3. Often “security” testing gets neglected because its not a visible feature. Imagine new feature without security testing. That can happen