Static and dynamic application security testing allows developers to find vulnerabilities in their applications before they’re publicly available. The two types of tests look at the app differently; static uses an approach where testers physically go through every line of code with highlighters, pencils, etc., while dynamic looks more like hackers who will try anything from changing variables on screen as well as injecting new ones into your program’s logic if possible — all without breaking any functionality!