Security testing is done by testing the accessibility and the data protection level, testing for malicious script, testing access points, testing session management, and testing the error handling.