Very useful tool out there called Patterns & Practices Guidance Explorer, it contains hundreds lists of security & performance best practices and patterns. The usage scenarios are: 1. Improve the security and performance of your application with guidelines and checklists that match your application exactly. 2. You can build custom sets of guidance and share with your team as recommended practice. 3. You can add new guidance to the library to share with your team, your company or the larger development community.