The enterprise risk management firm joins the open-source FindBugs project to help beef up the security and quality of Java programs.