> it doesn't seem unreasonable that you could have a team of 2 or 3 people working on something You can have unlimited developers using the app from accounts w

> it doesn't seem unreasonable that you could have a team of 2 or 3 people working on something You can have unlimited developers using the app from accounts with your domain. You really should get at least 250 users though, since at $10 / user / month that would be enough to cover the cost of the security assessment, and the assets under protection are going to be minimal enough so as to not attract any non-automated attacks.