Which method involves testing a codebase to ensure it is secure?

Static Application Security Testing is a method specifically designed to analyze codebases for security vulnerabilities without executing the code. This approach involves examining the source code, bytecode, or binary code to identify potential security issues, such as coding errors or weaknesses that could be exploited. Static analysis tools can automatically scan for known vulnerabilities, coding standards, and best practices, helping developers identify and rectify security flaws early in the development cycle. This is crucial for ensuring a secure application before it is deployed.

While other methods like Application Vetting, Dynamic Analysis, and Code Review also contribute to software security, Static Application Security Testing is uniquely focused on static code examination, which can be conducted without the need for the application to be running, thereby providing a thorough analysis of the coded components against security vulnerabilities.