Threat modeling together with training helps reduce vulnerabilities.
SecureFlag can assist in teaching developers about threat modeling and building threat models.