fAST Dynamic checkers

The fAST Dynamic scan engine uses multiple checkers to detect vulnerabilities in the target web application or API.

Checkers are either active or passive:

• Active checkers directly interact with the target website or API. They will craft and send attack payloads and then observe the target web application or API's behavior in order to identify security concerns.
• To enable active checkers in scans, you must select the Perform Active Attacks checkbox when creating the DAST project. See Create and test DAST projects for web applications and APIs.
• Passive checkers do not directly interact with the target web application or API. They observe requests and responses sent to and from the fAST Dynamic scan engine.

Checkers in DAST scans

This table lists all checkers used in DAST scans by fAST Dynamic.

Each checker is assigned a unique code. To enable or disable checkers from DAST scans, add or remove checker codes from your scan-settings.json configuration file. See Fine-tune a DAST profile for more information.

_{* Common Weakness Enumeration (CWE™) refers to a formal list of common types of software weaknesses, which may result in vulnerabilities. For more information, see the CWE List at https://cwe.mitre.org/data/index.html. CWE is a trademark of The MITRE Corporation.}

_{** Severity is calculated based on the CVSS score.}