Security is a core concern, and should be adopted and asserted from the start. Doing so, will avoid many of the problems found typically in production that are hard to solve.

Security testing can be performed closer to the code (shift left) or continuously in production (shift right).