What can you tell us about the rest of your stack?
What language(s) do you use?
What libraries do you use?
What static and dynamic security analysis tools do you use?
What style guides and code best practices do you use?
Where do you host your code?
Where are your backups?
Where are your POPs located?
Have you had any pen tests run?