycle (SSDLC), how to configure and execute automated DAST scanners safely, and how to interpret, triage, and validate findings to eliminate false positives. Finally, you will explore strategies for integrating DAST into CI/CD pipelines to ensure continuous security validation without slowing down development velocity.

## Lessons

1. What Is DAST and Why Does It Matter (30 min)
2. SAST vs. DAST vs. IAST: The Application Security Testing Triad (30 min)
3. Scanning Web Apps with OWASP ZAP (30 min)
4. Authenticated and API Scanning (30 min)
5. Guided Lab: Running a ZAP Baseline Scan in CI (30 min)

## Related

- [Learning path: Application Security Testing in Pipelines](https://codelivly.com/learning-paths/application-security-testing-in-pipelines)
- [All rooms](https://codelivly.com/rooms)