Application security baseline - input validation, authentication/authorization, secrets, dependency hygiene, and a security-review checklist for code and PRs.
