Both test types use the same assertion editor, but you navigate there different ways.
- Functional > TestStep Editor > assertion editor
- Security > TestStep Editor > Add Security Scan > Select TestStep > Configure Parameters > assertion editor
Security and function
- any regular server response
- response headers (must be scripted)
- security scan
- SLA
- http status codes
- SOAP extension, fault status, etc
TestCase > Load Test > Load Test Editor > assertion editor
- number of errors
- TPS
- avg response time
Please see this file
- [YouTube Automation Step By Step] , Raghav Pal Assertions using xquery, xpath, jsonpath, compliance & contains assertion types
https://youtu.be/S01IWefBu8o?list=PLhW3qG5bs-L-Bt9T_bnyflQ0Te4VgFhKF