Startup security: The invisible threat