DAST attacks the running app like a real attacker would

Explains dynamic testing against a live environment, walks OWASP ZAP usage, and contrasts SAST vs DAST directly.