Static and dynamic application security testing (SAST, DAST)