What is Static Application Security Testing (SAST) and how does it work?

3 years ago www.uleska.com

Summary: This is a summary of an article originally published by the source. Read the full original article here →

Static Application Security Testing (SAST), or static analysis, is a method of testing and analysing source code. This method allows organisations to analyse their source code and detect vulnerabilities that could make their applications prone to attacks.

As the ‘static’ in the name implies, SAST tests work with static code (code at rest).

These are the 6 steps to a SAST test: Tool finalisation - Select a static analysis tool that can review your programming language.

While SAST can detect vulnerabilities without running the code, DAST (Dynamic Application Security Testing) can find them in a running application.

DevOps Articles