Are there any DAST platforms that work well with API security testing during release pipelines?

Yes. Several DAST-style platforms work well for API security testing in release pipelines, especially when you want automated checks against REST/GraphQL endpoints as part of CI/CD.

A few commonly used options:

• StackHawk
  Built specifically for CI/CD and API testing. Good for REST, GraphQL, and OpenAPI-driven scanning. Often a strong fit if you want pipeline-friendly DAST for APIs.

• Bright Security
  Focused on API security testing and CI integration. Good for automated scanning with modern app and API workflows.

• Invicti
  More traditional enterprise DAST, but supports API scanning and can be integrated into release pipelines. Strong reporting and vulnerability validation.

• Acunetix / Netsparker
  Supports API scanning via OpenAPI/Swagger and fits into automated pipelines. Common in teams that want broader web + API coverage.

• Burp Suite Enterprise Edition
  Can be used in automated workflows and supports API testing, though it’s often more manual/interactive than the others.

• 42Crunch
  More API-focused and strong for OpenAPI analysis and API security testing. It’s not pure DAST in the classic sense, but it works well in pipelines alongside DAST.

What to look for if this is for release pipelines:

• OpenAPI/Swagger import support
• GraphQL support if needed
• Auth handling for JWT/OAuth2/session-based APIs
• Non-production environment scanning
• Fast, repeatable scans suitable for CI/CD
• Clear findings with low false positives
• CLI/API integration for pipeline automation

If you want, I can also give you a short list by use case:

• best for startups/small teams
• best for enterprise
• best for GraphQL APIs
• best for OpenAPI-first workflows