SafeStack Academy logo

Security Foundations for Software Testing

  • Takes approximately 1.5 hours to complete


Security testing is a type of software testing that allows you to uncover potential vulnerabilities or weaknesses. These weaknesses lead to security risks — which could impact the system, data, or users.

Just like how software testing is performed to check that the software is working as expected; security testing is performed to tell if the software can be misused or exploited to make it do something it shouldn’t — such as give you more data or access than you should have, or make the systems unreliable or unavailable.

In this course, we’re going to learn a bit more about what security testing is, and specifically how we can integrate it into every aspect of our software development life cycle.

This is a foundations course, and we will dive into more detail of specific aspects of security testing in later courses.

Course Objectives

  • Build a solid security testing foundation by introducing concepts, terminologies, and ways of thinking that may be new to you.
  • Understand the value of security testing and see where it can fit in our software development lifecycle.
  • Review some common types of security testing, when they should take place, who should be involved, and what tools can help.
  • Identify different challenges and strategies that you can use to create test cases to help you test functionality for security weaknesses.
  • Identify techniques for actioning your test outcome, and working as a team to find solutions.


Module 1: Introduction and The Value of Security Testing

  • Benefits of Security Testing
  • Where Security Testing can fit into the software development lifecycle

Module 2: Types of Security Testing

  • Understand some common types of security testing
  • Learn why it’s done, who does it, and when it takes place in the software development lifecycle
  • Highlights some advantages and disadvantages of certain types of security testing
  • Compare and contrast a few security tests that seem really similar
  • Learn some common Security Testing Methodologies, how they differ, and how they can be applied to your testing practice

Module 3: Planning your test cases

  • How to expand your functional test cases to include security testing
  • Apply some practical examples and exercises to practice functional security testing
  • Understand how to get the most out of exploratory security testing

Module 4: Challenges with security testing

  • What some of the most common challenges are
  • Introduce tips and techniques to overcome these challenges

Module 5: Actioning test outcomes

  • How to communicate the vulnerability and its impact to relevant audiences
  • Understand the difference between internal and external reporting techniques
  • Learn how to follow through with the process to make sure issues are resolved and all lessons learned are fed back into the software development lifecycle

Module 6: Security testing tools

  • Some handy resources to review and bookmark in your favourite browser
  • Introduction to some common security testing tools

Try SafeStack Academy today

See what makes our Secure Development training different with 14 days free trial access.
No credit card required.