Meet Dusseldorf, Microsoft’s open-source out-of-band security platform

Microsoft published Dusseldorf, an open-source out-of-band application security testing (OAST) platform that captures inbound DNS/HTTP/HTTPS traffic to detect defects such as SSRF, XSS, SSTI, and XXE. Designed for private deployment, it offers a GUI and REST API for captured requests and automated responses, supports local Docker Compose workflows for labs and an Azure/Helm path for cloud provisioning, and requires tooling like Docker, Azure CLI, OpenSSL, Python, jq, and Helm.