{"type":"doc","content":[{"type":"paragraph","content":[{"type":"text","text":"You've built a great product. An enterprise prospect is ready to buy. Then their security team sends over a vendor questionnaire — and your deal stalls for months. Or dies entirely."}]},{"type":"paragraph","content":[{"type":"text","text":"Here are the five security gaps I see kill startup enterprise deals over and over:"}]},{"type":"heading","attrs":{"level":2},"content":[{"type":"text","text":"1. No SOC 2 — Not Even Started"}]},{"type":"paragraph","content":[{"type":"text","text":"Enterprise buyers don't expect you to have SOC 2 Type II on day one. But they want to see you've started. A readiness assessment and a timeline shows you're serious. No SOC 2 story at all? That's a red flag they won't ignore."}]},{"type":"heading","attrs":{"level":2},"content":[{"type":"text","text":"2. Hardcoded Secrets in Your Codebase"}]},{"type":"paragraph","content":[{"type":"text","text":"API keys, database credentials, and tokens sitting in plain text in your repo. It's the most common finding in security reviews and the easiest to fix — use a secrets manager. If an enterprise security team runs a basic scan and finds this, the conversation is over."}]},{"type":"heading","attrs":{"level":2},"content":[{"type":"text","text":"3. No Incident Response Plan"}]},{"type":"paragraph","content":[{"type":"text","text":"\"What happens when you get breached?\" If your answer is \"we'll figure it out,\" you've lost the deal. You need a documented plan — even a one-pager — that covers detection, containment, communication, and recovery."}]},{"type":"heading","attrs":{"level":2},"content":[{"type":"text","text":"4. Everyone Has Admin Access"}]},{"type":"paragraph","content":[{"type":"text","text":"When every engineer has root access to production and every employee is an admin on every tool, you have no access control. Implement role-based access (RBAC) and the principle of least privilege. It takes a day to set up and saves deals."}]},{"type":"heading","attrs":{"level":2},"content":[{"type":"text","text":"5. Ignoring Data Residency Requirements"}]},{"type":"paragraph","content":[{"type":"text","text":"Selling to European companies? They need to know where their data lives. If you can't answer \"where is customer data stored and processed?\" with specifics, you're not ready for those contracts."}]},{"type":"heading","attrs":{"level":2},"content":[{"type":"text","text":"The Fix"}]},{"type":"paragraph","content":[{"type":"text","text":"None of these require a massive security team or six-figure budgets. They require someone who knows the playbook to guide you through it efficiently. That's exactly what ShieldPath is built for — subscribe to get direct access to a security advisor who'll help you close those enterprise deals."}]}]}

{"type":"doc","content":[{"type":"paragraph","content":[{"type":"text","text":"ShieldPath Consulting gives early-stage startups direct access to a cybersecurity advisor. Here's what's inside:"}]},{"type":"heading","attrs":{"level":2},"content":[{"type":"text","text":"🔒 1-on-1 Security Advisory Chat"}]},{"type":"paragraph","content":[{"type":"text","text":"Architecture reviews, vendor risk assessments, compliance questions, incident triage — ask anything. Responses within 24 hours on business days."}]},{"type":"heading","attrs":{"level":2},"content":[{"type":"text","text":"📡 Weekly Threat Briefings"}]},{"type":"paragraph","content":[{"type":"text","text":"Every week: the vulnerabilities, breaches, and regulatory changes that actually matter to startups. No noise — just what to know and what to do."}]},{"type":"heading","attrs":{"level":2},"content":[{"type":"text","text":"📋 Custom Compliance Roadmaps"}]},{"type":"paragraph","content":[{"type":"text","text":"Working toward SOC 2, ISO 27001, or GDPR? Get a prioritized roadmap built around your stack and stage."}]},{"type":"heading","attrs":{"level":2},"content":[{"type":"text","text":"🚀 Getting Started"}]},{"type":"paragraph","content":[{"type":"text","text":"Members: head to the Security Advisory Chat and introduce yourself — your company name, your stack, and your biggest security concern. I'll point you in the right direction immediately."}]}]}