RASP, or Runtime Application Self-Protection, sees it happen in real time. It tracks the execution inside the application itself, not just at the perimeter. When sensitive data is at risk—credit card numbers, tokens, API keys—it can intercept, block, or modify behavior before the data leaves the process. This