Security Automation for SMBs: Start Small, Scale Smart