[theshrike79]

If a company specifically doesn't have a dedicated security team (or even a person), this will never get done.

Most software companies sadly don't hire a dedicated (software) security expert.