Quick turnarounds on fixing vulnerabilities usually correlated with general engineering operational excellence. The best cases were clients who asked us to just give them a constant feed of anything we found, and they’d fix it right away.
Lots of interesting tidbits here from dozens of startup code audits.
https://kenkantzer.com/learnings-from-5-years-of-tech-startup-code-audits/
