Interactive application security testing (IAST) software inspects and analyzes an application's code from within to discover security vulnerabilities while the application is running. IAST software only executes at specific tester-defined points. When vulnerabilities are discovered, the software notifies testers and offers remediation suggestions to help teams resolve the issue.