PRAGMATIC SECURITY FOR STARTUPS