When to check for security? Before I type a line of code, and right after I insert the semi colon for each line. If your code/logic is tight (and you weren't

When to check for security? Before I type a line of code, and right after I insert the semi colon for each line. If your code/logic is tight (and you weren't half asleep during programming), there normally shouldn't be any application-level security vulnerabilities so you should be thinking about security every single line... For more detailed checks, Generally, everything I build is modular, so I do a sec overview after each module is complete. If you wait till the end, it can get really messy. After the app is ready to publish, I check the entire system - I attack it myself and try to plug in all the holes.