For users and developers (web application and IDE)

Run penetration tests, code reviews, threat models, and design reviews in the web application, an IDE, or a connected source provider, then review and remediate findings.