Security is not an add-on, but an integral part of the software lifecycle. This presentation shows how security measures can be systematically integrated into all development phases. From risk and threat analyses to analyzers, secrets scanners, and dependency checks to API security tests and operation with tools such as Microsoft Defender for Cloud. You will learn where security gaps often arise in practice, what risks are involved, and how you can avoid them with reasonable effort.