AppSec scanning FAQ: coverage selection, SAST/SCA/secret/license scope, platform vs single engines, private deployment and gate ROI. For engineering leads and procurement evaluation — a decision frame and checklists to answer leadership questions with comparable conclusions. Where uncertain, follow official docs and the current product version; do not assume undelivered capabilities.