Dynamic Application Security Testing (DAST), also known as “black-box” tools, test products during operation and provide feedback on compliance and general security issues. These tools are used during the testing and QA phase of the SDLC.