Free: Dastardly from Burp Suite
Summary: PortSwigger released Dastardly, a free, lightweight dynamic (DAST) web application security scanner built for CI/CD pipelines and using a stripped-down version of the Burp Suite scanner. The company says scans complete in ten minutes or less and cover seven security issues, producing far less noise than static (SAST) tools that it says are prone to false positives.
Bottom line: The pitch rests on speed and low false-positive rates: a ten-minute scan that fits inside a pipeline is the difference between a tool developers actually act on and one they ignore, which the source says is the usual fate of noisy SAST output.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026