Security Testing: Systematically identify security risk from assets, permissions, and attack surfaces
Prioritize security risks across identity, input, data, and dependency boundaries by exploitability and impact; record reproduction, fixes, and retests.