99.7% of web apps have at least one vulnerability. Yet, most security professionals admit their app security strategies are immature.