Sure - hope it helps. I've sold many security engagements and done the work. I've seen startups first hand usually do not understand their risk unless they've experienced it directly (hack / vuln / PCI / DDOS). It's a hard sell at first.