Work with DAST issues

Manage issues captured in DAST tests and find remediation guidance, including DAST-specific evidence.

Work with DAST issues

Issues captured in DAST tests are managed like SAST and SCA issues. You can:

Triage DAST issues (and manually apply fix-by dates). See Ways to triage issues in Polaris.
Assign issue policies to DAST projects to automate actions when issues are captured in tests. See Issue policies.
Export DAST issues to CSV or JSON. See How to export issues to CSV or JSON.
After you set up an issue tracking integration, you can export DAST issues to an external issue tracking instance such as Jira, Azure DevOps, or ServiceNow. See Issue tracking integrations for more information.

Find DAST remediation guidance

After you test a DAST project, you can find remediation guidance (along with evidence) for issues captured in DAST tests in the Issue Details panel. To open the Issue Details panel, follow these steps:

Go to Portfolio, open an application, open a DAST project, and open the Issues tab.
Tip: Remember, DAST issues are only available in DAST projects.
Select an Issue Type.
The Issue Details panel opens.
Select the Evidence tab to view the following DAST-specific evidence:
- Location: The API endpoint for which the issue was detected
- Payload
- Target
- Request body
- Response body