Regular security testing, including SSRF vulnerability assessments, should be performed both during the development phase and as part of continuing security maintenance. The frequency varies according to the complexity of the programme and the rate at which code changes using Website Security Tester.