- Home
- Dynamic Application Security Testing Software
- Astra DAST Scanner
Astra DAST Scanner
Claymont, Delaware, USA
What it is
Astra DAST Scanner is a cloud-based dynamic vulnerability scanner for web applications, APIs, cloud components, and user roles. Its coverage includes more than 15,000 test cases across OWASP Top 10, ASVS, NIST, SANS, CVEs, and issues such as XSS, SQLi, IDOR, CSRF, and SSRF. Authenticated scanning supports login forms, TOTP-based MFA through custom scripts, static OTPs, test accounts without MFA, and manual authentication headers. It scans REST, SOAP, and GraphQL APIs with or without authentication, and can build an API inventory from DAST scans. Teams can schedule scans or trigger them after deployment, configure headers, timeouts, and user agents, and connect GitHub Actions, GitLab CI, Jenkins, Bitbucket, Slack, and JIRA. Reports for engineering, management, and external stakeholders export as PDF, CSV, or JSON. Users can rescan fixed vulnerabilities individually and access remediation guidance. Scanner Lite costs $69 a month for one target and three monthly scans; the Scanner plan costs $199 a month for one target and unlimited scans. A full-week trial costs $7, paid once.
For and against
For
- Covers more than 15,000 test cases
- Scans REST, SOAP, and GraphQL APIs
- Offers authenticated scanning options
- Reports export as PDF, CSV, or JSON
Against
- No free plan is listed
- Scanner Lite allows three scans per month
- Scanner Lite and Scanner each cover one target
The verdict
Astra DAST Scanner covers web, API, and cloud-related testing with authenticated scans and named integrations. Its plans differ in scan volume and target capacity, and there is no free plan.
Who it suits
It suits teams assessing vulnerabilities in web applications and APIs, including authenticated environments. Its CI/CD integrations and exportable reports may serve development, security, and management workflows.
Plans and prices
$7 trial
Full platform access · No credit card commitment · Cancel anytime
Read 7 Oct 2026 · getastra.com
Scanner Lite
1 target · 3 vulnerability scans/month · 15,000+ tests · Authenticated scans
Read 7 Oct 2026 · getastra.com
Scanner Lite
1 target · 3 vulnerability scans/month · 15,000+ tests · Authenticated scans
Read 7 Oct 2026 · getastra.com
Scanner
1 target · Unlimited vulnerability scans · Unlimited integrations · Four expert-vetted scans on annual billing
Read 7 Oct 2026 · getastra.com
Scanner
1 target · Unlimited vulnerability scans · Unlimited integrations · Four expert-vetted scans
Read 7 Oct 2026 · getastra.com
Scanner Agency
5-target pool · Unlimited scans · Targets can be changed after a 30-day cooling period · Account manager
Read 7 Oct 2026 · getastra.com
Scanner Agency
5-target pool · Unlimited scans · Targets can be changed after a 30-day cooling period · Account manager
Read 7 Oct 2026 · getastra.com
On the record
- API scanning
- It scans REST, SOAP, and GraphQL APIs with authenticated or unauthenticated scans and can create an API inventory from DAST scans.getastra.com · read 7 Oct 2026
- Authentication
- Authenticated scanning supports login forms, TOTP-based MFA through custom login scripts, static OTPs, test accounts without MFA, and manual authentication headers.getastra.com · read 7 Oct 2026
- Compliance
- Astra says the scanner identifies vulnerabilities affecting ISO 27001, HIPAA, SOC 2, and GDPR compliance and shows how detected issues affect compliance status.getastra.com · read 7 Oct 2026
- Continuous scanning
- Users can schedule scans at a custom frequency or trigger scans after deployment, and can configure headers, timeouts, and user agents.getastra.com · read 7 Oct 2026
- Coverage
- The scanner includes more than 15,000 test cases covering standards such as OWASP Top 10, ASVS, NIST, and SANS, as well as CVEs and vulnerabilities including XSS, SQLi, IDOR, CSRF, and SSRF.getastra.com · read 7 Oct 2026
- Integrations
- The product page names GitHub Actions, GitLab CI, Jenkins, and Bitbucket for CI/CD, plus Slack alerts and JIRA ticket creation.getastra.com · read 7 Oct 2026
- Plan limits
- Scanner Lite includes three scans per month for one target and one integration; Scanner includes unlimited scans for one target, while Scanner Agency offers five target slots with a 30-day cooling period.getastra.com · read 7 Oct 2026
- Product
- Astra DAST is a dynamic vulnerability scanner that analyzes web applications, APIs, cloud components, and user roles.getastra.com · read 7 Oct 2026
- Remediation
- The scanner can rescan fixed vulnerabilities individually and provides remediation guidance with an integrated AI bot for remediation and reproduction questions.getastra.com · read 7 Oct 2026
- Reporting
- Reports for engineering, management, and external stakeholders can be exported as PDF, CSV, or JSON.getastra.com · read 7 Oct 2026
- Scan safety
- Astra says its DAST scanner does not perform stress testing that could cause denial of service and lets users control crawl and scan frequency.getastra.com · read 7 Oct 2026
- Trust Center
- The product includes a shareable Trust Center that can show security posture, compliance, pentest, and vulnerability data.getastra.com · read 7 Oct 2026
