SAST is a security testing method that analyzes an application's source code to catch and mitigate vulnerabilities. Since SAST is a white box approach, SAST tools have direct access to an application's inner workings and can be implemented early in the SDLC, before the app is fully functional (GA).
