Request for Information (RFI) -- DAST Tool

security testing (SAST) tool called Checkmarx and the software composition analysis (SCA) tool called Black Duck. Both of these solutions are white box testing tools that analyze the application�s code as it's being built. WAST is looking to procure a Dynamic Application Security Testing (DAST) sol

ution to better analyze SSA applications, to bolster FISMA metrics, and to satisfy the requirements from multiple external audits and assessments. The DAST tool would scan applications as they are executed to identify exploits that can only