Automated vulnerability scans used by many companies are just scratching the surface. A good risk based assessment digs further. Application Security Risk Assessment is the systematic procedure of identifying, examining, and ranking the probable security threats of a software application. It allows organizations to know what vulnerabilities are a real business risk and what should be addressed immediately.