OneAgent is the primary component used to initially enable Application Security (AppSec) monitoring in Dynatrace.
It automatically:
Instruments application code
Detects vulnerabilities at runtime
Captures security-related data such as code-level weaknesses and attack vectors This built-in capability allows Dynatrace to provide continuous application security without requiring additional manual instrumentation.
AppSec Apps are used to analyze and visualize detected vulnerabilities but rely on data collected by OneAgent.
ActiveGate handles communication and routing.
OpenTelemetry is used for telemetry ingestion, not native AppSec monitoring.
Reference: Based on official Dynatrace University training materials covering Application Security and OneAgent capabilities.