Here is a nice list of services, tools and practices for software development (part one and part two). Most of these are on our standard list of tools for every project (tied together via Apache Maven). The first tool (code repository) is bordering on such a minimally basic tool for any team project it's hard to imagine not using source control - but we talk to people all the time that don't even have that set up. The only one that we don't typically integrate into our automated builds is a security scanner. We typically use frameworks and tools that drive good coding practices (e.g. MyBatis or Hibernate/JPA) to avoid obvious problems, and then we use security tools to do audits at various points in the project, adding any discovered vulnerabilities as negative automated test cases to be performed via web testing tools (e.g. Selenium).