Static application security testing (SAST) is a way to perform automated testing and analysis of a program's source code without executing it to catch security vulnerabilities early in the software development cycle. Also referred to as static analysis, SAST is the process of parsing through the code to look at how it was written, checkig for security vulnerabilities and safety concerns. (It is a version of white-box testing.)