Mendix CF Buildpack does not meet OWASP standards

1
After some pen tests of our applications it seems that the Mendix CF buildpack does not meet OWASP standards. Question is who is responsible that the (default) CF Mendix Builpack meets the OWASP standards? Please let me know your opinion!  
asked
0 answers