The report from a software company’s vulnerability scan comes back looking reassuring. The scan flags no major issues. The development team carries on, sure that