DAST Integrations — Web Application Scanners

Industry-standard vulnerability scanner. Covers network hosts, ports, services, authenticated local checks, web application scanning, and CIS/DISA STIG compliance auditing.

Qualys Vulnerability Management, Detection and Response — covers network assets, web application DAST, and policy compliance. All POD regions: US, EU, India, Canada, UK, Australia.

Outpost 24 vulnerability assessment findings covering network and web application vulnerabilities. XML import.

Intruder continuous vulnerability scanner findings covering network exposure and web application issues. CSV import.

PortSwigger Burp Suite Enterprise Edition web application DAST. XML and API import with full request/response evidence, OWASP classification, and issue confidence mapping.

Acunetix DAST web vulnerability scanner. XML and JSON import covering SQLi, XSS, SSRF, authentication bypass, and 7,000+ web vulnerability checks.

Detectify continuous DAST and external attack surface management via API. Covers web application vulnerabilities and exposed assets across your domains.

HCL AppScan Standard desktop DAST scanner — dynamic web application testing results imported via the scanner’s XML report export, with full test HTTP traffic evidence.

HCL AppScan on Cloud (ASoC) — dynamic web application testing and static source code analysis imported over the ASoC API with an API key. XML report import also supported.

HCL AppScan 360 self-managed platform — DAST and SAST results imported over the same AppScan REST API, pointed at your own AppScan 360 deployment.

OWASP Zed Attack Proxy open-source DAST findings. XML import covering active and passive scan results with OWASP classification.

Invicti (formerly Netsparker) web application security scanner findings. XML and JSON import with proof-based scanning results and CVSS mapping.

OpenText (HP) WebInspect dynamic application security testing findings. XML import covering web vulnerabilities, authentication flaws, and business logic issues.

Rapid7 AppSpider DAST scan results. XML import with full vulnerability detail, attack traffic evidence, and remediation guidance.

Nikto open-source web server scanner findings. XML import covering misconfigurations, dangerous files, outdated software, and server-level vulnerabilities.

w3af open-source web application attack and audit framework findings. XML import with OWASP-classified vulnerabilities.

WPScan WordPress vulnerability scanner findings. JSON import covering plugin, theme, and core vulnerabilities in WordPress installations.

Qualys SSL Labs API for TLS/SSL configuration assessment. Identifies weak cipher suites, expired certificates, BEAST/POODLE/CRIME exposure, and insecure protocol versions.

Barracuda web application scanner findings imported via CSV export with CWE and CVSS mapping.