Security is a quality that is hard to measure in my opinion. Is using good standards and industry standard tools enough to prevent bad actors to exploit your system? Oauth2, hashed and salted passwords....

Are there any certifications that big companies care about?