The practice of applying mandatory security controls during the development phase of products. Tools SAST DAST Continuous Integration Software Composition Analysis