2 years ago

Category: Software, Business, Security, Data, automation

Static Application Security Testing (SAST), or static analysis, is a method of testing and analysing source code. This method allows organisations to analyse their source code and detect vulnerabilities that could make their applications prone to attacks.

As the ‘static’ in the name implies, SAST tests work with static code (code at rest).

These are the 6 steps to a SAST test: Tool finalisation - Select a static analysis tool that can review your programming language.

While SAST can detect vulnerabilities without running the code, DAST (Dynamic Application Security Testing) can find them in a running application.