What are the critical features available with the Dynatrace Application Security feature?

The Dynatrace Application Security module is focused on providing security insights and protection at runtime. Its two primary features are Runtime Vulnerability Analytics, which automatically detects and prioritizes vulnerabilities based on real-time code execution and data flow, and Runtime Application Protection, which can actively block attacks that exploit those detected vulnerabilities. This runtime-centric approach provides high-fidelity results with a low rate of false positives, as it is based on what is actually happening within the application.

B. Automatic Vulnerability Remediation: Dynatrace identifies and prioritizes vulnerabilities to guide remediation efforts, but it does not automatically modify application source code to fix them.

D. On-Demand Code Security Analysis: This describes Static Application Security Testing (SAST). Dynatrace's strength is in runtime analysis (IAST-like capabilities), not static code scanning.

1. Dynatrace Documentation, "Application Protection". This page states, "Application Protection is a runtime application self-protection (RASP) solution that provides Runtime vulnerability analytics and protection against injections." This confirms options A and C.

2. Dynatrace Documentation, "Get started with Application Security". The overview highlights the key capabilities: "Runtime vulnerability analysis" and "Runtime application protection," explaining how they work in production and pre-production environments.

3. Dynatrace University, "Application Security" courseware. Module 1, "Introduction to Dynatrace Application Security," outlines the core features, focusing on runtime detection and protection.