Building serious web application in #FinTech on OutSystems, think secure code. SANS top 25 always comes in mind along with OWASP. On the OutSystems platform, there should be an option to run the application against SANS top 25 software errors. It is a list of the widespread and critical errors that can lead to serious vulnerabilities in the software. 

Possible option:

• LifeTime is the best place to run this before we tag the application and proceed with deployment to quality or production.
• It should be configurable in a deployment plan (to make this a manual step or automatically done each time we start with tagging)
• It MUST not stop the regular process of promoting the application to higher environments
• It should provide the scan result and store against each application tag

• The scanner should provide detailed information 

• and, better if how to how to fix the errors  :)