FreeDAST

Meet FreeDAST

FreeDAST checks a public website's external security posture and returns a letter grade with findings written for the site's team. Its checks cover exposed configuration or backup files, cookie security flags, certificate problems, mixed content, and potentially revealing public paths. Each finding includes a severity and suggested remediation.

A website owner submits a domain and work email, confirms the request, and receives the resulting report without installing an agent or granting source-code access. Reports can be exported for internal reviews or customer questionnaires. The service focuses on what is visible from outside the application, making it a starting point for investigation rather than a complete review of the codebase or infrastructure.