FortiDAST Web Application Scanning

Record user activities to enhance vulnerability scanning in FortiDAST

This Chrome extension provides a unique feature that allows you to record user activities, which can then be used to improve vulnerability scanning in FortiDAST. FortiDAST Web Application Scanning enables you to capture complex login sequences, including multi-form and multi-factor authentication (One-Time Passwords or Tokens), for vulnerability scans by capturing page-loads, click-events, keypress-events, visibility-change, submit-events, and input-events. The extension will automatically download the JSON with action contents for further processing in FortiDAST.

Once you have captured a login sequence, FortiDAST combines advanced crawling technology and performs automated black-box dynamic application security testing of web applications to identify vulnerabilities that actors may exploit.

To perform scans, you will need an active subscription to FortiDAST (https://fortidast.forticloud.com).