---
title: "Understanding AppSec Part 3: Testing Your Code – DAST, Pentesting and Red Teaming"
url: "https://www.armorcode.com/podcast/understanding-appsec-part-3-testing-your-code-dast-pentesting-and-red-teaming"
markdown_url: "https://www.armorcode.com/podcast/understanding-appsec-part-3-testing-your-code-dast-pentesting-and-red-teaming.md"
llm_canonical: "https://www.armorcode.com/podcast/understanding-appsec-part-3-testing-your-code-dast-pentesting-and-red-teaming.md"
canonical_for_llm: true
entity_type: "Article"
primary_entity: "Understanding AppSec Part 3: Testing Your Code – DAST, Pentesting and Red Teaming"
citation_value: "Published on ArmorCode; canonical URL https://www.armorcode.com/podcast/understanding-appsec-part-3-testing-your-code-dast-pentesting-and-red-teaming."
last_updated: "2025-02-21T08:01:04-08:00"
---

<h1>Understanding AppSec Part 3: Testing Your Code – DAST, Pentesting and Red Teaming</h1>

The next installment of our 𝘜𝘯𝘥𝘦𝘳𝘴𝘵𝘢𝘯𝘥𝘪𝘯𝘨 𝘈𝘱𝘱𝘚𝘦𝘤 mini-series. Mark and Rohan explore testing methodologies for securing applications in deployment. This episode we cover Dynamic Application Security Testing (DAST), penetration testing, red teaming, and bug bounty programs; explaining how each function uncovers vulnerabilities at different levels. Our hosts highlight the evolution of testing from automated scanners to human-augmented techniques and ethical hacking, and introduce Interactive Application Security Testing (IAST) as a bridge between black-box and white-box testing, emphasizing its value in runtime analysis. The importance of correlating findings across multiple tools to streamline remediation takes center stage, showcasing how integrated approaches reduce time-to-remediate and enhance security strategies.