You can start the project avoiding the main traps[0] and advocate and try to attract competent security people to make the application more secure, and build a community around that. You can also hire people to audit the applications, try and secure funding for the effort, and do what it takes to make the project successful.

- [0]: https://owasp.org/