Belay

Although Belay does perform OWASP audits and training, in general we prefer not to work on enterprise certification projects like ISO certification because we feel these standards are too broad to be of meaningful operational benefit to organizations. We're also uncomfortable with the cost companies end up paying to acquire these certifications, often as a mandatory requirements for participation in public tenders and other corporate partnerships.