SAST
Static application security testing, scanning source code itself for risky patterns.
Learn it through a story
- The Pipeline That Shipped the Bug Anyway (Cybersecurity for Juniors 3, Ch 8)
Related terms
- Root cause The underlying reason behind a problem, as opposed to its visible symptoms.
- Rules of engagement The agreed scope and boundaries for an authorised security test.
- Safe harbour A promise not to pursue legal action against researchers who stay within an agreed, published testing scope.
- SBOM Software bill of materials, a complete list of every component a piece of software depends on.
- SCA Software composition analysis, checking third-party dependencies against known vulnerability databases.
- Scareware A scam that claims your device is infected, to frighten you into clicking.