Security testing
DAST
DAST tests a running application from the outside to find security issues that only appear when routes, forms, authentication, and runtime behavior are exercised.
What it means
DAST, or Dynamic Application Security Testing, checks a running application. It looks from the outside, exercises live behavior, and can reveal issues that static source analysis cannot see.
Why it matters for AI-written code
AI-generated code can look safe in a diff and still fail at runtime. Routing, authentication, form handling, and server configuration often need a running application before the risk becomes visible.
Guard and Fleet context
Guard keeps DAST tied to consent and project scope. When a live website is connected, runtime checks become part of the maintained health picture rather than a separate one-off scan.
How Enji Guard helps
Guard links live findings back to repository work, opens clear issues, and keeps active testing inside the same approval and audit model as code-side improvements.
Enji Guard