SAST requires access to an application’s source code. It involves analyzing the code without executing the application.