Why don't you guys take advantage of developing open source software?
Netsparker and probably other companies provide open source licenses for this purposes.
Also, with this way, your developers can learn their mistakes by this way and use that information for non-free and private projects.
https://www.netsparker.com/blog/news/free-online-web-application-security-scans-open-source-projects/