Indie Hackers, how do you protect your customers from cyber attacks?

Hi all!

I am curious to know how IHs tackle the security problem to protect their customers.

In particular:

• Do you use any free or paid security solution? If yes, how do you measure its effectiveness?
• Has your product ever been tested by internal or external security professionals? Was it a code audit, a pentest?