Re: Top webappsec testing vendors?

[Bill Stout <billbrietstout () yahoo com>]

Hello All,
Thank you for your responses.  This is the list I have compiled so far, my apologies if I have missed a response.
Aspect Security  http://www.aspectsecurity.com/ 
ApplicCure  http://www.applicure.com/ 
Compass Security (Swiss)  http://www.csnc.ch/en/ 
Cybertrust (Verizon) http://www.cybertrust.com/ 
Deloitte & Touche http://www.deloitte.com 
Depth Security  http://www.depthsecurity.com/ 
Ernst & Young  http://www.ey.com/ 
Fortrex Technologies  http:/www.fortrex.com 
Foundstone  http://www.foundstone.com/us/index.asp 
GNU Citizen  http://gnucitizen.com/ 
Gotham Digital Science  http://www.gdssecurity.com/ 
IOActive http://www.ioactive.com/ 
ISEC Auditors (Spain)  http://www.isecauditors.com/eng/index.html 
Korelogic http://www.korelogic.com/ 
Matasano  http://www.matasano.com/log/mtso/ 
Neohapsis http://www.neohapsis.com/ 
NGS Software  http://www.ngssoftware.com/ 
NTObjectives  http://www.ntobjectives.com/ 
SecuRisk Solutions  http://www.securisksolutions.com/ 
Spidynamics (HP) https://h10078.www1.hp.com/cda/hpms/display/main/hpms_content.jsp?zn=bto&cp=1-11-201_4000_100__ 
Whitehat Security  http://www.whitehatsec.com/home/index.html 
Zion Security (Belgium)  http://www.zionsecurity.com/ 
I haven't rank them and I believe it would be difficult to do so.  Aspect has been recommended a few times, NGS 
Software is owned by David Litchfield who I've known since the mid-90's.  Each vendor probably employs a well-respected 
webapp pentester, and I'm sure each engagement will have a different experience.
I believe a pentester is an important addition to a security toolkit.
Bill Stout

-------------------------------------------------------------------------
Sponsored by: Watchfire
Methodologies & Tools for Web Application Security Assessment
With the rapid rise in the number and types of security threats, web application security assessments should be 
considered a crucial phase in the development of any web application. What methodology should be followed? What tools 
can accelerate the assessment process? Download this Whitepaper today!

https://www.watchfire.com/securearea/whitepapers.aspx?id=70170000000940F
-------------------------------------------------------------------------