Hello @AThapliyal864834 (Community Member)​ ,

Static application security testing (SAST) is a testing process that looks at the application from the inside out. This test process is performed without executing the program, but rather by examining the source code, byte code or application binaries for signs of security vulnerabilities.

Dynamic application security testing (DAST) looks at the application from the outside in, by examining it in its running state and trying to manipulate it in order to discover security vulnerabilities. The dynamic test simulates attacks against a web application and analyzes the application’s reactions, determining whether it is vulnerable.  

Further information can be read here: https://www.veracode.com/blog/secure-development/static-testing-vs-dynamic-testing

DynamicMP (Massively Parallel) allows you to rapidly identify and remediate SQL Injection or XSS error-related security issues in their running web applications across thousands of externally facing websites before hackers can exploit them. DynamicMP can produce results within hours or days, versus months or years.

Further information can be read here: https://www.ndm.net/sast/veracode-dynamic/veracode-dynamic-mp

If the information we’ve provided you has helped resolve your challenge (or answered your question), we would appreciate it if you could mark the response that was helpful with “Select as Best”. This will help other Community members who come across your question as a similar challenge they might be facing and your best answer will help them find the right solution as well.

Jason

Veracode Support Engineer