I created this website in 2000 to provide information on web security issues. Since then this site has expanded to cover Database Security, Web Server security, Web Application Security, HTTP, Web Services Security, and more. Some features of this site include bringing our users up to date information on the latest threats, patches, products, books, and more while staying as vendor neutral as possible. This website is also the oldest application security website on the net pre dating OWASP and other well known organizations.

CGISecurity isn't my only 'project'. I also co founded The Web Application Security Consortium with Jeremiah Grossman in January of 2004, and The Web Security Mailing List in April 2005 (Which I am currently the lead moderator for).

If you have any questions or comments please email admin@cgisecurity.com