Just when you think your application is free of defects, you find security vulnerabilities lurking beneath the surface. Penetration testing can help you get them before they get you. Ryan English discusses vulnerabilities and offers five steps to organizations looking to start a Web application security initiative.

In January, StickyMinds.com introduced a new eNewsletter that covers tools and automation for the software development lifecycle. In this month’s Tool Look column, the editors of Better Software magazine and StickyMinds.com present a sample of what you can read each month in the Sticky ToolLook.

Have misplaced priorities or a lack of focus allowed your development project to run wild? Don't let a stampede of defects, repairs, and requirements change drive your project. Follow Robert Galen's advice, and corral that development with release criteria.

Poor software design will slow down even the most well-meaning code. Code smells are one element of poor design to watch out for in your projects. C. Keith Ray explains how you can start washing away your code smells with a dose of code refactoring.