> Every company should have a team (or depending on size, at least a person) dedicated to the security of software and infrastructure.
Two competitors in a space. One has 3 developers and 1 security guy, the other has 4 developers.
In 99/100 outcomes, all else being equal, the 4 developer guy will add more features and outpace the other team and win the market.
Security is an overhead and a drag on company resources.. until it's not.
But how many startups fail due to lack of a security team? I cannot think of any from my RL network. I am sure some exist... but otherwise, this is the same as most "safety" measures... unimportant until it is really important.
Two competitors in a space. One has 3 developers and 1 security guy, the other has 4 developers.
In 99/100 outcomes, all else being equal, the 4 developer guy will add more features and outpace the other team and win the market.
Security is an overhead and a drag on company resources.. until it's not.
But how many startups fail due to lack of a security team? I cannot think of any from my RL network. I am sure some exist... but otherwise, this is the same as most "safety" measures... unimportant until it is really important.