Startups tend to treat security as an aspect that can be “implemented later,” usually after traction appears or investors start asking uncomfortable questions. In fact, most serious incidents happen long before a company considers itself a target, while web application breaches account for roughly 25% of all reported incidents, driven...