Zero days are incredibly dangerous. The world was taken by surprise by the Log4Shell zero day, and many organizations are *still* in the process of searching for the elusive log4j library. But open-source is just the tip of the iceberg. The average enterprise web application and API is has dozens of zero-day vulnerabilities and is attacked thousands of times per month. In this talk, we will talk about *preparing* for the next zero day, whether it’s in a library *or* your custom code.