https://www.pivotpointsecurity.com/dont-dump-application-security-on-your-developers/