It refers to the process of analysing files, plugins, and website core to identify areas of potential threats and vulnerabilities in your site. It could include penetration and configuration tests and dynamic code analysis.