Detect application vulnerabilities with GitLab’s browser-based DAST

This post details the deprecation and removal of proxy-based DAST in favor of a new, proprietary browser-based DAST analyzer. It explains the technical reasons for the shift, including the limitations of legacy crawlers for modern web applications. It provides migration guidance for users of proxy-based DAST, including configuration recommendations and the process for on-demand scans. The post also outlines how the new DAST works, including its authentication, discovery, passive, and active check phases, and highlights its benefits such as simulating real-world attacks and providing high-confidence findings.