Application security testing (AST) suites are the collection of AST technologies and related capabilities that blend SAST, DAST, SCA and often IAST and related coding training. This solution is ideally presented as a tool and / or a service within a single corporate console and reporting framework to offer multiple AST techniques and related technologies as a unified platform.
The best practice in AST is to use multiple technologies at different points along the SDLC to better test the application.

Interactive Application Security Testing (IAST):
Interactive application security testing uses tools that combine dynamic application security testing (DAST) and Static Application Security Testing (SAST) techniques to increase the accuracy of application security test. These tools allow the application success to be approved like DAST and the application code to have a SAST like scope and in some cases, security test as a part of general application test.
IAST can be run alone or as part of a larger AST solution, typically DAST.
Proactively detecting vulnerabilities in the software development lifecycle (SDLC) is less expensive than fixing the vulnerability later while the application is being developed, reducing the overall vulnerability of the application and its data. IAST is useful during the testing phase of the development cycle.