Re: Has anyone ever started a pen testing company?

[techlists () comcast net]

It's very difficult starting out cold. If you've been working in the field for several years and already have a good 
network of contacts, it will be easier by several magnitudes to get initial clients. 

Or, if you have a superlative reputation as a security guru, your reputation will attract clients. Of course, the catch 
22 is that to become such a guru, you will need to be working in the field for several years (see first paragraph).

PG


 -------------- Original message ----------------------
From: "Robin Wood" <dninja () gmail com>
> Hi
> I've recently done this and it was hard work. First thing to check is
> whether there is a market in your area. Where I am there are not too
> many companies who are interested in security so as well as having to
> try to sell my services I also have to raise awareness that there is
> an issue in the first place.
>
> Think of the first burglar alarm salesmen, first no one wanted one,
> then they started to take off in the big cities but still in rural
> towns no one thought they needed one.
>
> Robin
>
> On 20 Jun 2006 10:00:38 -0000, port-scan () hushmail com
> <port-scan () hushmail com> wrote:
> > Hi
> >
> >
> > Ive been thinking about this for sometime now, and im looking to start a pen 
> testing company & forensics.
> > I just wanted to ask if anyone has setup up there own company and whether you 
> have and tips on how you went about things, ie how did you attract your first 
> client etc etc.
> > any help would be great!
> >
> >
> > Many Thanks
> >
> > ------------------------------------------------------------------------------
> > This List Sponsored by: Cenzic
> >
> > Concerned about Web Application Security?
> > Why not go with the #1 solution - Cenzic, the only one to win the Analyst's
> > Choice Award from eWeek. As attacks through web applications continue to rise,
> > you need to proactively protect your applications from hackers. Cenzic has the
> > most comprehensive solutions to meet your application security penetration
> > testing and vulnerability management needs. You have an option to go with a
> > managed service (Cenzic ClickToSecure) or an enterprise software
> > (Cenzic Hailstorm). Download FREE whitepaper on how a managed service can
> > help you: http://www.cenzic.com/news_events/wpappsec.php
> > And, now for a limited time we can do a FREE audit for you to confirm your
> > results from other product. Contact us at request () cenzic com for details.
> > ------------------------------------------------------------------------------
>
> ------------------------------------------------------------------------------
> This List Sponsored by: Cenzic
>
> Concerned about Web Application Security? 
> Why not go with the #1 solution - Cenzic, the only one to win the Analyst's 
> Choice Award from eWeek. As attacks through web applications continue to rise, 
> you need to proactively protect your applications from hackers. Cenzic has the 
> most comprehensive solutions to meet your application security penetration 
> testing and vulnerability management needs. You have an option to go with a 
> managed service (Cenzic ClickToSecure) or an enterprise software 
> (Cenzic Hailstorm). Download FREE whitepaper on how a managed service can 
> help you: http://www.cenzic.com/news_events/wpappsec.php 
> And, now for a limited time we can do a FREE audit for you to confirm your 
> results from other product. Contact us at request () cenzic com for details.
> ------------------------------------------------------------------------------



------------------------------------------------------------------------------
This List Sponsored by: Cenzic

Concerned about Web Application Security? 
Why not go with the #1 solution - Cenzic, the only one to win the Analyst's 
Choice Award from eWeek. As attacks through web applications continue to rise, 
you need to proactively protect your applications from hackers. Cenzic has the 
most comprehensive solutions to meet your application security penetration 
testing and vulnerability management needs. You have an option to go with a 
managed service (Cenzic ClickToSecure) or an enterprise software 
(Cenzic Hailstorm). Download FREE whitepaper on how a managed service can 
help you: http://www.cenzic.com/news_events/wpappsec.php 
And, now for a limited time we can do a FREE audit for you to confirm your 
results from other product. Contact us at request () cenzic com for details.
------------------------------------------------------------------------------