Tests source code without executing the application
Performed early in development lifecycle
Analyzes code for vulnerabilities like SQL injection, XSS patterns
Provides detailed location of vulnerabilities in code
Can produce false positives
DAST (Dynamic Application Security Testing):
Tests running applications from the outside
Simulates real-world attacks
Tests the application as a "black box"
Finds runtime vulnerabilities and configuration issues
Lower false positive rate but may miss some code-level issues
Example: SAST might find a potential SQL injection in code like "SELECT * FROM users WHERE id = " + userId, while DAST would test by sending malicious payloads to running endpoints.
Rewriting in plainer words…
This answer doesn't lend itself to a diagram - it reads best . No credits were charged.
