Small business security overhaul

I work in a small business, I've been tasked to find opensource XDR, EDR and WAF tools to upgrade our security.

I'm not a security expert, I'm a software developer. But currently we don't have a security expert so I'm the most "qualified" for this job...

To be honest I don't have any clue of what specific security features we actually need... and I don't know the tools that are currently in use in the industry.



I'm asking for advice …

business business security clue cybersecurity developer don edr expert find job opensource security security expert software software developer tools upgrade waf work xdr