Static application security testing (SAST) is an important part of prerelease application testing that can identify tricky dataflow issues. It can also catch issues such as cross-site request forgery (CSRF) that other tools, including dynamic application security testing (DAST), have trouble finding.

According to The Forrester Wave™: Static Application Security Testing, Q4 2017, SAST remains critical to eliminate proprietary software vulnerabilities so attackers can’t exploit them in production. Download this report to see what’s new and why Forrester has named Synopsys a Wave Leader.