DAST tools requires a running application to find the vulnerabilities

SAST can be very effective during the "code development" phase of the SDLC

Threat modelling involves reviewing the source code to identify potential security issues

Establishing incident response helps in effectively dealing with security incidents when they happen