---
title: "Dynatrace Application Security"
slug: "dynatrace-application-security"
updated: 2025-03-15T17:26:39Z
published: 2025-03-15T17:26:39Z
canonical: "docs.databee.buzz/dynatrace-application-security"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.databee.buzz/llms.txt
> Use this file to discover all available pages before exploring further.

# Dynatrace Application Security

Dynatrace provides advanced monitoring and performance management solutions for cloud environments, infrastructure, applications, and user experiences. Dynatrace Application Security strengthen your application’s security by providing following modules:

- [**Dynatrace Runtime Vulnerability Analytics (RVA)**](https://docs.dynatrace.com/docs/secure/application-security/vulnerability-analytics): identify critical vulnerabilities instantly with automated risk and impact assessments, thanks to in-depth analysis of data access paths and production execution.
- [**Dynatrace Runtime Application Protection (RAP)**](https://docs.dynatrace.com/docs/secure/application-security/application-protection): defend your applications in real time by detecting and blocking attacks through advanced code-level insights and transaction analysis.

More information can be found at the [Dynatrace Application Security website](https://docs.dynatrace.com/docs/secure/application-security).

**Integration Method:** API

**Tables**: Vulnerability Finding (2002), Detection Finding (2004), HTTP Activity (4002)

This integration supports the following events.

| **Event** | **Description** |
| --- | --- |
| Attacks | Lists all detected attacks on your applications |
| SecurityProblems | Lists the third-party and code-level vulnerabilities detected in your applications. |

This integration is tested with the following versions.

| Dynatrace Saas Version | v1.308 |
| --- | --- |
| Dynatrace API version | v2.0 |

## Prerequisites

- The user should have access to the [Dynatrace](https://sso.dynatrace.com/) portal with an account that has Administrator privileges.
- The user should have access to the DataBee console.

## Configuration Overview

1. Generate an API token with the required scopes
2. Add the [**Dynatrace Application Security data feed**](/user-manual/docs/dynatrace-application-security#databee-configuration) in the DataBee console with the below parameters.

| **DataBee Parameter** | **Dynatrace Parameter** |
| --- | --- |
| Token | [Personal Access Token](/user-manual/docs/dynatrace-application-security#generate-personal-access-tokens) |

## Dynatrace Configuration

1. Navigate to [**Dynatrace**](https://sso.dynatrace.com/) portal. Enter your email ID and click **Next**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/dynatrace-application-security-mar2025-image-l48i9ncj.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A35%3A06Z&se=2026-10-30T12%3A35%3A06Z&sr=c&sp=r&sig=oZmCG61v4SrPk8IcojiN7%2BY1J43vPb%2BX%2BuPOaZk3UOs%3D)
2. Enter your password and click **Sign in**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/dynatrace-application-security-mar2025-image-hmfy3ti6.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A35%3A06Z&se=2026-10-30T12%3A35%3A06Z&sr=c&sp=r&sig=oZmCG61v4SrPk8IcojiN7%2BY1J43vPb%2BX%2BuPOaZk3UOs%3D)
3. Once logged in, note the **<****tenant_id>** from the URL which is required later while configuring the data feed. Refer to the screenshot below.

![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/dynatrace-application-security-mar2025-image-q30ofzaf.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A35%3A06Z&se=2026-10-30T12%3A35%3A06Z&sr=c&sp=r&sig=oZmCG61v4SrPk8IcojiN7%2BY1J43vPb%2BX%2BuPOaZk3UOs%3D)

### Process group monitoring

For Application Security to work properly, we need to enable deep monitoring. Please follow the steps to enable **automatic deep monitoring**.

1. In **Dynatrace** UI > Go to **Apps** > Under **Manage** section > **Settings**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/dynatrace-application-security-mar2025-image-1gthkx4o.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A35%3A06Z&se=2026-10-30T12%3A35%3A06Z&sr=c&sp=r&sig=oZmCG61v4SrPk8IcojiN7%2BY1J43vPb%2BX%2BuPOaZk3UOs%3D)
2. Navigate to **Processes and contextualize** > **Process groups**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/dynatrace-application-security-mar2025-image-583dfggz.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A35%3A06Z&se=2026-10-30T12%3A35%3A06Z&sr=c&sp=r&sig=oZmCG61v4SrPk8IcojiN7%2BY1J43vPb%2BX%2BuPOaZk3UOs%3D)
3. Under **Process groups,** click **Process group monitoring**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/dynatrace-application-security-mar2025-image-p2tdhh10.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A35%3A06Z&se=2026-10-30T12%3A35%3A06Z&sr=c&sp=r&sig=oZmCG61v4SrPk8IcojiN7%2BY1J43vPb%2BX%2BuPOaZk3UOs%3D)
4. It will open Dynatrace classic UI in new browser tab. Click the toggle **Enable automatic deep monitoring**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/dynatrace-application-security-mar2025-image-1iirpku9.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A35%3A06Z&se=2026-10-30T12%3A35%3A06Z&sr=c&sp=r&sig=oZmCG61v4SrPk8IcojiN7%2BY1J43vPb%2BX%2BuPOaZk3UOs%3D)

### Enable Runtime Vulnerabilities Analytics (RVA)

1. In **Dynatrace** UI > Go to **Apps** > Under **Manage** section > **Settings**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/dynatrace-application-security-mar2025-image-hxo8y03y.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A35%3A06Z&se=2026-10-30T12%3A35%3A06Z&sr=c&sp=r&sig=oZmCG61v4SrPk8IcojiN7%2BY1J43vPb%2BX%2BuPOaZk3UOs%3D)
2. Navigate to **Analyze and alert** and select **Application Security**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/dynatrace-application-security-mar2025-image-kdtwtp0i.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A35%3A06Z&se=2026-10-30T12%3A35%3A06Z&sr=c&sp=r&sig=oZmCG61v4SrPk8IcojiN7%2BY1J43vPb%2BX%2BuPOaZk3UOs%3D)
3. Go to **Application protection** > **General settings**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/dynatrace-application-security-mar2025-image-d8sxrhh2.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A35%3A06Z&se=2026-10-30T12%3A35%3A06Z&sr=c&sp=r&sig=oZmCG61v4SrPk8IcojiN7%2BY1J43vPb%2BX%2BuPOaZk3UOs%3D)
4. Under **Application Security** > **Vulnerability Analytics,** click **General settings**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/dynatrace-application-security-mar2025-image-uazlj240.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A35%3A06Z&se=2026-10-30T12%3A35%3A06Z&sr=c&sp=r&sig=oZmCG61v4SrPk8IcojiN7%2BY1J43vPb%2BX%2BuPOaZk3UOs%3D)
5. Toggle the **Enable Third-party Vulnerability Analytics** button and enable the technologies you want to monitor under **Technologies**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/dynatrace-application-security-mar2025-image-b91oo8sl.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A35%3A06Z&se=2026-10-30T12%3A35%3A06Z&sr=c&sp=r&sig=oZmCG61v4SrPk8IcojiN7%2BY1J43vPb%2BX%2BuPOaZk3UOs%3D)
6. Navigate to **Code-level Vulnerability Analytics** and enable it. Also select **Monitor** from the drop down for ‘Global Java code-level vulnerability detection control’ and ‘Global .NET code-level vulnerability detection control’.

**![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/dynatrace-application-security-mar2025-image-uiwgi5u8.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A35%3A06Z&se=2026-10-30T12%3A35%3A06Z&sr=c&sp=r&sig=oZmCG61v4SrPk8IcojiN7%2BY1J43vPb%2BX%2BuPOaZk3UOs%3D)**
7. Once both **Third-party Vulnerability Analytics** and **Code-level Vulnerability Analytics** are enabled, click **Save changes**.

![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/dynatrace-application-security-mar2025-image-4zuvy4m4.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A35%3A06Z&se=2026-10-30T12%3A35%3A06Z&sr=c&sp=r&sig=oZmCG61v4SrPk8IcojiN7%2BY1J43vPb%2BX%2BuPOaZk3UOs%3D)

### Enable Runtime Application Protection (RPA)

1. In **Dynatrace** UI > Go to **Apps >** Under **Manage** section > **Settings**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/dynatrace-application-security-mar2025-image-0711bti1.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A35%3A06Z&se=2026-10-30T12%3A35%3A06Z&sr=c&sp=r&sig=oZmCG61v4SrPk8IcojiN7%2BY1J43vPb%2BX%2BuPOaZk3UOs%3D)
2. Select **Analyze and alert** > **Application security**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/dynatrace-application-security-mar2025-image-bd4a9p77.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A35%3A06Z&se=2026-10-30T12%3A35%3A06Z&sr=c&sp=r&sig=oZmCG61v4SrPk8IcojiN7%2BY1J43vPb%2BX%2BuPOaZk3UOs%3D)
3. Navigate to **Application protection** > **General settings**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/dynatrace-application-security-mar2025-image-82uykolw.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A35%3A06Z&se=2026-10-30T12%3A35%3A06Z&sr=c&sp=r&sig=oZmCG61v4SrPk8IcojiN7%2BY1J43vPb%2BX%2BuPOaZk3UOs%3D)
4. Toggle the **Enable Runtime Application Protection** button and ensure either **Monitor; incoming attacks detected only** or **Block; incoming attacks detected and blocked** based on your preferences for both ‘Attack control Java’ and ‘Attack control .NET.’ ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/dynatrace-application-security-mar2025-image-pzco7lgy.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A35%3A06Z&se=2026-10-30T12%3A35%3A06Z&sr=c&sp=r&sig=oZmCG61v4SrPk8IcojiN7%2BY1J43vPb%2BX%2BuPOaZk3UOs%3D)
5. Once **Runtime Application Protection** is enabled, click **Save changes**.

![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/dynatrace-application-security-mar2025-image-plxb30g5.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A35%3A06Z&se=2026-10-30T12%3A35%3A06Z&sr=c&sp=r&sig=oZmCG61v4SrPk8IcojiN7%2BY1J43vPb%2BX%2BuPOaZk3UOs%3D)

### Enable OneAgent monitoring

1. In **Dynatrace** UI > Go to **Apps >** Under **Manage** section > **Settings**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/dynatrace-application-security-mar2025-image-al45aqo8.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A35%3A06Z&se=2026-10-30T12%3A35%3A06Z&sr=c&sp=r&sig=oZmCG61v4SrPk8IcojiN7%2BY1J43vPb%2BX%2BuPOaZk3UOs%3D)
2. Navigate to **Collect and capture** > **General monitoring settings**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/dynatrace-application-security-mar2025-image-t3dvwh4e.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A35%3A06Z&se=2026-10-30T12%3A35%3A06Z&sr=c&sp=r&sig=oZmCG61v4SrPk8IcojiN7%2BY1J43vPb%2BX%2BuPOaZk3UOs%3D)
3. Click **OneAgent features**.

![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/dynatrace-application-security-mar2025-image-r383gq66.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A35%3A06Z&se=2026-10-30T12%3A35%3A06Z&sr=c&sp=r&sig=oZmCG61v4SrPk8IcojiN7%2BY1J43vPb%2BX%2BuPOaZk3UOs%3D)
4. Ensure you have enabled both **code-level attack evaluation [Opt-In]** and **code-level vulnerability evaluation [Opt-In]** for the technology that you want to monitor. You can also use the **Filter by** option as well. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/dynatrace-application-security-mar2025-image-umjr8fs6.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A35%3A06Z&se=2026-10-30T12%3A35%3A06Z&sr=c&sp=r&sig=oZmCG61v4SrPk8IcojiN7%2BY1J43vPb%2BX%2BuPOaZk3UOs%3D)
5. For **code-level attack evaluation [Opt-In],** additionally we must enable **Instrumentation enabled (change needs a process restart).** Once enabled, click **Save changes**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/dynatrace-application-security-mar2025-image-elg5m9uu.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A35%3A06Z&se=2026-10-30T12%3A35%3A06Z&sr=c&sp=r&sig=oZmCG61v4SrPk8IcojiN7%2BY1J43vPb%2BX%2BuPOaZk3UOs%3D)

### Generate personal access tokens

1. In **Dynatrace** UI > Go to **Apps >** Under **Manage** section > **Settings**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/dynatrace-application-security-mar2025-image-dkugdg3u.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A35%3A06Z&se=2026-10-30T12%3A35%3A06Z&sr=c&sp=r&sig=oZmCG61v4SrPk8IcojiN7%2BY1J43vPb%2BX%2BuPOaZk3UOs%3D)
2. Navigate to **Environment segmentation** > **Access tokens**.

![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/dynatrace-application-security-mar2025-image-7kckcyds.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A35%3A06Z&se=2026-10-30T12%3A35%3A06Z&sr=c&sp=r&sig=oZmCG61v4SrPk8IcojiN7%2BY1J43vPb%2BX%2BuPOaZk3UOs%3D)
3. **Enable Personal access tokens** and then click **Save changes**.

![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/dynatrace-application-security-mar2025-image-21ei537r.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A35%3A06Z&se=2026-10-30T12%3A35%3A06Z&sr=c&sp=r&sig=oZmCG61v4SrPk8IcojiN7%2BY1J43vPb%2BX%2BuPOaZk3UOs%3D)
4. Go to **Apps** > Under **Manage** section > **Personal Access Tokens** to generate a personal access token. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/dynatrace-application-security-mar2025-image-l6y6480x.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A35%3A06Z&se=2026-10-30T12%3A35%3A06Z&sr=c&sp=r&sig=oZmCG61v4SrPk8IcojiN7%2BY1J43vPb%2BX%2BuPOaZk3UOs%3D)
5. Click **Generate new token** button. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/dynatrace-application-security-mar2025-image-q7rbkkey.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A35%3A06Z&se=2026-10-30T12%3A35%3A06Z&sr=c&sp=r&sig=oZmCG61v4SrPk8IcojiN7%2BY1J43vPb%2BX%2BuPOaZk3UOs%3D)
6. Give an appropriate ‘Token name’ and select **Read attacks** and **Read security problems** from the scopes. Once selected click **Generate token**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/dynatrace-application-security-mar2025-image-4szb9593.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A35%3A06Z&se=2026-10-30T12%3A35%3A06Z&sr=c&sp=r&sig=oZmCG61v4SrPk8IcojiN7%2BY1J43vPb%2BX%2BuPOaZk3UOs%3D)
7. Ensure to copy and save the generated access token as it will be required to configure in DataBee. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/dynatrace-application-security-mar2025-image-97m6owpu.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A35%3A06Z&se=2026-10-30T12%3A35%3A06Z&sr=c&sp=r&sig=oZmCG61v4SrPk8IcojiN7%2BY1J43vPb%2BX%2BuPOaZk3UOs%3D)

## DataBee Configuration

1. Login to the DataBee UI, navigate to **Data** > **Data Feeds** and click the **Add New Data Feed** button. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/dynatrace-application-security-mar2025-image-44uhrhot.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A35%3A06Z&se=2026-10-30T12%3A35%3A06Z&sr=c&sp=r&sig=oZmCG61v4SrPk8IcojiN7%2BY1J43vPb%2BX%2BuPOaZk3UOs%3D)
2. Search for the **Dynatrace** and click it as shown below. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/dynatrace-application-security-mar2025-image-9suu0gqo.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A35%3A06Z&se=2026-10-30T12%3A35%3A06Z&sr=c&sp=r&sig=oZmCG61v4SrPk8IcojiN7%2BY1J43vPb%2BX%2BuPOaZk3UOs%3D)
3. Click on the **API Ingest** option for collection method. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/dynatrace-application-security-mar2025-image-81iniz9h.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A35%3A06Z&se=2026-10-30T12%3A35%3A06Z&sr=c&sp=r&sig=oZmCG61v4SrPk8IcojiN7%2BY1J43vPb%2BX%2BuPOaZk3UOs%3D)
4. Enter feed contact information and click **Next**.

![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/dynatrace-application-security-mar2025-image-3jd6oddd.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A35%3A06Z&se=2026-10-30T12%3A35%3A06Z&sr=c&sp=r&sig=oZmCG61v4SrPk8IcojiN7%2BY1J43vPb%2BX%2BuPOaZk3UOs%3D)
5. In the configuration page, confirm the following:

![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/dynatrace-application-security-mar2025-image-q3jhmdhn.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A35%3A06Z&se=2026-10-30T12%3A35%3A06Z&sr=c&sp=r&sig=oZmCG61v4SrPk8IcojiN7%2BY1J43vPb%2BX%2BuPOaZk3UOs%3D)
  - API Base URL: this is the base URL that DataBee will interact with. Ensure to update <tenant_id> placeholder with your [Dynatrace tenant id](/docs/dynatrace-application-security#tenant_id).
  - Authorization Method: Bearer Token
  - Token: paste the [Personal Access Token](/docs/dynatrace-application-security#access_token) generated earlier in the GitLab console.
  - Event Types: preselected for all the event types that integration pulls.
6. Click **Submit**.

## Troubleshooting Tips

- Ensure the token is pasted correctly. Since you cannot view the token after the 1st time, re-create the token, paste it on a text editor to ensure no spaces or unexpected characters are included and reconfigure the DataBee feed.
- Ensure the Dynatrace scopes/permissions are correct.