Systematic analysis of source code to identify security vulnerabilities, logic flaws, best practice violations, and architectural weaknesses before deployment. Covers static analysis techniques, manual code review, verification of insecure patterns (injection, XSS, CSRF, hardcoded secrets), compliance with secure coding standards (OWASP, CWE, CERT), and integration into DevSecOps pipelines.