http://www.slideshare.net/dashorst/keep-your-wicket-application-in-production
I guess we should at least implement some of the suggested tips:
xhtml validation, improve our existing wicketTester usage,
serializable checker, request logger.
Security wise we rolled our own already, and ... well, I'm not sure
I want a rabbit on my desk 
Cheers
Andrea
--
Andrea Aime
OpenGeo - http://opengeo.org
Expert service straight from the developers.