Yes, dynamic security application testing (DAST) is black-box testing for web application security. DAST mimics the same techniques that attackers who don’t know the application’s infrastructure, architecture, or code use to find vulnerabilities in running applications.