Tools/BrightSec
Bright Security
DAST (Dynamic Application Security Testing) — scans a running application/API from the outside (fuzzing endpoints, auth flows, injection attempts) rather than reading source, catching runtime/config issues that Snyk's SAST can't see because the code looks fine statically. Usually the last security gate, run against a staging deploy in the GitHub_Actions pipeline before production release.