Confidentiality and integrity of data is paramount to applications that are hosted in the cloud and to applications that interact with other cloud services. The SeCLoud project therefore investigates a security-first and holistic approach to engineering such cloud- based applications. To this end, its 11 academic partners cover security from the complementary perspectives of secure architecture (e.g., patterns), secure infrastructure (e.g., encryption), secure programming technology (e.g., vulnerability checking) and secure processes (e.g., requirements engineering and legal aspects). VUB-SOFT leads the secure programming technology perspective, to which we bring our expertise in dynamic and static analysis of JavaScript programs.