SAST - Security policy project