New security vulnerabilities are found almost daily. When they are, the affected software must be retrofitted with an appropriate patch while companies fend off the wrath of customers. Applications have become the most fertile ground for attackers to ply their trade -- seeking out the seemingly innocuous features and utilities in today’s complex systems that can give them unauthorized access. Each newly discovered vulnerability results in a frantic patch, halfway deployed, that potentially opens up another hole -- all taking days, weeks, or months to implement throughout an installed base. Meanwhile, new vulnerabilities continue to be found, making the game of catch-up never-ending. The critical place to address security vulnerabilities is in the software development process. This white paper discusses the challenges of enabling security in the software development process and introduces Cenzic’s solution to automate security quality assurance with its five-step methodology.