Q2
Compare SAST, DAST, and IAST.
💬Answer
- SAST (Static Application Security Testing): Analyzes source code or binaries without executing them (White-box testing) to identify coding errors, vulnerabilities, and credential leaks early.
- DAST (Dynamic Application Security Testing): Analyzes a running application from the outside (Black-box testing) to discover runtime vulnerabilities, authentication weaknesses, and injection flaws.
- IAST (Interactive Application Security Testing): Combines SAST and DAST by executing inside the application runtime using instrumented agents, analyzing code paths and inputs in real-time.
Related DevSecOps Questions
View All DevSecOpsQuestions →
Created by
Apurv Gujjar
DevOps & Cloud Engineer
Specialized in:DevOpsAWSGCPKubernetesTerraformDocker
View Portfolio