Skip to content
SPECIFICTION
Get listed

Offensive360 DAST

offensive360.com

Free trial WebAPISelf-hosted
Visit offensive360.com
Spec score 7.6 #13 of 26 in Dynamic Application Security Testing Software

Spec sheet

Purpose
DAST tests live web applications and APIs using a headless browser, more than 40 active exploit checks, and 19 passive analyzers.Read 8 Oct 2026 · offensive360.com
Deployment
DAST is available as part of a virtual appliance delivered as OVA or Azure VHD, can run fully offline in air-gapped networks, and is also offered as cloud SaaS.Read 8 Oct 2026 · offensive360.com
Headquarters
Amsterdam, The NetherlandsRead 28 Sep 2026 · offensive360.com
AI application testing
The product tests AI applications against the OWASP Top 10 for LLM Applications (2025), including prompt injection, jailbreaks, and system prompt leakage.Read 8 Oct 2026 · offensive360.com
Authenticated scans
Supports form-based authentication, token and cookie sessions, multi-step logins, and role-based testing.Read 8 Oct 2026 · offensive360.com
Company background
Offensive360 says it was founded by offensive security professionals and builds its scanning engines in-house.Read 8 Oct 2026 · offensive360.com
Data controls
The security page states TLS 1.2 or higher in transit, encryption at rest for stored artefacts, role-based access, scoped API tokens, and logged customer access.Read 8 Oct 2026 · offensive360.com
Evaluation
The pricing page offers free scans for evaluation and a personalized demo; it does not specify a trial duration.Read 8 Oct 2026 · offensive360.com
Evidence and validation
Findings include request and response evidence, severity, CWE and OWASP mapping, remediation steps, and post-scan validation.Read 8 Oct 2026 · offensive360.com
Free tier limit
The open-source program provides free SAST only; DAST is listed as a commercial product, so the page does not describe a free DAST plan.Read 8 Oct 2026 · offensive360.com
Integration example
The DAST page says syslog forwarding was validated end to end with FortiSIEM.Read 8 Oct 2026 · offensive360.com
Reports and automation
DAST offers four report templates, five export formats, syslog forwarding, and a REST API for pipelines and automation.Read 8 Oct 2026 · offensive360.com
Safe scanning
Safe mode is on by default with non-destructive validation payloads, and denial-of-service techniques are force-disabled across every mode.Read 8 Oct 2026 · offensive360.com
Security certification
O360 B.V. says it operates an information security management system certified against ISO/IEC 27001.Read 8 Oct 2026 · offensive360.com
Vulnerability coverage
Checks include injection, cross-site scripting, authentication, access control, SSRF, API flaws, and known CVEs in listed technologies and frameworks.Read 8 Oct 2026 · offensive360.com

Plans and prices

Application Security Price not published Custom annual license SAST and DAST product options · supported languages and frameworks · scan scope agreed in proposal · support options Read 8 Oct 2026 · offensive360.com
On-Premise Price not published Custom annual license Selected security products · OVA virtual appliance · optional air-gapped deployment · infrastructure deployment · support terms and service levels in proposal Read 8 Oct 2026 · offensive360.com

Every Offensive360 DAST plan and price →

Where Specifiction places it

Alternatives to Offensive360 DASTAll alternatives →