AppSec testing: SAST vs DAST vs IAST, tool comparison, false positive rates, CI integration and remediation guidance.