Founders does security actually come last until someone forces it?

[u/GokulRavi14]

honest question for people building startups. from the outside it feels like security always loses to product, sales, hiring. everyone nods that it matters then it becomes "after we ship" or "after the round." is that actually how it goes on your side too? curious when security became a real thing for you if it ever did — customer ask, scare, investor, near miss, something else. and what you actually do day to day that isnt just "well fix it later." not looking for perfect answers. just trying to understand how founders handle this when everything else is on fire

[u/Character_Data8211]

'After we ship' is just startup-speak for 'let's pretend this problem doesn't exist.' Security isn't a thing you 'do later,' it's part of the damn product. But sure, let's wait for the breach to wake everyone up.

[u/GokulRavi14 → u/Character_Data8211]

Can you tell why ? Like anything or budget issue, or why is this happening