Indusface WAS Platform

DAST stands for Dynamic Application Security Testing. This is an automated tool that simulates attacks to identify security vulnerabilities in web applications during runtime by simulating external attacks.

Yes. One of the modules in Indusface is a DAST scanner that helps you find application and infrastructure vulnerabilities. Indusface WAS also includes a malware scanner that helps you check for defacements.

Indusface WAS crawls web applications, identifies attack surfaces, and simulates malicious requests to detect vulnerabilities such as SQLi, XSS, broken authentication and so on.

Yes. Indusface WAS has support for graybox scans that allow you to scan the applications using various credentials including user, admin and so on.

In all the paid plans, you have access to unlimited scans. You can even use the feature to enable daily malware, application and infrastructure scans.

Web application scan is focused on identifying vulnerabilities in the application while network scan is used to find vulnerabilities in network devices, servers, and other infrastructure components. Indusface WAS provides comprehensive application scan. That said, since Indusface is an application security company, the network scan in Indusface WAS is limited to only the server where the application is hosted.

Indusface WAS has a unique feature for requesting "proof of vulnerability" with the click of a button in the portal. On receiving the request the security research team does a manual verfiication of the vulnerability and attaches screenshots so that your developers can reproduce the vulnerability.

While the automated scan is comparable and in some cases better than most DAST scanners in the market, in the premium plan, a penetration test is bundled through which you can uncover all the vulnerabilities including ones on business logic.