OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: Top webappsec testing vendors?

From: Bill Stout (billbrietstoutyahoo.com)
Date: Wed Apr 09 2008 - 14:14:51 CDT


Hello All, Thank you for your responses.  This is the list I have compiled so far, my apologies if I have missed a response. Aspect Security  http://www.aspectsecurity.com/ ApplicCure  http://www.applicure.com/ Compass Security (Swiss)  http://www.csnc.ch/en/ Cybertrust (Verizon) http://www.cybertrust.com/ Deloitte & Touche http://www.deloitte.com Depth Security  http://www.depthsecurity.com/ Ernst & Young  http://www.ey.com/ Fortrex Technologies  http:/www.fortrex.com Foundstone  http://www.foundstone.com/us/index.asp GNU Citizen  http://gnucitizen.com/ Gotham Digital Science  http://www.gdssecurity.com/ IOActive http://www.ioactive.com/ ISEC Auditors (Spain)  http://www.isecauditors.com/eng/index.html Korelogic http://www.korelogic.com/ Matasano  http://www.matasano.com/log/mtso/ Neohapsis http://www.neohapsis.com/ NGS Software  http://www.ngssoftware.com/ NTObjectives  http://www.ntobjectives.com/ SecuRisk Solutions  http://www.securisksolutions.com/ Spidynamics (HP) https://h10078.www1.hp.com/cda/hpms/display/main/hpms_content.jsp?zn=bto&cp=1-11-201_4000_100__ Whitehat Security  http://www.whitehatsec.com/home/index.html Zion Security (Belgium)  http://www.zionsecurity.com/ I haven't rank them and I believe it would be difficult to do so.  Aspect has been recommended a few times, NGS Software is owned by David Litchfield who I've known since the mid-90's.  Each vendor probably employs a well-respected webapp pentester, and I'm sure each engagement will have a different experience. I believe a pentester is an important addition to a security toolkit. Bill Stout

-------------------------------------------------------------------------
Sponsored by: Watchfire
Methodologies & Tools for Web Application Security Assessment
With the rapid rise in the number and types of security threats, web application security assessments should be considered a crucial phase in the development of any web application. What methodology should be followed? What tools can accelerate the assessment process? Download this Whitepaper today!

https://www.watchfire.com/securearea/whitepapers.aspx?id=70170000000940F
-------------------------------------------------------------------------