Systematic analysis of source code to identify security vulnerabilities, insecure patterns, configuration errors, and violations of secure coding best practices. Includes manual code review, static analysis (SAST), verification of untrusted input handling, dependency checking, authentication and authorization logic validation, and compliance with OWASP and CWE standards.