Software composition analysis (SCA) means discovering and precisely identifying software components that are known to have vulnerabilities. SCA does not involve security testing, unlike application security testing methodologies such as DAST, SAST, and IAST that find actual security vulnerabilities rather than identifying known vulnerable components.
Find out how DAST+SCA gives you more coverage in a single scan.