“If the first time that you are thinking about security is when you hire an external pen test firm, you are doing it wrong.”

Transcript evidence from Frank Rietta — The convergence of Ruby on Rails and #AppSec.