Modern WebAppSec techniques can be used to secure websites with minimal efforts and reduce the time and cost spent dealing with security vulnerabilities. This talk presents seven practical steps that every engineer can adopt, and shows tools and techniques developed at Mozilla to protect the security of Firefox's backend websites and services.