Web Security · Senior · Question 75 of 75
How do automated scanning (SAST/DAST), pentests and bug bounties complement each other?
- 1Pentests replace code review
- ✓Correct answer: Scanners catch common patterns continuously, pentests go deep on a scope at a point in time, bounties add ongoing outside testing
- 3Any one of them makes the others unnecessary
Explanation
Automated tools miss logic flaws like broken authorization; humans miss what they don't have time to cover. Layering them gives better coverage.