What is Security Testing

Definition

Security testing is the practice of evaluating software to uncover vulnerabilities, weaknesses, and risks that attackers could exploit, verifying that confidentiality, integrity, and availability are protected through techniques such as vulnerability scanning and penetration testing.

« Back to Glossary Index

Uncovers exploitable vulnerabilities before attackers can find them
Verifies that confidentiality, integrity, and availability hold under attack
Reduces breach risk and supports compliance with security standards
Builds trust by demonstrating the application resists common threats

Real World Example

Before launch, a team runs security testing including a penetration test, which uncovers an injection flaw in a search field that could expose database records, allowing the team to fix it before release.

FAQs

What does security testing look for?

It looks for vulnerabilities and weaknesses, such as injection, broken access control, or misconfiguration, that attackers could exploit.

What techniques are used in security testing?

Approaches include vulnerability scanning, penetration testing, static and dynamic analysis, and security-focused code review.

Why is security testing essential?

It reduces the risk of breaches, protects data and users, and helps meet compliance and regulatory security requirements.