I work with a lot of startups that try to move most of their services to the cloud, but the usual gotcha is when they have to run a router for internet access. If you are using Comcast or AT&T the default business router is NOT enough protection! If you aren't ready to shell out big bucks for firewall overkill but don't want to get hacked, or worse, ransomwared, then you need to do something.
I've installed untangle's NG Firewall for a couple of startups and it is super easy. If you already have a small network server you can run the apps on it, or you can pick up an inexpensive hardware firewall solution from them that is ready to go. The "everything" solution adds $50 a month, but for my AWS local sync'd backups, checking to see who's on the network, enforcing network policies, blocking ads, virus, trojan, phishing, spam blocking and keeping detailed logs it is great. If you run a coffee shop or school and need to block certain sites from consuming all your bandwidth this is an easy solution. read more