Dynamic Analysis updates
The updates on this page apply to the following Veracode Dynamic Application Security Testing (DAST) products and features. Updates that apply to specific Veracode regions show a region icon.
- DAST Essentials
- Web application scanning
- API scanning
- Discovery scans: Not available in the European region.
- Internal Scanning Management (ISM)
May 15, 2024
ISM endpoint 24.5.5
This update includes performance improvements to Internal Scanning Management (ISM). To install this endpoint, you must have Java 21 or greater.
March 28, 2024
Improved pause and resume scheduling
You can now schedule an analysis to pause and resume on specific days of the week, during specific periods, or both.
December 19, 2023
Web application and API scans now support multi-factor authentication
You can now configure web application scans and API scans to use time-based one-time password (TOTP) seeds for URLs that require multi-factor authentication (MFA). You can also configure TOTP with the REST API.
December 12, 2023
ISM Endpoint 23.12.1
- The endpoint now supports Java 21.
- Adds virtual threading functionality to improve performance and stability. Before you can use this functionality, you must upgrade to Java 21.
November 27, 2023
Free trial of DAST Essentials
Veracode now offers a free 14-day trial of DAST Essentials in the Veracode Platform. To sign up, on the Sign in page, select Sign Up to create your account. If you are a Veracode customer and want to try DAST Essentials, contact your sales associate.
November 15, 2023
Introducing DAST Essentials
DAST Essentials is a new Dynamic Application Security Testing (DAST) product that provides rapid and resilient DAST scanning of web applications and REST APIs, a user-friendly interface, and seamless CI/CD pipeline integration. To get started, see the quickstart.
September 25, 2023
Web application and API scans now support custom cookies
You can now configure web application scans and API scans to use one or more custom cookies for authentication.
May 9, 2023
ISM Endpoint 23.5.0
Added executable scripts that update the JAVA_HOME
path for the endpoint.
April 25, 2023
ISM Endpoint 23.4.2
- The endpoint now supports environments where the target host is on the same host as the client.
- Source code files now include a copyright header.
February 27, 2023
Set URL Scan Settings at the Organization Level
You can now use the Dynamic Analysis REST API to set URL scan settings for all analyses and scans in an organization.
February 17, 2023
New Manual Resume Feature for Paused Analyses
Veracode Dynamic Analysis adds a new feature that enables you to manually resume a scheduled analysis from a paused state. This feature is only available upon request. To add this feature to your account, contact Veracode Technical Support.
January 20, 2023
Renamed URL Scan Status Messages
Veracode has renamed and changed the descriptions for the following URL scan status messages for Dynamic Analysis. The new names more accurately describe the issues that caused these status messages to appear in the Veracode Platform.
Killed - Partial Results Available
is nowLockout - Partial Results Available
.Killed - Verifying Partial Results
is nowLockout - Verifying Partial Results
.