Security vendor says offshore development needs checks