WHAT IS INTERACTIVE APPLICATION SECURITY TESTING (IAST)?

Summary from the TLDR DevOps newsletter

Interactive application security testing instruments running applications to find issues like SQL injection and XSS with fewer false positives. It suits QA and staging but needs runtime agents, adds overhead, and scales poorly across microservices, so mature programs pair it with SAST and SCA.