The difference between SAST 和 DAST is the time at which the application 和 its code are scanned. SAST scans the application while it’s at rest 和 DAST scans the application while it is running (also known as “at runtime”).