Honestly, even the fancy components are not hard to install. Tiered firewalls for development, white lists for security, distributed load balancer for large request pools(Avoid DOS/DDOS), Sql sanitation checks. all of these pretty much come built in now to existing security systems...