Fortifying Flavors: A Comparison of Security Programs and the Path to Maturity