Tenable Web App Scanning is an advanced DAST (Dynamic Application Security Testing) tool used to automatically test the security of live web applications and APIs from the public internet. The scanner simulates the behavior of a real hacker by mapping pages and forms, and then examines the code and components used for vulnerabilities.
Deployment model: Cloud (SaaS) and on-premises (integrated with Tenable Security Center)
Automatically analyze the structure and content of web applications to accelerate the preparation of comprehensive security assessments.
Monitor application security through dashboards that present vulnerabilities, risk levels, OWASP Top 10 issues, and changes over time.
Configure the scope of each scan by excluding selected URLs, file extensions, or sensitive parts of an application. This helps reduce the impact of scanning on application performance and availability.
The system supports a wide range of integrations, allowing each new version of the application to be automatically tested at every stage of development
