DAST

DAST tests a running application from the outside to find security issues that only appear when routes, forms, authentication, and runtime behavior are exercised.

What it means

DAST, or Dynamic Application Security Testing, checks a running application. It looks from the outside, exercises live behavior, and can reveal issues that static source analysis cannot see.

Why it matters for AI-written code

AI-generated code can look safe in a diff and still fail at runtime. Routing, authentication, form handling, and server configuration often need a running application before the risk becomes visible.

Guard and Fleet context

Guard keeps DAST tied to consent and project scope. When a live website is connected, runtime checks become part of the maintained health picture rather than a separate one-off scan.

How Enji Guard helps

Guard links live findings back to repository work, opens clear issues, and keeps active testing inside the same approval and audit model as code-side improvements.