EDIT: Same concern over rescuetime which sends all the corporate urls to thier server?
* "Off-the-shelf" scanner-based certifications are not held in uniformly high esteem by companies with IT security groups.
* HackerSafe just won the Pwnie award at Black Hat for "Lamest Vendor Response".
* Talking about how you have a security SDLC, code reviews, and secure architecture will offer much bigger warm fuzzies to customers.
Also, avoid blanket statements like "so the data is secure". Marketing 101. If you're going to invite objections, make sure they're objections you want to deal with, not ones where you'll eventually have to concede.
Also the little green badge does slightly improve conversion rates for marginal and otherwise unknown ecommerce sites.
So Hackersafe can be some good marketing, even if it's rather a joke from the standpoint of what they check for (if you fail their scan, you really fail; passing tells you little).
Having the customer host a complex web application is likely going to be less secure then a hosted solution.
Consider the customer has to manage the code, applications that support the code (mysql, apache), manage the web server, and manage the physical security of the web server.
Your data is safer hosted.
It's probably likelier that you'd have a disgruntled tech/admin do something untoward with the data on a local version of the app.
2- Although being focused is good, it can be open to anyone as anyone can find a "use model" for it. eg students who want to track their progress throughout the semester (while using twitter).
2. Yep. We're first focusing on companies because that's the one we're most familiar with. That being said, there's no reason a student couldn't use it the way it stands now ...
It should just be a matter of synching things to an RSS feed, no? I can imagine that having other applications.
i have a similar system, but much more rudimentary in place, i've got an email sent daily automatically to all teammembers asking them 2 questions.
what did you do today? how long did each task take you?
i hoped to do some reports but haven't done it since i must get the info out of the emails, so i was thinking on getting a webpage up where team members would update their work done, and now you just did it.
so thank you and congratulations!
just one thing, so now that we can measure the amount of work done, what about the quality of the results and the time it took to do? oh, and what about what i need to do, maybe something like nowdothis.com could help...