Not waving but drowning
There is a point in every transition into security conscious development where you look at your bug tracking system and despair.
It doesn’t matter if you have fancy SaaS project management tools or a stack of crumpled aging post it notes to convey the message…