Security should be part of every stage.
SDLC Phases
- Requirements: Security needs
- Design: Threat modeling
- Development: Secure coding
- Testing: Security testing
- Deployment: Secure config
- Maintenance: Patch managementTools
- SAST: Static analysis
- DAST: Dynamic testing
- SCA: Dependency scanning