Comments on Richard Veryard on Computing: Industry Analyst Coverage

Great idea, OWASP would definitely benefit from a ...

2009-06-23T05:26:26.359+01:00

Great idea, OWASP would definitely benefit from a solid $100,000 USD donation so we can afford such an employee!

Richard, Good post. James, It is not enough to be...

2009-06-23T04:47:05.592+01:00

Richard, Good post.

James, It is not enough to be willing to respond to requests or questions from analysts. You have to proactively reach out to the analysts and sell them on why they should be covering OWASP.

This lack of outreach is not just problem with open source products but also commercial startups and even major vendors with new products outside their traditional markets. To see a little more on the subject check out:

"Are the analysts laggards or have startups neglected to brief them? [Startup Saturday]"

http://sagecircle.wordpress.com/2008/03/29/are-the-analysts-laggards-or-have-startups-neglected-to-brief-them-startup-saturday/

"In contrast, my questions to OWASP go into a blac...

2009-06-22T23:43:35.214+01:00

"In contrast, my questions to OWASP go into a black hole"

Who are you emailing, seriously? The OWASP mailing lists are here https://lists.owasp.org/mailman/listinfo are any of them being unresponsive?

I agree with your current assessment of OWASP and ...

2009-06-22T23:30:56.359+01:00

I agree with your current assessment of OWASP and will take the following action items:

1. If any analyst wants to publish detailed research (not just blog posts) on OWASP, please have them contact me directly and I will personally guarantee them a response to every single question they have within 48 hours.

2. If they want to schedule a dialog, I will clear my work schedule and make time available.

3. If I fail at either of the above, they can personally blog this fact. Transparency goes both ways...