There are different types of application security testing, which can be categorized by access to the source code (black-box, white-box, and grey-box testing); techniques (vulnerability scanning, security scanning, penetration testing, security audit, ethical hacking, risk assessment, posture assessment); tools (static, dynamic, or interactive, mobile application security testing, software composition analysis).