Dynamic application security testing (DAST) uses simulated attacks on a web application to identify vulnerabilities.