software production security