[tonyjstark]

I would love to have someone in or next to my team to teach me/us about security flaws that I produce. I sometimes look into the basic stuff from OWASP and hope to catch the most common things but I miss someone dedicated with a lot of experience. The biggest hurdle that I see so far is to educate the teams to plan in the time to actually check for vulnerabilities. The constant pressure to deliver new features in the SCRUM environment makes many things that should be part of proper software development a though sell.