Security audit findings: 3 critical, 7 high, 22 medium. Average codebase, average results. Security is never done.