What is SAST?

Static Application Security Testing (SAST) looks through application source code for security defects, different issues written into the source code, and how the application is actually programmed to identify vulnerabilities that then have the potential being exploited.

[@EddieDophamo]

Once you have a SAST tool, prioritizing its findings can be a nightmare. Legacy SAST tools have an outrageous false positive rate, making their findings impossible to handle. Modern SAST tools do a better job at prioritizing and integrate with SCA tools, giving a more complete picture. I especially like Backslash because of their reachability feature.

[@abdohfawze155]

❤❤❤❤❤