Security testing is more than doing a port scan. Read the bug reports for the operating system and development software. Are you vulnerable to cross-scripting scripting? http request smuggling? Think about the people involved in operating and maintaining the software. Are they vulnerable to social engineering? Secure design documents. Shred anything that you don’t plan to archive and that contains proprietary information about your software.

This concludes the week of testing topics. Do not be shy to tell me what you think.