A natural progression from web development to web security?