Initially determining which areas of the codebase should be reviewed including which specific modules, components or functions. Collecting documentation, design specifications to understand the context and potential threats.

Using automated tools to scan for vulnerabilities, errors in coding, and any sort of security issues.Then evaluating the results to detect potential vulnerabilities

Focuses on components of codes that are of high risk such as authentication, authorization, and data handling functions. Making sure that proper guidelines are used including input validation, error handling,and encryption.

Identifying potential threats specific to the application, including possible components that can be attacked, and risks of data leak. Linking these threats to the vulnerabilities to understand to what extent of an impact this would create.

Document and record detected vulnerabilities, their possible impacts, and any lack in coding. Suggestion for remediation and improvements to increase the overall security of the code

Making sure that vulnerabilities have been solved after applying the suggested fixes. This process also makes sure that the fixes do not affect the functionality or may lead to new security issues.

Suggesting new protocols and guidelines to ensure and maintain a high level of security standard