Business security often begins with good intentions and ends with a patchwork of measures that no longer reflect how a site actually works. A growing company may add