Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

OpenText Dynamic Application Security Testing (DAST) offers enterprises a powerful, automated way to detect real-world security vulnerabilities by simulating live attacks against running applications, APIs, and services without requiring access to source code or staging environments. Tailored for DevSecOps teams, it efficiently prioritizes security issues to enable root cause analysis and faster remediation. The platform integrates effortlessly via REST APIs and features a user-friendly dashboard, supporting fully automated workflows within CI/CD pipelines for continuous security testing. OpenText DAST accelerates vulnerability discovery by tuning scans to the application environment, reducing false positives and surfacing critical risks earlier in the software development lifecycle. It supports modern web technologies including HTML5, JSON, AJAX, JavaScript, and HTTP2 to provide broad coverage across today’s digital applications. Automated features like macro generation and redundant page detection boost testing efficiency and reduce manual work. The solution offers flexible deployment choices, allowing organizations to operate on public or private clouds or on-premises systems. Backed by expert professional services, OpenText DAST helps businesses secure their software supply chains and maintain application integrity at scale.

Description

Designed for app development, Q-mast embeds security directly into your workflow to identify security, privacy, and compliance risks before the mobile app is released. With a design tailored for DevSecOps workflows, Q-mast supports continuous, automated security testing that aligns with tools like Jenkins, GitLab, and GitHub. Q-mast capabilities include automated scanning in minutes, no source code needed; analysis of compiled app binary, regardless of in-app or run-time obfuscations; precise SBOM generation and analysis for vulnerability reporting to specific library version, including embedded libraries; comprehensive static (SAST), dynamic (DAST), interactive (IAST) and forced-path execution app analysis; malicious behavior profiling, including app collusion; and checks against privacy & security standards including NIAP, NIST, MASVS.

API Access

Has API

API Access

Has API

Screenshots View All

Screenshots View All

Integrations

ArmorCode
Azure DevOps Server
Bizzy
Clarive
Conviso Platform
GitHub
GitLab
IRI FieldShield
Jenkins
Kondukto
SQUAD1
Seeker
ThreadFix

Integrations

ArmorCode
Azure DevOps Server
Bizzy
Clarive
Conviso Platform
GitHub
GitLab
IRI FieldShield
Jenkins
Kondukto
SQUAD1
Seeker
ThreadFix

Pricing Details

No price information available.
Free Trial
Free Version

Pricing Details

No price information available.
Free Trial
Free Version

Deployment

Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook

Deployment

Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook

Customer Support

Business Hours
Live Rep (24/7)
Online Support

Customer Support

Business Hours
Live Rep (24/7)
Online Support

Types of Training

Training Docs
Webinars
Live Training (Online)
In Person

Types of Training

Training Docs
Webinars
Live Training (Online)
In Person

Vendor Details

Company Name

OpenText

Founded

1991

Country

Canada

Website

www.opentext.com/products/dynamic-application-security-testing

Vendor Details

Company Name

Quokka

Founded

2011

Country

United States

Website

www.quokka.io/products/q-mast

Product Features

Application Security

Analytics / Reporting
Open Source Component Monitoring
Source Code Analysis
Third-Party Tools Integration
Training Resources
Vulnerability Detection
Vulnerability Remediation

Product Features

Mobile App Development

Access Controls / Permissions
Any App Development Language
Collaboration Tools
Compatibility Testing
Data Modeling
Debugging
Drag and Drop Editor
Enterprise Mobility (EMM/MAM)
FaceID and TouchID
For Consumer Apps
For Enterprise Apps
Integration Options
Mobile App Security
Multi-Factor Authentication (MFA)
Multiple Apps from Same Base
No Dependencies
No-Code
Reporting / Analytics
Single Sign-On (SSO)
Source Control
Visual Editor

Mobile App Testing

Functional Testing
Installation Testing
Interruption Testing
Memory Testing
Performance Testing
Usability Testing

Static Application Security Testing (SAST)

Application Security
Dashboard
Debugging
Deployment Management
IDE
Multi-Language Scanning
Real-Time Analytics
Source Code Scanning
Vulnerability Scanning

Vulnerability Scanners

Asset Discovery
Black Box Scanning
Compliance Monitoring
Continuous Monitoring
Defect Tracking
Interactive Scanning
Logging and Reporting
Network Mapping
Perimeter Scanning
Risk Analysis
Threat Intelligence
Web Inspection

Alternatives

Burp Suite Reviews

Burp Suite

PortSwigger

Alternatives

AppScan Reviews

AppScan

HCLSoftware
OWASP ZAP Reviews

OWASP ZAP

OWASP
WebScanner Reviews

WebScanner

DefenseCode