SAST (Static Application Security Testing)

A security testing method that analyzes source or compiled code without executing the application. SAST detects vulnerabilities such as injections, XSS, and secret leaks directly in the code. It integrates into CI/CD pipelines and complements DAST, which tests the running application.