The practice of integrating security testing and considerations earlier in the software development lifecycle.