OAST (Out-of-band Application Security Testing)

Published

2017-07-14 16:45

Collected

2026-07-01 11:09

---
id: 402
title: "OAST (Out-of-band Application Security Testing)"
source_domain: portswigger.net
source_url: "https://portswigger.net/blog/oast-out-of-band-application-security-testing"
published_at: "2017-07-14T16:45:00Z"
tags: ["sast", "portswigger", "dast", "burp-collaborator", "oast", "blind-vulnerabilities", "iast"]
phying_url: "https://phying.com/item/402"
lang: en
---

# OAST (Out-of-band Application Security Testing)

## Summary

Dafydd Stuttard argues OAST (Out-of-band Application Security Testing) belongs alongside DAST, SAST, and IAST, crediting Burp Collaborator with mass-market zero-config out-of-band detection.

## Intelligence Metadata

- **Sources:** portswigger.net
- **Published:** 2017-07-14T16:45:00Z
- **Original:** https://portswigger.net/blog/oast-out-of-band-application-security-testing
- **Phying News:** https://phying.com/item/402