Design authorised security tests for applications, APIs, infrastructure, identity, data, abuse, configuration, and resilience.