Production security is a continuous process. Use a repeatable checklist before every major launch.
Application
Review authentication, authorization, session handling, input validation and file upload controls.
Infrastructure
Review TLS, DNS, exposed services, security headers, backups and administrative interfaces.
Monitoring
Maintain logs, alerts, dependency updates and an incident response process.