Detect application vulnerabilities with GitLab’s browser-based DAST

What this post added

This post announces the removal of proxy-based DAST in GitLab 17.0 and its replacement with the proprietary browser-based DAST tool. It details the migration process, configuration steps for automated and on-demand scans, and explains how the new DAST works, including its authentication, discovery, passive, and active checks. It also highlights the benefits of the new DAST, such as simulating real-world hacking, producing high-confidence findings, and covering OWASP Top 10 vulnerabilities.