Read OWASP ASVS. That's a really good start, if you did everything yourself, you will find many issues even without further analysis of code.