Practices and frameworks for application security testing throughout the software development lifecycle. Covers SAST, DAST, IAST, dependency scanning, security unit testing, integration testing with a focus on OWASP vulnerabilities, validation of authentication and authorization controls, input validation testing, and secure sensitive data management.