SAST vs. DAST – Static & Dynamic Security Testing
Automated Security Scanning (Burp Suite, OWASP ZAP, Nikto)
Runtime Application Self-Protection (RASP)
Threat Modelling