Finding bugs is easy, but fixing them is the real bottleneck — here is how to convince your board to fund your security ...