---
id: 1265
title: "The Cost Savings of Fixing Security Flaws in Development"
source_domain: hackerone.com
source_url: "https://www.hackerone.com/blog/cost-savings-fixing-security-flaws"
published_at: "2025-02-25 16:33"
tags: ["cloud", "vulnerability-management", "sast", "risk-management", "roi", "return-on-mitigation", "shift-left-security", "sca"]
phying_url: "https://phying.com/item/1265"
lang: en
---

# The Cost Savings of Fixing Security Flaws in Development

## Summary

HackerOne argues shift-left security is hard to justify via ROI and proposes Return on Mitigation (RoM), estimating avoided losses such as ~$150K for catching a high-severity SQL injection early.

## Intelligence Metadata

- **Sources:** hackerone.com
- **Published:** 2025-02-25 16:33
- **Original:** https://www.hackerone.com/blog/cost-savings-fixing-security-flaws
- **Phying News:** https://phying.com/item/1265
