Your projects security

Hey,

i know security is an annoying topic, often it only gets relevant after bad things happened.
Some company's run bug bounty programs to get vulnerability's reported before they get found/exploited by malicious actors.
I was wondering what indie hackers do about securing their projects/products.
I added a poll with different possibilities, if none matches your case please leave a comment bellow.