As of September 2026, Latka tracks 8 dynamic application security testing software companies with $1M–$5M in annual revenue. They have combined revenues of $24.1M and employ 236 people. They have raised $6.4M and serve 500 customers combined.
Every company below sells dynamic application security testing software to other businesses and is ranked by its most recent annual revenue. Revenue, funding, headcount and customer figures come from CEO interviews on the Latka podcast, public company filings, and Latka estimates where a company has not disclosed a number.
Dynamic Application Security Testing (DAST) Software is a category of security testing tools designed to identify vulnerabilities in web applications and services while they are running. Unlike static application security testing, DAST assesses applications in real-time from an external perspective, simulating the behavior of potential attackers. This dynamic testing method helps organizations discover issues such as SQL injection, cross-site scripting, and other security weaknesses that could be exploited during operations. DAST tools are primarily used by security professionals and DevSecOps teams to ensure that applications are secured against external threats before they are deployed or while they are live. Common features of DAST software include security scanning, vulnerability detection, and reporting capabilities. These tools often integrate with development pipelines, allowing for continuous security monitoring and compliance throughout the application lifecycle.
Sorting: Highest -> Lowest
Showing 8 of 8 companies ranked by annual revenue.
San Francisco, California, United States
Operator of a platform intended to offer offensive and defensive application security services. The company's platform ensures applications are safe from dangerous hacking threats that can destroy intellectual property and expose sensitive user information, enabling developers to focus on building great products by providing comprehensive and easy-to-use security services.
San Francisco, California, United States
Escape is the only DAST that works with your modern stack and tests business logic instead of missing headers. It fits right into your modern stack, supporting modern web frameworks, APIs, CI/CD, and Wiz without hassle. With Escape, you can: 1. Document all your APIs & Web Apps in minutes and enrich your inventory with seamless integrations. 2. Discover vulnerabilities even at a business logic level with our proprietary AI-powered algorithm. 3. Remediate issues efficiently with code snippets tailored to each framework
Denver, Colorado, United States
Developer of a security platform designed for DevOps teams. The company's platform is security software which continuously scans and documents vulnerabilities, enabling engineers to find and remediate security problems in development and production.
Austin, Texas, United States
Developer of web security tool designed to combat website hacking. The company's web security tool help companies scan their web applications to identify and resolve exploitable vulnerabilities.
Palo Alto, California, United States
Pixee is an AI-powered platform that automatically identifies and fixes code vulnerabilities, improves code quality, and enhances performance. It integrates into developers' workflows, providing real-time fixes and suggestions without disrupting productivity. Pixee aims to reduce the security burden on developers by automatically hardening code and allowing them to focus on creating features rather than fixing bugs.
Winooski, Vermont, United States
SOOS is the affordable, easy-to-integrate Software Composition Analysis and Dynamic Application Security Testing solution for your whole team. Scan your open source software for vulnerabilities, control the introduction of new dependencies, exclude unwanted license-types, generate SBOMs, and fill out your compliance worksheets with confidence–all for one low monthly price.
Melbourne, Victoria, Australia
We help SaaS & digital teams maximise profits by shipping bug-free and secure applications. Our world-class test automation and cybersecurity testing tools are built, deployed and exploited to help you maximise profits by cutting testing times, proving the security of your applications & shipping revenue-generating features faster.
London, England, United Kingdom
SaaS vulnerability and risk aggregator with prioritization and contextualization features focused on application security
Latka tracks 8 dynamic application security testing software companies with $1M–$5M in annual revenue. Together they generate $24.1M in annual revenue and employ 236 people.
SEWORKS is the largest, with $4.8M in annual revenue, founded in 2013.
The average dynamic application security testing software company in this list makes $3M a year, across 8 companies with reported revenue. They serve 500 customers combined.
Ranked by annual revenue, the leaders are SEWORKS, Escape, StackHawk, Acunetix and Pixee.
The 8 dynamic application security testing software companies with $1M–$5M in annual revenue tracked here have raised $6.4M in disclosed funding between them.
- The software must scan web applications in real-time for security vulnerabilities. - It must simulate attacks from an external perspective without requiring access to the source code. - Capable of identifying a range of vulnerabilities, such as SQL injection, cross-site scripting, and similar exploits. - Features should include automated reporting of discovered vulnerabilities and potential remediation guidance. - Not limited to static testing; must provide active assessment during application runtime.
Sign up to access all features
Sign up with GoogleSign up with LinkedInAlready have an account? Log in
GetLatka is trusted by 200k+ founders, researchers, and marketers.
No contracts, cancel at any time