Do Customers using ServiceNow responsible to perform DAST (Dynamic Application Security Testing)?

[VCN]

I have a question regarding Dynamic Application Security Testing (DAST), do the customers purchased ServiceNow licenses is responsible to perform DAST (or) this will be taken care by ServiceNow?