Dynamic Application Security Testing (DAST) – scans applications at runtime in staging or production environments to discover exploitable vulnerabilities. Web Application Firewall (WAF) – protects production applications against a variety of threat vectors, blocking malicious traffic before it reaches the application.