RSnake spilled the beans, but no one was more surprised than me when the call came from InfoWorld. Honestly, I didn’t what to make of it. Being listed on the InfoWorld CTO 25 next to names from top companies like VeriSign, 3Com, Motorola, and Credit Suisse is surreal. I'd also like to congratulate the other recipients.
As RSnake said, Web application security is FINALLY seen as something to take seriously. Though I’m getting a lot of the credit, which I sincerely appreciate, its taken years of tireless effort from many amazing people in the community from all over the world. The people involved with OWASP, WASC, blogs, sla.ckers.org, SANS and others have made a huge impact in raising awareness. Thanks to them generously donating their time and expertise we have the knowledge and technology required to secure websites.
There is still a lot of work to do, but we've taken the first step.