A development team is using CI/CD during application development. During the latest releases, runtime vulnerabilities have been indicated. To address these vulnerabilities, a complete redesign of the

Vulnerability management is a broader process of identifying and remediating vulnerabilities, not a specific automated black-box testing tool for CI/CD.

Dynamic Application Security Testing (DAST) tools perform 'black-box' testing by actively scanning a running application from the outside, simulating real-world attacks to identify runtime vulnerabilities that manifest during execution in a CI/CD pipeline.

Threat modeling is a design-phase activity to identify potential threats before coding, not an automated black-box testing method for a running application.

Source code analysis tools (SAST) perform 'white-box' testing by analyzing code without execution and do not identify runtime vulnerabilities through black-box testing.