How much would it cost me to hire a security analyst for a day or two

[bigredshark]

the sme's that i do have dealings with use paypal or similar to outsource payments and i think that is a perfectly valid and appropriate model.

I broadly agree, I do think Paypal are basically the devil but I think the concept is the correct one, it's beyond their competency so they should outsource it...