For more than a decade, application security programs were built primarily around static analysis. Security teams scanned code…