Commercial Services - Revision history

Paulo Coimbra at 17:30, 28 June 2010

2010-06-28T17:30:37Z

Paulo Coimbra at 17:20, 28 June 2010

2010-06-28T17:20:36Z

Paulo Coimbra at 17:20, 28 June 2010

2010-06-28T17:20:05Z

Paulo Coimbra: Blanked the page

2010-06-28T17:18:28Z

Blanked the page

Show changes

Deleted user at 20:06, 31 May 2010

2010-05-31T20:06:28Z

Deleted user: Updated based on survey.

2010-05-31T19:44:43Z

Updated based on survey.

Deleted user: Updated per telecon with Dinis.

2010-05-14T02:10:48Z

Updated per telecon with Dinis.

Dinis.cruz: Unprotected "Commercial Services"

2010-05-14T02:02:17Z

Unprotected "Commercial Services"

KateHartmann at 20:35, 12 May 2010

2010-05-12T20:35:24Z

KateHartmann: Protected "Commercial Services" ([edit=sysop] (indefinite))

2010-05-12T14:40:21Z

Protected "Commercial Services" ([edit=sysop] (indefinite))

← Older revision		Revision as of 17:30, 28 June 2010
Line 1:		Line 1:
−	[[Commercial Services - First Attempt\|Commercial Services - First Attempt - Not currently in use]]	+	*[[OWASP Related Commercial Services\|New Project Page]],
		+	*[[Commercial Services - First Attempt\|Commercial Services - First Attempt - Not currently in use]].

← Older revision		Revision as of 17:20, 28 June 2010
Line 1:		Line 1:
−	[[Commercial Services\|Commercial Services - First Attempt - Not currently in use]]	+	[[Commercial Services - First Attempt\|Commercial Services - First Attempt - Not currently in use]]

← Older revision	Revision as of 17:20, 28 June 2010
Line 1:	Line 1:
−	+	[[Commercial Services\|Commercial Services - First Attempt - Not currently in use]]

@@ Line 40: / Line 40: @@
 [[Image:Asvs-bulb.jpg|link=]]'''How to get your company listed'''
 '''Question: What do you need from us?'''
@@ Line 50: / Line 52: @@
 Please let Kate know if you have any further questions, or need any additional information.
+|

@@ Line 73: / Line 73: @@
 ==== Verification  ====
-<br>Commercial OWASP ASVS verification providers are listed below. Organizations listed either use ASVS or will help you use it. Provider listings are required to include the following information: company name and link to corporate web site, company location and markets served,  company area(s) of application technology expertise, ASVS verification levels offered; approach to performing verifications, and contact name and email. Listings are not allowed to exceed 100 words.
+<br>Commercial OWASP ASVS verification providers are listed below. Organizations listed either use ASVS or will help you use it. Provider listings are required to include the following information: company name and link to corporate web site, company location and markets served, company area(s) of application technology expertise, ASVS verification levels offered; and contact name and email.
 {| width="100%" cellspacing="1" cellpadding="1" border="0" style=""
@@ Line 90: / Line 90: @@
 '''[http://www.thisisafakeurlforafakecompany.com Acme Application Security Co.] ([http://code.google.com/p/owasp-asvs/wiki/Levels_1A 1A] ,[http://code.google.com/p/owasp-asvs/wiki/Levels_1B 1B])''' [[File:Us.png|link=]]
-Acme Application Security Co. is headquartered in Memphis, Tennessee. Acme Application Security Co. serves both enterprises and governments. Areas of expertise include web 2.0 social media technologies. Acme Application Security Co.'s approach to performing dynamic scans (1A) combines passive vulnerability scanning with manually testing areas of interest. Our approach to performing source code scans (1B) targets both application code and goes beyond ASVS Level 1A requirements to additionally scan any open source underlying frameworks and libraries that were modified or extended to create your application. All reports are tailored to meet organization requirements. [[File:Eps_closedHS.png|link=]] [mailto:joecamel@thisisafakeurlforafakecompany.com Contact us] for more information.
+Acme Application Security Co. is headquartered in Memphis, Tennessee. Acme Application Security Co. serves both enterprises and governments. Areas of expertise include web 2.0 social media technologies. [[File:Eps_closedHS.png|link=]] [mailto:joecamel@thisisafakeurlforafakecompany.com Contact us] for more information.
 [[File:CommentHS.png|link=]] ''Last modified:&nbsp;April 14, 2010 - 8:36''
@@ Line 114: / Line 114: @@
 ==== Implementation Services  ====
-<br>Commercial OWASP ESAPI implementation service providers are listed below. Organizations listed either use ESAPI or will help you use it. Provider listings are required to include the following information: company name and link to corporate web site, company location and markets served,  company area(s) of application technology expertise, ESAPI implementation service platforms offered; approach to performing implementations, and contact name and email. Listings are not allowed to exceed 100 words.
+<br>Commercial OWASP ESAPI implementation service providers are listed below. Organizations listed either use ESAPI or will help you use it. Provider listings are required to include the following information: company name and link to corporate web site, company location and markets served,  company area(s) of application technology expertise, ESAPI implementation service platforms offered, and contact name and email.
 {| width="100%" cellspacing="1" cellpadding="1" border="0" style=""
@@ Line 131: / Line 131: @@
 '''[http://www.thisisafakeurlforafakecompany.com Acme Application Security Co.] ([http://www.owasp.org/index.php/Category:OWASP_Enterprise_Security_API#tab=.NET ESAPI for .NET], [http://www.owasp.org/index.php/Category:OWASP_Enterprise_Security_API#tab=Java_EE ESAPI for Java])''' [[File:Us.png|link=]]
-Acme Application Security Co. is headquartered in Memphis, Tennessee. Acme Application Security Co. serves both enterprises and governments. Areas of expertise include web 2.0 social media technologies. Acme Application Security Co.'s approach to integrating ESAPI typically consists of writing ESAPI adapters using the [http://www.owasp.org/images/8/82/Esapi-design-patterns.pdf ESAPI Extended Factory Pattern], and then training developers on their use. We also write secure coding standards based on customized adapters as part of service. [[File:Eps_closedHS.png|link=]] [mailto:joecamel@thisisafakeurlforafakecompany.com Contact us] for more information.
+Acme Application Security Co. is headquartered in Memphis, Tennessee. Acme Application Security Co. serves both enterprises and governments. Areas of expertise include web 2.0 social media technologies. [[File:Eps_closedHS.png|link=]] [mailto:joecamel@thisisafakeurlforafakecompany.com Contact us] for more information.
 [[File:CommentHS.png|link=]] ''Last modified:&nbsp;April 14, 2010 - 8:36''
@@ Line 155: / Line 155: @@
 ==== Process Improvement  ====
-<br>Commercial OWASP SAMM process improvement providers are listed below. Organizations listed either use SAMM or will help you use it. Provider listings are required to include the following information: company name and link to corporate web site, company location and markets served,  company area(s) of application technology expertise, SAMM business function process improvement services offered; approach to performing process improvement, and contact name and email. Listings are not allowed to exceed 100 words.
+<br>Commercial OWASP SAMM process improvement providers are listed below. Organizations listed either use SAMM or will help you use it. Provider listings are required to include the following information: company name and link to corporate web site, company location and markets served,  company area(s) of application technology expertise, SAMM business function process improvement services offered, and contact name and email.
 {| width="100%" cellspacing="1" cellpadding="1" border="0" style=""
@@ Line 172: / Line 172: @@
 '''[http://www.thisisafakeurlforafakecompany.com Acme Application Security Co.] ([http://www.owasp.org/index.php/SAMM_-_Construction Construction], [http://www.owasp.org/index.php/SAMM_-_Verification Verification])''' [[File:Us.png|link=]]
-Acme Application Security Co. is headquartered in Memphis, Tennessee. Acme Application Security Co. serves both enterprises and governments. Areas of expertise include web 2.0 social media technologies. Acme Application Security Co.'s approach to Construction and Verification process improvement emphasizes the need to target specific levels of assurance based on risk management principles. [[File:Eps_closedHS.png|link=]] [mailto:joecamel@thisisafakeurlforafakecompany.com Contact us] for more information.
+Acme Application Security Co. is headquartered in Memphis, Tennessee. Acme Application Security Co. serves both enterprises and governments. Areas of expertise include web 2.0 social media technologies. [[File:Eps_closedHS.png|link=]] [mailto:joecamel@thisisafakeurlforafakecompany.com Contact us] for more information.
 [[File:CommentHS.png|link=]] ''Last modified:&nbsp;April 14, 2010 - 8:36''
@@ Line 196: / Line 196: @@
 ==== Training  ====
-<br>Commercial OWASP Guide training providers are listed below. Organizations listed either use OWASP Guides or will help you use them. Provider listings are required to include the following information: company name and link to corporate web site, company location and markets served,  company area(s) of application technology expertise, OWASP Guide training offered; approach to performing training, and contact name and email. Listings are not allowed to exceed 100 words.
+<br>Commercial OWASP Guide training providers are listed below. Organizations listed either use OWASP Guides or will help you use them. Provider listings are required to include the following information: company name and link to corporate web site, company location and markets served,  company area(s) of application technology expertise, OWASP Guide training offered, and contact name and email.
 {| width="100%" cellspacing="1" cellpadding="1" border="0" style=""
@@ Line 213: / Line 213: @@
 '''[http://www.thisisafakeurlforafakecompany.com Acme Application Security Co.] ([http://www.owasp.org/index.php/Category:OWASP_Guide_Project Development], [http://www.owasp.org/index.php/Category:OWASP_Code_Review_Project Code Review])''' [[File:Us.png|link=]]
-Acme Application Security Co. is headquartered in Memphis, Tennessee. Acme Application Security Co. serves both enterprises and governments. Areas of expertise include web 2.0 social media technologies. Acme Application Security Co.'s approach to training is hands-on, featuring exercises in both Java and .NET. Our training facilities are large enough to accomodate class sizes up to 12 people. [[File:Eps_closedHS.png|link=]] [mailto:joecamel@thisisafakeurlforafakecompany.com Contact us] for more information.
+Acme Application Security Co. is headquartered in Memphis, Tennessee. Acme Application Security Co. serves both enterprises and governments. Areas of expertise include web 2.0 social media technologies. [[File:Eps_closedHS.png|link=]] [mailto:joecamel@thisisafakeurlforafakecompany.com Contact us] for more information.
 [[File:CommentHS.png|link=]] ''Last modified:&nbsp;April 14, 2010 - 8:36''

← Older revision	Revision as of 02:02, 14 May 2010
(No difference)

← Older revision		Revision as of 20:35, 12 May 2010
Line 37:		Line 37:

	[[Image:Asvs-bulb.jpg\|link=]]'''How to get your company listed'''		[[Image:Asvs-bulb.jpg\|link=]]'''How to get your company listed'''
		+
		+	'''Question: What do you need from us?'''
		+
		+	'''Answer:''' For each type of service (Verification, Implementation Services, Process Improvement, and Training), one has to first choose what services of a given type one is offering. For example, for Verification, one can choose from any combination of ASVS levels 1A, 1B, 1, 2A, 2B, 2, 3, 4. Next, one has to provide the information requested in the paragraph above the table, let's keep using Verification as an example, starting from the second half of the paragraph: "Provider listings are required to include the following information..." -- this sentence provides a list of the information needed. The "Acme Application Security Co." is a fictional company listing that provides an example of a listing that provides the needed information.
		+
		+	'''Question:''' How many categories can we be listed under (we fall under a couple)
		+
		+	'''Answer:''' You can be listed once for each type of service (Verification, Implementation Services, Process Improvement, and Training). So, one company could have up to four listings, one on each tab. Then, in each listing, one can include one or more specific services of that type. The "Acme Application Security Co." is a fictional company on the Verification tab for example provides both ASVS Level 1A and 1B verification services.
		+
		+	Please let Kate know if you have any further questions, or need any additional information.

	To be listed in the OWASP Commercial Services Registry, contact [http://www.owasp.org/index.php/Contact Kate Hartmann].		To be listed in the OWASP Commercial Services Registry, contact [http://www.owasp.org/index.php/Contact Kate Hartmann].

← Older revision	Revision as of 14:40, 12 May 2010
(No difference)