Software development and security auditing