IAST is interactive application security testing. It’s also been known variously as hybrid security testing, gray-box, and glass-box. This technique blends the inside-out approach of SAST with the outside-in approach of DAST to give you deep code-level visibility of a running application while it’s in a real running state. This helps reduce false positives but still has the thoroughness limitations of black-box techniques in that it’s only as good as the test suite being run in terms of coverage.
