● Risks
● Purpose & Context – A payment web application will have higher security standards than a promotional website.
● Lines of Code – the more lines, the more bugs
● Programming Language – Unmanaged code → Chances of buffer overflow.
● Resources, Time & Deadlines.
● Automated tool for scanning the source code