This test focuses mainly on an application within an organization that is used to perform a very specific set of tasks. Dynamic Application Penetration Tests simulate attacks on applications while they are running. Static Application Penetration Tests analyze the application’s source code to identify coding issues or security vulnerabilities overlooked during development.