Ask HN: Security for Saas Startups

I have been looking around for tutorials or advice on securing our web app, but unfortunately there doesnt seem to be any good resources that I could find. Is there any good book on security for startups or rather just security for web applications?