Summary of security and privacy frameworks 

The adoption of any security framework requires not only the consideration of business needs but also the fit into the existing architecture. Here is the summary of the industry practices, tools, and frameworks that we discussed in this case study:

Security improvement area	Open source security and privacy framework
Authentication	Gluu: it's for multiple-factor authentication and social login. CAPTCHA is commonly used to prevent machine logins. The HCaptcha, ReCaptcha, Patcha are the open source solutions to be considered.  Git-Secret: For the protection of sensitive information in source code repositories, consider using the tool for the development team.
Authorization	Gluu: It also provides the user consent management Apache Shiro Session Management OWASP CSRF Guard can generate a secure token to protect the CSRF attack.
API manager	The following open source frameworks can be considered to apply the API manager to secure the external restful API interfaces...