We’ve just posted a basic list of simple practices you can apply that will take you towards the goal of bulletproof-security (this is not a complete list, but something to get you started), take a look at Simplest Security Best Practices .