Developers – Say Hello to AUDIT!

Imagine catching critical security flaws before they even leave your IDE—no waiting hours for a full dynamic application security test (DAST) scan, and no relying solely on security teams to flag issues late in the cycle or post-deployment. With AppScan Unit-level DAST Intelligence Tester (AUDIT), that vision becomes a reality.

This new capability is part of DAST for Developers, a modern approach that integrates dynamic security testing directly into the development workflow, reflecting HCL AppScan’s continued commitment to making application security testing more accessible, efficient, and developer-friendly.

Introduction to AUDIT

AUDIT is a DAST solution for developers that lets them run targeted scans on specific endpoints, detect vulnerabilities early in the SDLC, and easily run lightweight scans right in the IDE during development.

How It Works

Unless specified, HCL AppScan initiates a full scan of an application or API– mapping the application's structure into a data tree, and executing a wide range of tests across all identified endpoints. While this comprehensive scan ensures deep coverage, it can take a long time depending on the application size and policy used.

With AUDIT, developers can:

• Target specific endpoints for precise testing
• Run quick, focused scans directly within their IDE
• Receive actionable security insights within minutes, without waiting for full scan cycles
• Review findings, remediate vulnerabilities, and re-scan to validate fixes—supporting an iterative approach that strengthens code security

The Impact

• Shift-left Security: Developers can now identify and fix DAST issues as they code, reducing rework and risk.
• Speed: Scans that previously took hours can now be completed in a matter of minutes, thanks to the targeted testing approach.
• Developer-centric: This capability is built for developers—simple to use, embedded in familiar tools, and focused only on what matters the most.
• Reduced security team burden: By enabling self-service testing, developers can handle common vulnerabilities on their own—lightening the load on security teams and accelerating the overall development cycle.

Conclusion

AUDIT bridges the gap between development and security by giving developers the ability to run meaningful, fast, and targeted DAST scans early in the lifecycle. It’s a crucial step forward in enabling secure coding practices without slowing down innovation.