I once heard about a small SaaS company that spent months polishing their product before launch — sleek design, smooth onboarding, everything a customer could want. What they hadn't spent much time on was security. Three weeks after going live, a competitor's blog post quietly mentioned that their client data could be accessed through a…