Ask HN: Startup doesn't require SECURITY team
I’ve noticed a frustrating pattern across startups (at any stage, not just early): security is often neglected or downplayed. Under intense product and growth pressures, developers (who already wear multiple hats) sometimes end up: - Pushing secrets or credentials to code repos - Writing vulnerable or buggy code - Avoiding security scanners/testing because they “slow things down” ...