Switched from SAST to DAST for my side project after 2 weeks of false alarms

I was running a SAST scanner on my Flask app for 2 weeks and it flagged 47 issues, but 44 of them were just noise about my test files. Switched to DAST with ZAP last Tuesday and it found the one real SQL injection in my search endpoint in about 10 minutes. Anyone else made this swap, or do you run both and just deal with the noise?

0 comments

Log in to join the discussion

Log In

0 Comments

No comments yet

Be the first to share your thoughts on this discussion.