I was hoping for something more like: * Check you're storing secrets safely and not in the code * Run a automated security scanner to check for the OWASP top

I was hoping for something more like: * Check you're storing secrets safely and not in the code * Run a automated security scanner to check for the OWASP top 10 * Confirm your endpoints have correct auth/permission checks, and that all debug flags are off * Ensure databases are protected (eg. Not exposed to the internet or heavily restricted) * Enable 2FA for everyone in the company and use a password manager * Check what are the data protection laws and disclosure sla of your country