Insights from application security