Is there a startup that can help automate custom attacks on websites? Like guide the webmaster to look for holes in their setup. I'm guessing some security expert can do a good job educating new businesses on how to prepare for the big bad world.
Owasp is also a good resource for learning: https://www.owasp.org/index.php/Main_Page