[Owasp-leaders] Question on OWASP Demographics

Jeff Williams jeff.williams at owasp.org
Tue Oct 26 21:47:33 EDT 2010

Neil Smithline wrote:
> I know that Aspect Security has a special relationship with OWASP

I’d like to make it very clear that Aspect Security absolutely does NOT have a special relationship with OWASP.  There are two members of the OWASP Board that work for Aspect, myself included.  However, the two are completely separate entities.


I’ve heard Dinis use Aspect as an example of how working with OWASP can help a commercial company, and I totally agree.  The projects that Aspect has created and led at OWASP, including the Top 10, WebGoat, ESAPI, ASVS, Scrubbr, AntiSamy, CSRFTester, CSRFGuard, etc… have sent exactly the right message about Aspect.  This isn’t a traditional marketing program, and I’m not sure that “marketing-oriented” folks will even get it.  But it certainly works.


Now James has raised the question of whether this will work for non-security companies.  I think there’s a different value proposition there.  We’ve just signed up Oracle, JPMC, and others because they want to demonstrate their commitment to application security.  I hope this trend continues and that more software vendors will realize that their participation in OWASP is a great way to demonstrate that they care.



-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://lists.owasp.org/pipermail/owasp-leaders/attachments/20101026/a632b759/attachment.html 

More information about the OWASP-Leaders mailing list