When should security testing be performed? Security testing should be carried out at all stages of the software development lifecycle (SDLC), from requirements gathering to deployment and maintenance. Other useful terms and definition How can I implement a security testing program in my organization? What is the difference between security testing and security scanning? What are the different types of security testing?