Well I am currently working on a project called "Defense X". A good friend of mine and co-worker recently purchased website/forum security auditing software. We are creating a website that will be allow webmasters to apply for a web server security audit, we will apply tests on their servers (to test for exploits and such) and then email them the feedback. Large companies are currently charging website audits at $XXX range, when we could do it for so much cheaper. (We need to get out of the red though, the software put us $450 below). Here is where we need advice!
Should we:
a) Set it up as a free auditing system. We rely on donations and sponsers. As far as I know there are currently no websites that have a system like this, so we would have to hope that we attract a very large amount of users to make a lot of advertising appeal.
b) Set it up as a paid auditing service. You pay us $XX to run hundreds of security tests on your site, and we email you the results. We may not appeal to as large of an amount of people, compared to the free testing.
Tell me what you think!
Should we:
a) Set it up as a free auditing system. We rely on donations and sponsers. As far as I know there are currently no websites that have a system like this, so we would have to hope that we attract a very large amount of users to make a lot of advertising appeal.
b) Set it up as a paid auditing service. You pay us $XX to run hundreds of security tests on your site, and we email you the results. We may not appeal to as large of an amount of people, compared to the free testing.
Tell me what you think!
