Many firms still failing to test and secure web applications, says Rapid7 | Hacker News Reader