very early in the software’s life cycle. To increase the likelihood that security
problems will be caught as early as possible, developers should include security
tests in their regime of daily builds and smoke testing.
This is not to say that late-stage “tiger team” or “red team” type security