ASK:Enterprise Security Solution

How Enterprises track/run security testing before releasing the application in production? Do they use any standard portal or use Jira or something?