Software security testing is focused on identifying and assessing vulnerabilities that can compromise software protection. A type of non-functional testing, it does not verify if software fulfills its intended functions but examines whether it is securely designed, developed, and configured to withstand potential security threats.
Types: vulnerability assessment, penetration testing, secure code review, compliance assessment, and security audit.
Major cost factors: the number and complexity of the testing targets, the testing types and techniques, the composition of the security testing team.