A DevOps team must ensure security throughout the CI/CD pipeline production and test these principles: Ensure vulnerabilities are found early in the development lifecycle. Use less resources for troub

RASP (Runtime Application Self-Protection) integrates into an application to prevent attacks in real-time, but it does not primarily focus on finding vulnerabilities early in the development lifecycle.

DAST (Dynamic Application Security Testing) scans a running application, finding issues later in the development cycle, which typically incurs higher remediation costs compared to SAST.

SAST (Static Application Security Testing) analyzes source code without executing the application, enabling early detection of vulnerabilities ('shift left') in the development lifecycle, which significantly reduces troubleshooting resources and remediation costs.

Unit testing focuses on verifying individual code component functionality and is not designed for comprehensive security vulnerability detection across the codebase.