Despite all the coders contributing to OpenSSL, they somehow missed an obvious buffer overflow bug that could be spotted in a production or test environment without even examining at the source code. Somehow there was no systematic testing.
Underwriters Laboratories tests and certifies electronic equipment, so maybe software too.
"Do not seek to follow in the footsteps of the wise. Instead, seek what they sought." - Matsuo Basho