Static Code Analysis, Static Scan white-box testing security issues in source code Dynamic Code Analysis, Dynamic Scan scans running applications