In a startup, security and operations discipline can be easy to put off until later. This talk will look at how adding concepts like change control, testing, regular patch management and centralized logging, common in regulated environments, can be implemented efficiently. In any web services startup, these processes can help rather than hinder productivity, both in terms of stability and security.