What does it take to shape an early-stage security project into a product that solves real problems?