QFinch DAST assesses authorised websites through crawling, browser execution, passive analysis and bounded active checks. Results retain the tested target, coverage, supporting evidence and report artifacts.
What you can review
- Discovered pages and reachable application surface.
- Security headers, transport and browser-observable controls.
- Scanner findings from supported passive and active checks.
- Lightweight performance and accessibility context for the home page when enabled.
- Screenshots, affected URLs, descriptions and remediation guidance where available.
- Scan lifecycle, warnings and incomplete-coverage states.
Assessment profiles
Choose depth according to authorization, target sensitivity and time. Authenticated and API assessments require explicit configuration and are currently controlled-preview workflows.
Important boundary
DAST is one part of assurance. It does not guarantee complete coverage and does not replace a scoped human penetration test—especially for business-logic and complex authorization weaknesses.
CTA: Add an authorised website