SAST (static application security testing) reviews an application's source code without running it to find flaws such as hardcoded passwords or unvalidated input. DAST (dynamic application security testing) tests the running application from the outside, the way an attacker would. They complement each other: SAST catches flaws early in development and DAST shows which ones are exploitable.
How TecnetOne handles it: Penetration Testing
static application security testing, dynamic application security testing, application security testing, AppSec testing