https://vulert.com/blog/how-to-prioritize-application-security-in-software-development/