FortiDAST Web Application Scanning is a Chrome extension developed by FortiClient Chrome. This free tool captures user navigation and events across tabs/windows to enhance vulnerability scanning in FortiDAST. With this extension, users can record complex login sequences, including multi-form and multi-factor authentication, such as One-Time Passwords or Tokens.

The extension captures various user activities such as page loads, click events, keypress events, visibility changes, submit events, and input events. It automatically downloads the captured actions in JSON format for further processing in FortiDAST.

FortiDAST combines advanced crawling technology with automated black-box dynamic application security testing to identify vulnerabilities in web applications. By capturing user activities, FortiDAST can perform more accurate vulnerability scans and uncover potential security threats.