Dynamic Application Security Testing
Probing a running application for vulnerabilities from the outside, the way an attacker would. Complements SAST, which reads the code instead of poking the app.