We had our 7 year old platform audited by a security team. They found about 2 errors related to some APIs leaking some info - like whether a username existed Th

We had our 7 year old platform audited by a security team. They found about 2 errors related to some APIs leaking some info - like whether a username existed They found 3 to 4 issues with the server config like using older SSL algorithms or exposing the servers identification (like nginx) None of these could really be used to exploit anything. If you just follow some common sense and start with a good architecture initially, security isnt something that needs extra particular attention.