According to a recent LinkedIn post from Novee, the company is drawing attention to perceived structural weaknesses in traditional dynamic application security testing, or DAST. The post argues that DAST tools were designed for slower, legacy release cycles and may be misaligned with modern, continuously deployed software environments.
The LinkedIn post highlights five recurring gaps that the company believes appear across DAST deployments, regardless of vendor. These include missing application context, outdated results by the time code ships, blind spots in authentication and workflows, noisy findings without exploit proof, and generic remediation guidance without verification.
As presented in the post, these critiques position DAST as moving “off the roadmap” for some security leaders and suggest unmet demand for approaches that reflect real attacker behavior. Novee frames “continuous, attacker-grade testing” that reasons about an application, rather than pattern matching, as a potential direction for closing these gaps.
For investors, this messaging points to a strategic focus on next-generation application security testing that could challenge incumbent DAST providers. If Novee can translate this viewpoint into differentiated products that reduce false positives and track with continuous delivery, it could strengthen its competitive position in the application security market and tap budgets shifting away from legacy tools.