The industry is ablaze with web application security mania. While the topic is by no means brand new, it has been driven to the fore recently through an explosion of highly publicized security compromises and through the increasing demands placed on organizations to assess the posture of their applications in order to comply with standards. As more and more organizations rely on pen testers to simulate malicious attacks, it has become essential that organizations be poised to assess potential service providers and vendors offering these services. In doing so, organizations can intelligently test their pen testers and thereby get the most bang for their security buck.
展开▼