Determining security flaws in an application. There are generally four approaches to application security testing (AST). With access to the source code, static AST (SAST) is performed before the app ...