Before deployment: Use tools such as codeql, sonarqube, etc. in your CI/CD pipeline. They scan the repo for known patterns and you can design your own patterns

Before deployment: Use tools such as codeql, sonarqube, etc. in your CI/CD pipeline. They scan the repo for known patterns and you can design your own patterns to automatically check before anything goes out. After deployment: There was a post on HN some days back regarding a tool that you can deploy on your machine to check for common misconfigurations and you can potentially scan the logs to discover issues. Also, I have developed an AI agent to act as a penetration tester (without the knowledge of your codebase or internal system) and discover vulnerabilities. I have been improving it since last year and using it to continously pentest my infra. I'm thinking of opening this up for others. Let me know if you need access to this.