# Veracode DAST alternatives: what AI models name instead, November 2026

Gane Index, November 2026 Edition. 231 of the 252 answers in the 1 category where Veracode DAST holds a standing named it neither first nor as an alternative; these are the first choices those answers made. Page: https://www.gane.ai/index/it/vendors/veracode-dast/alternatives

## Named instead, most often (every category and segment added)

- OWASP ZAP: 60
- Invicti: 50
- StackHawk: 18
- Acunetix: 14
- Intruder: 12
- Burp Suite DAST: 6

## Dynamic application security testing

**Small business**: 84 of 84 answers did not name Veracode DAST.

- OWASP ZAP: first choice in 46 of those 84
- Intruder: first choice in 12 of those 84
- StackHawk: first choice in 12 of those 84
- Acunetix: first choice in 4 of those 84
- Nuclei: first choice in 3 of those 84
- Probely: first choice in 2 of those 84
- Blacksight: first choice in 1 of those 84
- Detectify: first choice in 1 of those 84

**Mid-market**: 79 of 84 answers did not name Veracode DAST (Veracode DAST is #8 of 13 at 2%).

- Invicti: first choice in 21 of those 79
- OWASP ZAP: first choice in 14 of those 79
- Acunetix: first choice in 10 of those 79
- StackHawk: first choice in 6 of those 79
- Burp Suite: first choice in 2 of those 79
- Escape: first choice in 2 of those 79
- Bright: first choice in 1 of those 79
- Bright Security: first choice in 1 of those 79

**Enterprise**: 68 of 84 answers did not name Veracode DAST (Veracode DAST is #9 of 14 at 2%).

- Invicti: first choice in 29 of those 68
- Burp Suite DAST: first choice in 6 of those 68
- Burp Suite: first choice in 2 of those 68
- Burp Suite Enterprise Edition: first choice in 2 of those 68
- Checkmarx DAST: first choice in 2 of those 68
- HCL AppScan: first choice in 2 of those 68
- Astra Security: first choice in 1 of those 68
- Bright Security: first choice in 1 of those 68

Published under CC BY 4.0. The output is the models' output; nothing here is a recommendation by the index.
