- Home
- Web Application Security Scanners
- BreachLock DAST
BreachLock DAST
New York, New York, United States
What it is
BreachLock DAST is a cloud service that checks running applications from the outside by sending inputs and analyzing responses. Its listed coverage includes vulnerable applications, open-source component CVEs, and runtime vulnerabilities. The service supports API scanning and scheduled scans, with customized reports and retesting among its features. For authenticated scans, the Login Assistant Chrome extension can use a session cookie or recorded login sequence. API integrations support automated ticketing and real-time alerts through Jira, Slack, Okta, Trello, ServiceNow, Azure DevOps, and GitHub. BreachLock says its DAST and penetration-testing methods align with WASC Threat Classification v2.0 and the OWASP Top 10. The company states that it complies with the EU-U.S. Data Privacy Framework and has self-certified to the U.S. Department of Commerce. The service is available through API, extension, and web platforms. Starting plans include $2,500, paid once for a one-time security validation and $5,000 a year for an annual validation. Continuous security validation uses custom pricing; PTaaS platform use is optional. Support services depend on the package.
For and against
For
- Tests running applications from the outside.
- Supports authenticated scans through a Chrome extension.
- Integrates with ticketing and alert services.
- Includes customized reporting and retesting.
Against
- One-time validation starts at $2,500, paid once.
- Annual validation starts at $5,000 a year.
- Continuous validation uses custom pricing.
- Support services depend on the package.
The verdict
BreachLock DAST combines black-box testing with authenticated scans, integrations, reporting, and retesting. Buyers should compare the listed plan terms and package-dependent services with their assessment needs.
Who it suits
BreachLock DAST suits growing organizations and enterprises seeking application security testing and retesting. The listed integrations may suit teams that route security findings into ticketing and alert tools.
Plans and prices
1-Time Security Validation
Starts at · Suitable for point-in-time security assessments · PTaaS platform use is optional
Read 4 Oct 2026 · breachlock.com
Annual Security Validation
Starts at · Suitable for annual comprehensive security assessment coverage · PTaaS platform use is optional
Read 4 Oct 2026 · breachlock.com
Continuous Security Validation
High testing workloads · Custom package
Read 4 Oct 2026 · breachlock.com
On the record
- Authenticated scans
- BreachLock’s Login Assistant Chrome extension supports DAST authentication using a session cookie or a recorded login sequence.breachlock.com · read 4 Oct 2026
- Compliance
- BreachLock states that it complies with the EU-U.S. Data Privacy Framework and has self-certified to the U.S. Department of Commerce.breachlock.com · read 4 Oct 2026
- DAST approach
- BreachLock DAST is a black-box testing method that tests a running application from the outside by sending inputs and analyzing responses.breachlock.com · read 4 Oct 2026
- Integrations
- BreachLock lists API integrations for automated ticketing and real-time alerts with Jira, Slack, Okta, Trello, ServiceNow, Azure DevOps, and GitHub.breachlock.com · read 4 Oct 2026
- Platform support
- The company says it provides technical and security-related support, onboarding, training, and technical assistance, with package-dependent services.breachlock.com · read 4 Oct 2026
- Pricing flexibility
- BreachLock describes pricing as flexible and itemized by services such as ASM and PTaaS, and says platform use is optional.breachlock.com · read 4 Oct 2026
- Reporting and retesting
- The DAST feature list includes customized reporting and retesting.breachlock.com · read 4 Oct 2026
- Security methodology
- BreachLock says its DAST and penetration-testing methodology aligns with WASC Threat Classification v2.0 and the OWASP Top 10.breachlock.com · read 4 Oct 2026
- Vulnerability coverage
- The DAST offering lists identification of vulnerable applications, open-source component CVEs, and runtime vulnerabilities.breachlock.com · read 4 Oct 2026
- Who it is for
- BreachLock describes its mission as helping growing organizations and enterprises improve the accuracy, agility, cost-effectiveness, and scalability of offensive security.breachlock.com · read 4 Oct 2026
