Dynamic application security testing, Static Application Security Testing, Azure DevOps, Secure coding standards, SBOM generation and governance, Software composition analysis, Manual secure code review, Software supply-chain security, Application penetration testing, Build provenance artifact integrity and signing, Container and application image security, Cloud-native and serverless application security, Infrastructure-as-code security, Application security tool ownership and operation, Secrets detection and prevention, API security testing, Secure software development lifecycle governance, Interactive application security testing