How would you reduce the attack surface of products and internal systems by automating security workflows?