SMusiol193826 (Community Member) asked a question.
Scope of the DAST test
Hello Team,
could you post me to the article that describes what kind of tests DAST scans perform? Are these only passive tests or does the tool try to inject data into forms as well.
Additionally I would like to know what would be the appropriate length of the test, or how to calculate it. I have a shared environment on which different kind of tests will run so I have to know how to properly configure the scan so it will not affect other teams that use the instance.
.png){kind=logo}
Hello @SMusiol193826 (Community Member) ,
Veracode has a Help Document, Getting Started with Veracode Dynamic Analysis that has a lot of information on that product.
In regards to how long a DA scan can take, there are a lot of factors that go into the length of time including how many URLs are being scanned,, if there are any issues with accessing the URLs, etc.
If you have a Customer Service Manager (CSM), they can be a good resource for additional questions as well.
Jason
Veracode Support Engineer