“Application security should shift further left in the process and be incorporated in every step for organizations to build trust in their software."