Skip to main content

How can we help?

Already a customer? Sign in to access additional content.

What do you recommend for open-source DAST or SAST tools?

  • Updated

For an open-source DAST tool, we'd recommend OWASP ZAP. You can find additional DAST tools in this link here. 

  • The scan frequency is based on your choice which can be set to monthly, quarterly, or annually. As a standard best practice, we'd recommend setting the frequency as often as possible.

For an open-source SAST tool, we'd recommend SonarCloud. You can find additional SAST tools under this link here. 

Related articles

Was this article helpful?
0 out of 0 found this helpful

Featured articles

  • Do I have to get SOC 2 Type 1 before pursuing a SOC 2 Type 2?

    You will not need to pursue SOC 2 Type 1 before getting a SOC 2 Type 2 report because they are stand-alone reports. A...

    Read More

  • What is SOC 2?

    SOC 2 is a report on an organization’s controls relevant to security, availability, processing integrity, confidentia...

    Read More