Re: Evaluating pentesters

[Daniel Clemens <daniel.clemens () packetninjas net>]

On Mar 9, 2010, at 12:31 AM, ben.dexter () act gov au wrote:

> There's an approved list of PCI compliance scanning vendors from the PCI Security Standards Council if you're 
> interested. I can't vouch for the depth they go to, but it might be a starting point.
>
> https://www.pcisecuritystandards.org/pdfs/asv_report.html

ASV's and Pentesters are two different animals all together. 
This may be a horrible place to start. 

| Daniel Uriah Clemens
| Packetninjas L.L.C | | http://www.packetninjas.net
| c. 205.567.6850      | | o. 866.267.8851 
"Moments of sorrow are moments of sobriety"












------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT 
and CEPT certs require a full practical examination in order to become certified.

http://www.iacertification.org
------------------------------------------------------------------------