Security Manager's Journal: Helping in-house developers