RapiDAST (Rapid DAST) is an open-source security testing tool that automates DAST (Dynamic Application Security Testing) and streamlines the integration of security testing into development workflows. It is designed to help Developers and/or QA engineers rapidly and effectively identify low-hanging security vulnerabilities in your applications, ideally in CI/CD pipelines. RapiDAST is for organizations implementing DevSecOps with a shift-left approach.

RapiDAST provides:

• Automated HTTP/API security scanning leveraging ZAP
• Automated LLM AI scanning leveraging Garak
• Kubernetes operator scanning leveraging OOBTKUBE
• Automated vulnerability scanning using Nessus (requires a Nessus instance)
• Command-line execution with yaml configuration, suitable for integration in CI/CD pipelines
• Ability to run automated DAST scanning with pre-built or custom container images
• HTML, JSON and XML report generation
• Integration with Google Cloud Storage and OWASP DefectDojo

RapiDAST is for testing purposes, and should not be used on production systems.

See User Guide
See Developer Guide

Contribution to the project is more than welcome.

See CONTRIBUTING.md