End-to-end change tracking for triggering website security review

A system, comprising:

• at least one computing device that implement one or more services, wherein the one or more services:
• determine an end-to-end request path associated with an application frontend;
• identify a change to a service in the end-to-end request path;
• determine a weight value to associate with the change, the weight value based at least in part on characteristics of the change;
• aggregate the weight value with weight values associated with other code changes of services in the end-to-end request path to produce a collective weight of code changes;
• and
• determine, based at least in part on the collective weight reaching a value relative to a threshold value, to trigger a security review.

A non-transitory computer-readable storage medium having stored thereon executable instructions that, as a result of being executed by one or more processors of a computer system, cause the computer system to at least:

• determine an end-to-end request processing graph for an application frontend of a web site;
• determine that a change to a service in the end-to-end request processing path;
• determine a weight value to associate with the change, the weight value based at least in part on characteristics of the change;
• aggregate the weight value with weight-values associated with other code changes of services in the end-to-end request processing path to produce a collective weight of code changes;
• and
• determine, based at least in part on the collective weight reaching a value relative to a threshold value, to trigger a security review.