What about Security in your project? Do you take Security seriously?

Or is everything that concerns security only performing a penetration test just before going live?