Security review in QA testing is not an afterthought. It is a deliberate process that detects vulnerabilities before they reach production. It examines authentication, data storage, API endpoints, permission levels, and session handling. Each layer of the application must be tested against known threats: SQL injection, XSS, CSRF, privilege escalation,