DAST and SAST are complementary approaches to application security. Static Application Security Testing performs analysis of an application’s source code, rather than interacting with a running application. Dynamic application security testing analyzes a running application for potential vulnerabilities, by sending various types of inputs to the application.