- Home
- Dynamic Application Security Testing Software
- Offensive360 DAST
On the recordRead 8 Oct 202615 facts
Offensive360 DAST
Amsterdam, The Netherlands
Plans and prices
Application Security
Priced on request
SAST and DAST product options · supported languages and frameworks · scan scope agreed in proposal · support options
Read 8 Oct 2026 · offensive360.com
On-Premise
Priced on request
Selected security products · OVA virtual appliance · optional air-gapped deployment · infrastructure deployment
Read 8 Oct 2026 · offensive360.com
On the record
- AI application testing
- The product tests AI applications against the OWASP Top 10 for LLM Applications (2025), including prompt injection, jailbreaks, and system prompt leakage.offensive360.com · read 8 Oct 2026
- Authenticated scans
- Supports form-based authentication, token and cookie sessions, multi-step logins, and role-based testing.offensive360.com · read 8 Oct 2026
- Company background
- Offensive360 says it was founded by offensive security professionals and builds its scanning engines in-house.offensive360.com · read 8 Oct 2026
- Data controls
- The security page states TLS 1.2 or higher in transit, encryption at rest for stored artefacts, role-based access, scoped API tokens, and logged customer access.offensive360.com · read 8 Oct 2026
- Deployment
- DAST is available as part of a virtual appliance delivered as OVA or Azure VHD, can run fully offline in air-gapped networks, and is also offered as cloud SaaS.offensive360.com · read 8 Oct 2026
- Evaluation
- The pricing page offers free scans for evaluation and a personalized demo; it does not specify a trial duration.offensive360.com · read 8 Oct 2026
- Evidence and validation
- Findings include request and response evidence, severity, CWE and OWASP mapping, remediation steps, and post-scan validation.offensive360.com · read 8 Oct 2026
- Free tier limit
- The open-source program provides free SAST only; DAST is listed as a commercial product, so the page does not describe a free DAST plan.offensive360.com · read 8 Oct 2026
- Integration example
- The DAST page says syslog forwarding was validated end to end with FortiSIEM.offensive360.com · read 8 Oct 2026
- Purpose
- DAST tests live web applications and APIs using a headless browser, more than 40 active exploit checks, and 19 passive analyzers.offensive360.com · read 8 Oct 2026
- Reports and automation
- DAST offers four report templates, five export formats, syslog forwarding, and a REST API for pipelines and automation.offensive360.com · read 8 Oct 2026
- Safe scanning
- Safe mode is on by default with non-destructive validation payloads, and denial-of-service techniques are force-disabled across every mode.offensive360.com · read 8 Oct 2026
- Security certification
- O360 B.V. says it operates an information security management system certified against ISO/IEC 27001.offensive360.com · read 8 Oct 2026
- Vulnerability coverage
- Checks include injection, cross-site scripting, authentication, access control, SSRF, API flaws, and known CVEs in listed technologies and frameworks.offensive360.com · read 8 Oct 2026
