My group is similar.

Note there are other groups here (security and platform people) watching various stuff and sometimes that causes a proactive review. Also we have an IPS which is proactive - but you can't credit my group with that.

That's the 'general' answer - there are applications that get much more attention.

Mostly our 'general' way of doing business is driven by the customer's budget.