Full disclosure I don't work for a security vendor anymore, nor for a security
services
company and my comments are mine alone.
* Ask OWASP and WASC to re-publish the same list as a business
directory on their respective web sites, but most likely that will not
happen as OWASP is about vendor neutrality, and WASC is made up of
many of the vendors mentioned so far.
I won't speak on OWASP's stance as I'm not as informed as you are about theirs,
however regarding
your wasc comments I'm going to have to respond to *clarify* your comments
about the group since
I've been asked in response to your email.
WASC is very neutral and is made up of vendors, enterprise people, government,
developers, security
managers, QA, pen testers and other associated security persons. WASC is run by
people of all these
backgrounds and no one company/person has more of a right to change group
direction or agenda. This was
an issue many of us had which is why this was specified in our charter (on our
website) upon WASC's
creation years ago.
WASC knows that many vendors have employee's who are the leading experts in
their field and wants to
work with all *qualified* parties regardless of who they work for while
ensuring material published
is neutral and agendaless. Some wasc material may link to vendor materials as
we don't discriminate
against valid material/resources simply because of the person or group that
authored it.
Regards,
- Robert
http://www.webappsec.org/
http://www.webappsec.org/aboutus.shtml
-------------------------------------------------------------------------
Sponsored by: Watchfire
Methodologies & Tools for Web Application Security Assessment
With the rapid rise in the number and types of security threats, web
application security assessments should be considered a crucial phase in the
development of any web application. What methodology should be followed? What
tools can accelerate the assessment process? Download this Whitepaper today!
https://www.watchfire.com/securearea/whitepapers.aspx?id=70170000000940F
-------------------------------------------------------------------------
