Review, analyze, and/or test the software’s code to identify or confirm the presence of previously undetected vulnerabilities.