Hamed has put a checklist with very good references here : https://github.com/hameds/security-checklist-fa I think it is a good idea to dedicate a part of this project or use it in landings