Thanks chris.williamson1996! I tried the security audit from @georgecollier and am currently reviewing the reports (test and live).
And that, for 1$!!