Measures taken to improve the security of an application, often by finding, fixing and preventing security vulnerabilities