While checking features and functional correctness were once the core focus of quality assurance, QA teams are increasingly responsible for validating that applications also behave securely in real-world conditions. However, as systems become more distributed, cloud-native, and interconnected, traditional security testing approaches struggle to reflect how threats actually unfold in production environments.