Start-up tracks risky security behavior in the cloud