Security Audits

A lot of the best software developers are already doing things like security audits. The way audits are dealt with now is you just know who has the best reputation, and so you use them. But there should be some sort of standard that people know and abide by at least when you're getting your audits done. A mandatory disclosure regime before publishing it without prior restraint is a bad adverb. What I'm talking about as far as strength is where you have an area of right to do something without the bare minimum requirement.