Skip to content
SPECIFICTION
Get listed

DASTA-AI

dasta-ai.com

From $100/mo Free plan WebAPI
Visit dasta-ai.com
Spec score 8.9 #1 of 26 in Dynamic Application Security Testing Software

What it is

DASTA-AI is a dynamic application security testing platform for first-party web, API, and LLM applications. Its scanner crawls endpoints and forms, probes them with non-destructive payloads, and verifies findings with proof of concept. The site lists more than 40 verified checks and three policy tiers. For AI red teaming, it tests chatbots, agents, and RAG apps against OWASP LLM Top 10 attack suites, with references to the NIST AI RMF Measure function and EU AI Act Article 55. Automated risk analysis produces executive summaries and Key Risk Indicators. DASTA-AI says findings are sanitized before AI analysis and credentials are not sent to third-party services. A CLI supports interactive login or a DASTA_API_TOKEN for unattended pipelines, and CI/CD integration is listed. It runs on the web and as an API. The Demo plan is free for one scan; Personal is $100 a month for 30 scans per month. Pro has 300 scans per month and Enterprise lists unlimited scans and BYOK, but neither plan has a listed price. Red-team scans count as one scan, with judge calls capped per organization.

Spec sheet

What it does
DASTA-AI is a proprietary dynamic application security testing platform for web applications, REST APIs, GraphQL APIs, and AI-enabled systems.Read 15 Oct 2026 · cynoculist.com
Product
DASTA-AI describes itself as a dynamic application security testing platform for first-party web, API, and LLM applications.Read 9 Oct 2026 · dasta-ai.com
Privacy
The site says its de-identification pipeline sanitizes findings before AI analysis and credentials are never sent to third-party services.Read 9 Oct 2026 · dasta-ai.com
Founded
LinkedIn lists Cynoculist as founded in 2021 and privately held.Read 15 Oct 2026 · linkedin.com
Active injection
The scanner crawls endpoints and forms, sends safe test payloads, then verifies findings with proof-of-concept checks.Read 15 Oct 2026 · dasta-ai.com
AI red teaming
Its red-teaming framework tests chatbots, agents, and RAG applications with OWASP LLM Top 10 attack suites.Read 15 Oct 2026 · dasta-ai.com
API testing
The scanner tests REST and GraphQL API endpoints in the same scan session as web applications.Read 15 Oct 2026 · cynoculist.com
Authenticated scanning
DASTA-AI claims framework-agnostic authenticated scanning for protected pages behind login systems.Read 15 Oct 2026 · cynoculist.com
CI/CD integration
The CLI supports structured exit codes and JSON output for GitHub Actions, GitLab CI, Jenkins, and other runners.Read 15 Oct 2026 · cynoculist.com
CLI
A native CLI is available for local and scripted scans; the installation command is npm install -g @dasta-ai-app/cli.Read 15 Oct 2026 · dasta-ai.com
Company size
LinkedIn lists Cynoculist’s company size as 11–50 employees.Read 15 Oct 2026 · linkedin.com
Corporate identity
Cynoculist describes itself as a Delaware corporation operating from the New York/New Jersey metropolitan area.Read 15 Oct 2026 · cynoculist.com
Coverage
The site advertises 40+ verified checks and three policy tiers.Read 9 Oct 2026 · dasta-ai.com
Credential handling
The product states that application credentials are not sent to third-party AI services.Read 15 Oct 2026 · dasta-ai.com
CyberScore
Every scan receives a proprietary 0–100 CyberScore incorporating finding severity, count, and exploitability, with trend tracking.Read 15 Oct 2026 · cynoculist.com
Enterprise plan
The site lists unlimited scans and BYOK for Enterprise.Read 9 Oct 2026 · dasta-ai.com
Executive reporting
Automated analysis produces executive summaries and Key Risk Indicators intended to express business impact.Read 15 Oct 2026 · dasta-ai.com
Framework alignment
The AI testing material references NIST AI RMF Measure alignment and EU AI Act Article 55.Read 15 Oct 2026 · dasta-ai.com
Independent product claim
A Cynoculist LinkedIn post claims scans under three minutes for applications below 100 pages and four to ten minutes for complex 150-plus-page applications.Read 15 Oct 2026 · linkedin.com
Independent profile status
LinkedIn presents Cynoculist as a computer and network security company serving small and mid-sized organizations.Read 15 Oct 2026 · linkedin.com
Legal maker
The terms identify A.A. Litan LLC as the company operating Cynoculist and DASTA-AI.Read 15 Oct 2026 · cynoculist.com
Licence
DASTA-AI is proprietary; the terms reserve all service intellectual-property rights to A.A. Litan LLC and its licensors.Read 15 Oct 2026 · cynoculist.com
Limit: authorization requirement
Users must have explicit legal authority or written permission before scanning a target URL.Read 15 Oct 2026 · cynoculist.com
Limit: demo quota
The free demo is limited to one lifetime scan, so it is an evaluation allowance rather than an ongoing free tier.Read 15 Oct 2026 · cynoculist.com
Limit: legal warranty
The terms provide the service as-is and as-available, disclaim warranties, and limit liability for indirect losses.Read 15 Oct 2026 · cynoculist.com
Limit: undisclosed tiers
Pro and Enterprise prices are not published and require contacting sales.Read 15 Oct 2026 · cynoculist.com
Mobile operation
The vendor claims users can start and monitor authenticated scans from a smartphone.Read 15 Oct 2026 · cynoculist.com
Payment processing
Subscriptions use Stripe, and the privacy policy says full card numbers are not stored on the company’s servers.Read 15 Oct 2026 · cynoculist.com
Policy tiers
The site describes three policy tiers: Standard, Advanced, and an AI-focused tier covering LLM risks.Read 15 Oct 2026 · dasta-ai.com
Privacy pipeline
The vendor says its pipeline removes IP addresses, personal information, and API keys before AI analysis.Read 15 Oct 2026 · cynoculist.com
Public SDKs
The reviewed pages name a CLI but do not identify a public SDK package or client library.Read 15 Oct 2026 · cynoculist.com
Red-team scan metering
Red-team scans count as one scan and are available on Personal, Pro, and Enterprise plans; judge calls are capped per organization.Read 9 Oct 2026 · dasta-ai.com
Review availability
The opened Gartner Peer Insights AI application security market page provides category information but no DASTA-AI rating or review count.Read 15 Oct 2026 · gartner.com
Risk analysis
Automated analysis generates executive summaries and Key Risk Indicators.Read 9 Oct 2026 · dasta-ai.com
Scan throughput
Cynoculist states that the engine can complete roughly 200 pages in about two minutes.Read 15 Oct 2026 · cynoculist.com
Scanning
Its engine crawls endpoints and forms, probes them with safe, non-destructive payloads, and verifies findings with proof of concept.Read 9 Oct 2026 · dasta-ai.com
Security operations
The privacy policy says DASTA-AI processes target URLs, crawl exclusions, authentication inputs, scan findings, reports, and risk scores.Read 15 Oct 2026 · cynoculist.com
Self-hosting
The product is presented as a cloud, serverless service and the reviewed pages do not describe a self-hosted edition.Read 15 Oct 2026 · cynoculist.com
Serverless operation
The product is described as a zero-setup serverless scanner with a 15-minute recursive scan window.Read 15 Oct 2026 · cynoculist.com
Standards
The AI testing feature references alignment with the NIST AI RMF Measure function and EU AI Act Article 55.Read 9 Oct 2026 · dasta-ai.com
Support model
Cynoculist offers assessment, program-build, and ongoing-advisory engagements with human review of high-stakes decisions.Read 15 Oct 2026 · cynoculist.com
Verified checks
The product advertises more than 40 verified security checks.Read 15 Oct 2026 · dasta-ai.com
Vulnerability coverage
Its stated coverage combines OWASP Top 10, CWE Top 25, and OWASP LLM Top 10 checks.Read 15 Oct 2026 · cynoculist.com

Plans and prices

Demo Free 1 scan Read 9 Oct 2026 · dasta-ai.com
Demo Free one lifetime scan all three policy tiers · no credit card required · CyberScore report · AI executive summary · PDF export Read 15 Oct 2026 · cynoculist.com
Personal $100 a month per seat 30 scans/month · self-serve Stripe billing Read 15 Oct 2026 · dasta-ai.com
Enterprise Priced on request custom contract unlimited scans · BYOK · domain-locked invites Read 15 Oct 2026 · cynoculist.com
Pro Priced on request invoiced billing 300 scans/month · organization-level quota Read 15 Oct 2026 · cynoculist.com

Every DASTA-AI plan and price →

Strong points and limits

Strong points

  • Tests web, API, and LLM applications
  • More than 40 verified checks
  • AI red teaming uses OWASP LLM Top 10 suites
  • Demo includes one scan
  • Enterprise lists unlimited scans and BYOK

Limits

  • Personal costs $100 a month
  • Judge calls are capped per organization

Who it suits

It suits teams testing first-party web, API, or LLM applications, including those running scans through CI/CD. Organizations needing unattended pipelines can use the CLI token option.

Verdict

DASTA-AI combines application scanning with AI red teaming and offers a free one-scan Demo. Check the scan allowances and organization-level judge-call cap against your intended use.

Where Specifiction places it

Alternatives to DASTA-AIAll alternatives →