Securing your database, APIs, files « Basic Web App Security: When and What to EncryptBackups and Recovery: When Things Go Wrong »