Security is often the black sheep of testing—an afterthought that gets only a scan before release. We have to make security a first-class testing citizen with full-lifecycle support. For the best impact, introduce security testing into the early phases of the continuous testing pipeline. Here are some tools to help.

Google’s new Android App Bundle is a publishing format that offers a more efficient way for developers to build and release apps. It creates lean application APKs that are optimized for each device configuration, without refactoring. This means engineers need to code less, and users are happy to get a smaller download.

Some defects require a fix, without a doubt. But not all defects are created equal, so careful thought should be applied before a defect is fixed. The goal isn’t to fix every reported defect; it’s to return value to the customer and profit to the company. These eight questions can help in the decision-making process.