Cobalt’s Dynamic Application Security Testing (DAST) identifies vulnerabilities in web applications, scanning all domains, subdomains, and APIs in your web app. Automated, continuous security scanning ensures vulnerabilities and misconfigurations are promptly identified and your team alerted. But what happens during maintenance, high traffic, or other sensitive operations happening within your systems? We're excited to introduce a new DAST feature designed to address this: Blackout Periods.
Blackout Periods for Automated Scan Management
You have most likely faced the challenge of needing to pause DAST scans during specific times. Scanning during times like scheduled maintenance or high-traffic periods can lead to performance issues, conflicts and even inaccurate results. The Blackout Period feature allows you to schedule specific days and times for your DAST scans to be automatically paused and resumed, eliminating the need for manual intervention. Simply define your blackout periods, and our system will handle the rest.
Even More Controls Over Scans
Along with Blackout Periods, we’ve also released Scan Profiles and Partial Scans to give you more control over scans. Scan Profiles allow you to tailor a scan’s behavior to your specific needs. Partial Scans allows you to quickly scan specific parts of your applications and APIs, rather than waiting for a full scan, to focus on high-risk areas or new code changes. With these new DAST configurations, you can maintain a fast and secure development process with full control of your scanning initiatives.
Combining DAST with Pentesting
The combination of DAST and pentesting offers a multi-layered approach to security. The frequent, automated scanning of DAST provides continuous vulnerability detection, while regularly scheduled pentests offer in-depth security assessments. Combining the creative problem-solving and deep expertise of manual pentests with automated vulnerability checks gives you year round comprehensive security coverage and continuous risk reduction.
Ready to take advantage of DAST? Learn more and start using DAST today for continuous scanning as part of your pentest program