Moderator factors of software security and performance verification

•Security and performance verification should be treated with a preventive approach.•The lack of clear requirements jeopardizes security and performance verification.•Some verification techniques are infeasible without the use of support tools.•Security and performance verification requires an isolated environment.•Software with suitable security and performance requires stakeholders’ commitment.