Security Testing in Agile Development

Security must keep pace with agile delivery.

Sprint Security Activities

- Security stories in backlog
- SAST in CI pipeline
- DAST in staging
- Dependency scanning
- Code review checklists

Automation

- Pre-commit hooks
- Pipeline security gates
- Automated pen testing
- Container scanning
- IaC security scanning

Metrics

- Security debt trends
- Vulnerabilities per sprint
- Fix rate velocity
- Security test coverage