Definition
Static Application Security Testing (SAST) is a method for analysing source code or its representations without running the application to identify potential security Vulnerabilities.
Human Explanation
The code is analysed before or without running the program, allowing many problems to be identified early in development.
Why it Matters
SAST supports early and repeatable detection of security defects during software development.
Conceptual Boundary
SAST analyses code and related artefacts but does not observe the actual behaviour of a running application.
Practical Perspective
SAST is most useful when performed regularly within development workflows and when its findings are reviewed rather than accepted without context.