Better Security Investments Paired with Security Validation