The rapid growth of digital products and technologies has led to increased regulation in the European Union. This, coupled with a shortage of skilled workers, has created a demand for easy-to-use, cost-effective turnkey security testing solutions that produce reliable results. However, applying static analysis or dynamic security testing individually presents challenges, especially in regulated markets. Combining these two approaches to achieve the desired properties is not a straightforward task. In this presentation, we will discuss the solutions and open challenges in the vulnerability lifecycle, and share results from two projects, IntelliSecTest and the EU project DOSS.