IAST (Interactive Application Security Testing)

Interactive Application Security Testing combines SAST and DAST by instrumenting a running application to observe both source code paths and execution behavior. IAST detects vulnerabilities with higher confidence than either technique alone, at the cost of requiring an agent inside the application runtime.