'''Interactive application security testing''' (IAST) is a [[Securitysecurity testing]] method that detects software vulnerabilities by interaction with the program coupled with observation and sensors.<ref>https://owasp.org/www-project-devsecops-guideline/latest/02c-Interactive-Application-Security-Testing</ref><ref>https://www.softwaretestinghelp.com/what-is-iast/</ref> It is distinct from [[Staticstatic application security testing]], which does not interact with the program, and [[Dynamicdynamic application security testing]], which considers the program as a [[black box]]. It may be considered a mix of both.<ref>https://www.g2.com/articles/sast-vs-dast</ref>
