[seedie]

My biggest pain point is translating the internal compliance/security requirements into technical measures and monitoring them in real time. Not only infrastructure but also application security. In addition templating solutions and make them easily integratable.

[cookiengineer]

Are you hinting in the "what packages do I update to mitigate CVE #123?" direction?

Or do you hint to something like "How can I mitigate this SQL injection issue in the codebase?"

The former is what my system already does automatically, the latter is something I don't think is solvable in a failsafe manner because it would need a very good Web Application Firewall approach that also knows correlations about the running processes, their opened files and memory dumps (which probably are too performance-cost intensive to be of use in production systems).