A vulnerability found in a code review costs a developer a few minutes. The same flaw found in production costs an incident response, a patch release, ...