Security testing
Checking that data and features are protected from unauthorized access and attacks.
Definition
Security testing looks for weaknesses that could let attackers steal data, take over accounts or misuse the system. Manual testers can check basics such as session timeout, access to other users' data and how sensitive data is shown or stored.
In practice
You change the order ID in the URL from /orders/1001 to /orders/1002 and can see another customer's order. That is a serious security bug.
Learn it in context
Lessons that use this term.