Do you review the security of your application and application code?

Yes, it's standard practice to continuously review security codes.