Our entire code and configuration are continuously peer-reviewed against the standard coding best practices. Depending on the type of project or change done, we use different standard frameworks like OWASP, STIG, CIS, etc.