Servers without a security team¶

Most incidents affecting startups and small engineering teams happen because of known, preventable things: credentials in configuration files, password authentication left enabled on SSH, software unpatched for months, services reachable from the internet that have no business being there.

Teams running their own servers, web applications, mail, and containers without a dedicated security function carry the security work themselves, usually through whoever is closest to the systems.