“Colin Matthews had his SaaS boilerplate template professionally penetration-tested by a security firm to ensure it was secure before distribution.”