Some articles. SAST, DAST, IAST, and RASP explanation DAST Tools Wapti OWASP Zed Attack Proxy Project (ZAP) Awesome Node.js Security Resources OWASP Proactive controls Source Code Analysis Tools