Secure by Design is changing the game of software risk, by shifting security liability to software producers. But organizations do not have the tools they need to verify their releases — and deliver trust. Here’s what’s needed to get real about Secure by Design.