We also have mandatory security training for all developers. Turning every developer into a security reviewer helps a lot. It's nothing compared to the knowled

We also have mandatory security training for all developers. Turning every developer into a security reviewer helps a lot. It's nothing compared to the knowledge I got by working in app sec or teaching network security, but it's pretty good for increasing the base of knowledge among general developers.