Which application security testing method is considered most costly?SASTDASTboth a and bNone of the above

The most costly application security testing method can vary depending on the specific circumstances, such as the complexity of the application, the expertise of the testing team, and the tools used. However, generally speaking, Static Application Security Testing (SAST) can be considered more costly because it involves a thorough examination of the source code, which can be time-consuming and require highly skilled personnel. On the other hand, Dynamic Application Security Testing (DAST) involves testing the application in its running state, which can be less costly as it doesn't require access to the source code. So, if we have to choose between SAST, DAST, both, or none of the above, the answer would be SAST.