What is IAST - Interactive Application Security Testing?

Interactive application security testing (IAST) is an emerging application security testing approach that combines elements of its more established siblings in SAST (static application security testing) and DAST (dynamic application security testing).

IAST instruments the application binary that can enable both DAST-like confirmation of exploit success and SAST-like coverage of the application code. In some cases, IAST allows security testing as part of the general application testing process, which provides significant benefits to DevOps approaches. IAST holds the potential to drive tests with fewer false positives/negatives and higher speed than SAST and DAST.