Top AppSec metrics and why they are hard to measure | Hacker News Reader