Fuzz for low hanging fruits. Analyze code: peer review, bounty, ... Harden through invariant checks and logic checks. Make your system/code anti fragile by d

Fuzz for low hanging fruits. Analyze code: peer review, bounty, ... Harden through invariant checks and logic checks. Make your system/code anti fragile by detecting wrong encoding, reporting it (uh-huh, yeah, think that any code even reporting/logging is an attack surface, hint hint log4j) and treating future traffic from source of attacks as a way to train your defense. Create a culture of security: simple architecture, design workshops, threat modeling, thinking about what someone with attacker mindset would do, value experience (coming defense source) AND involve newbies (they will try again what didn't work in the past, and sometime it works)