Computer software for identifying and correcting security defects found during the software development and testing process