一句话：通过访谈揭示从业者对在敏捷与 CI/CD 工作流中集成 DAST 的挑战、影响与改进机会。
现代 Web 开发依赖敏捷框架与 CI/CD 流水线以加速交付，但漏洞数量上升，亟需将安全测试更好融入开发流程。本文是一份来自美国某大型软件组织的经验报告，研究实践者如何看待动态应用安全测试（DAST）在其开发工作流中的集成。作者对团队中 10 名实践者进行半结构化访谈，归纳了 DAST 采纳的挑战、对工作流的影响以及改进机会，并据此提出将安全测试整合进现代开发流程的实践建议。报告未给出定量效果，而是提供质性洞察与可操作指导。
Modern web development relies on Agile frameworks and Continuous Integration and Continuous Delivery (CI/CD) pipelines to accelerate software delivery, yet the rising number of vulnerabilities underscores the need to better integrate security testing into these workflows. We present an experience report for a large software organization in the United States, investigating practitioners' perceptions of Dynamic Application Security Testing (DAST) integration within their development workflow. Through semi-structured interviews with 10 practitioners on the team, we outline perceptions of adoption challenges, workflow impacts, and opportunities for improvement. Based on these findings, we provide practical recommendations for integrating security testing into modern development processes.