QA teams use IAST tools in conjunction with scanner tools, so security can be validated in the same way that regular functionality is validated. Seek IAST solutions that integrate with your deployment server (such as Jenkins).