Skip to content
SPECIFICTION
Get listed

Safeguard DAST

safeguard.sh

WebSelf-hosted
Visit safeguard.sh
Spec score 7.1 #17 of 26 in Dynamic Application Security Testing Software

What it is

Safeguard DAST dynamically tests running applications, reporting findings alongside how much discovered attack surface the scan reached. Its graph-aware crawler uses Safeguard SAST call graphs, route tables, and authentication middleware. Endpoint inventories can come from OpenAPI, GraphQL introspection, gRPC reflection, and live traffic samples. Targeted payloads cover SQL, OS command, SSRF, XSS, and deserialization sink classes, with parameter shapes informing generation. Authenticated flows include form authentication, OAuth 2.0 refresh, JWT bearer, session cookies, SAML, and mutual TLS. Listed scan modes are Fast, Deep, Progressive, and Reconnaissance; Reconnaissance sends no probes. Coverage Score explains reached surface and stopping reasons, while stated coverage includes the OWASP Top 10 and API Top 10. JavaScript, JSON, and source maps are analyzed for exposed credentials, routes, endpoints, cloud references, personal data, configuration, and comments. Secret samples are redacted, ownership verification gates requests, and scope, rate, and budget limits constrain them. It supports self-hosted and web use, hybrid deployment, CI integrations, pull-request and IDE workflows, and listed infrastructure analyses. Pricing is freemium: Free plan; paid from $9/mo.

Spec sheet

Purpose
Safeguard DAST dynamically tests running applications and reports attack surface coverage alongside findings.Read 7 Oct 2026 · safeguard.sh
Deployment
Internal-network and on-prem scanning is supported through a self-hosted scanner pod with mTLS to the control plane.Read 7 Oct 2026 · safeguard.sh
Integrations
The listed CI integrations are GitHub Actions, GitLab CI, Buildkite, CircleCI and Jenkins.Read 7 Oct 2026 · safeguard.sh
Headquarters
Dublin, California, United StatesRead 28 Sep 2026 · safeguard.sh
Founded
2026Read 28 Sep 2026 · safeguard.sh
Maker
The DAST page footer identifies the company as Safeguard.sh Inc and lists its headquarters at 7779 Topaz Circle, Dublin, California 94568, United States.Read 7 Oct 2026 · safeguard.sh
API discovery
Endpoint discovery draws on OpenAPI, GraphQL introspection, gRPC reflection, and live traffic samples.Read 7 Oct 2026 · safeguard.sh
Authentication
Supported authenticated flows include form auth, OAuth 2.0 with refresh, JWT bearer, session cookies, SAML, and mutual TLS.Read 7 Oct 2026 · safeguard.sh
CI integrations
The DAST page lists GitHub Actions, GitLab CI, Buildkite, CircleCI, and Jenkins integrations.Read 7 Oct 2026 · safeguard.sh
Coverage
The product page states full OWASP Top 10 and API Top 10 coverage.Read 7 Oct 2026 · safeguard.sh
Coverage reporting
A Coverage Score reports how much discovered attack surface the scan reached and why it stopped.Read 7 Oct 2026 · safeguard.sh
Delta scans
Subsequent scans focus on changes from the last clean run, and the page describes nightly delta scans as taking minutes.Read 7 Oct 2026 · safeguard.sh
Endpoint discovery
It builds endpoint inventories from OpenAPI, GraphQL introspection, gRPC reflection and live traffic samples.Read 7 Oct 2026 · safeguard.sh
Findings
Findings can include the function and file reached by a request, the patch that introduced a regression, and a static call-graph annotation.Read 7 Oct 2026 · safeguard.sh
Findings workflow
DAST findings join the same ranked triage queue as Safeguard SAST and SCA results, with code-level context attached.Read 7 Oct 2026 · safeguard.sh
Graph-aware crawling
The scanner uses Safeguard SAST call graphs, route tables, and authentication middleware to guide its crawl.Read 7 Oct 2026 · safeguard.sh
JavaScript analysis
DAST analyzes served JavaScript, JSON, and source maps for exposed credentials, API endpoints, routes, cloud-storage references, personal data, configuration, and developer comments.Read 7 Oct 2026 · safeguard.sh
Pricing
The DAST page offers a demo and a “Try It” button but does not state a DAST-specific price.Read 7 Oct 2026 · safeguard.sh
Scan modes
The launch page lists Fast, Deep, Progressive, and Reconnaissance scan modes, with Reconnaissance sending no probes.Read 7 Oct 2026 · safeguard.sh
Scanning
It generates targeted SQL, OS command, SSRF, XSS and deserialization payloads based on expected parameter shapes.Read 7 Oct 2026 · safeguard.sh
Secret handling
Reported secret samples are redacted at detection time, and the launch page says raw credentials are not stored or returned.Read 7 Oct 2026 · safeguard.sh
Target authorization
Ownership verification is required before requests are sent, and requests are gated by scope, rate, and budget limits.Read 7 Oct 2026 · safeguard.sh
Targeted fuzzing
It generates payloads for sink classes including SQL, OS command, SSRF, XSS, and deserialization, informed by expected parameter shapes.Read 7 Oct 2026 · safeguard.sh
Triage
DAST findings join SAST and SCA results in a shared ranked queue, with cross-links between runtime hits and related SAST findings.Read 7 Oct 2026 · safeguard.sh
Vulnerability coverage
The product states coverage for the OWASP Top 10 and API Top 10.Read 7 Oct 2026 · safeguard.sh

Strong points and limits

Strong points

  • Graph-aware crawling uses call graphs and route data
  • Authenticated flows include OAuth, JWT, SAML, and mTLS
  • Coverage Score explains reached surface and stopping reasons
  • Reconnaissance mode sends no probes
  • Supports self-hosted internal-network scanning

Limits

  • No DAST-specific price is stated
  • Free trial is not offered
  • Requests require ownership verification and limits
  • Raw credentials are not stored or returned

Who it suits

It suits application-security teams needing authenticated web and API scanning, CI integrations, and shared SAST/SCA triage. Hybrid and self-hosted deployment also fits internal-network or on-premises scanning.

Verdict

Safeguard DAST combines guided dynamic scanning, broad endpoint discovery, and multiple authenticated-flow options. Its shared triage, deployment choices, and CI integrations are useful when runtime findings must connect with code and infrastructure context.

Where Specifiction places it

Alternatives to Safeguard DASTAll alternatives →