Revision as of 09:31, 22 March 2012 by Wichers (talk | contribs)

Jump to: navigation, search



Dave Wichers is a cofounder and the Chief Operating Officer (COO) of Aspect Security, a company that specializes in application security services. He is also a long time contributor to OWASP including being a member of the OWASP Board since it was formed.

Dave has over 20 years of experience in the information security field, and has focused exclusively on application security since 1998. At Aspect, in addition to his COO duties, he is Aspect's application security courseware lead, one of their chief instructors, and provides a wide variety of application security consulting services to Aspect's clients. Prior to starting Aspect, he ran the Application Security Services Group at Exodus Communications. Dave has a Bachelors and Masters degree in Computer Science, is a CISSP, and a CISM.

OWASP Contributions

I have been contributing to OWASP since 2002. In 2004, along with Jeff Williams, we established the 501c3 organization that is now the OWASP Foundation. Since establishing the OWASP Foundation, I have served and continue to serve as the de facto Chief Financial Officer of OWASP, managing all financial transactions, authorizing all payments from OWASP, and making sure we are good stewards of OWASP's financial resources. I also negotiate and sign for virtually all contracts OWASP enters into with other parties. I also established all the financial accounts for the OWASP Foundation including bank accounts, credit cards, tax IDs, and helped hire all the employees of the OWASP Foundation and provide oversight for their work. I also helped determine the benefits that these employees would receive, and established the procedures for how they would receive those benefits including health insurance, payroll, etc. In late 2004, I volunteered to become the OWASP Conferences Chair where I launched the OWASP Conferences Series, personally organized all the U.S. and European AppSec conferences from 2005 through 2008, and helped launch the Global Conferences Committee in 2009, which has now taken over the primary organizational duties for the OWASP Conferences. The OWASP Conferences have grown to serve as the primary fundraising resource for OWASP. I have also spent countless hours helping to initially establish the OWASP wiki, and then continuing to improve it, proofreading articles, encouraging others to contribute, etc.

As a volunteer to OWASP, Dave is:

For more details than this short bio on what I've done at OWASP, listen to my OWASP podcast.

Wiki Contributions

I've also done lots of OWASP conference presentations. Here are some of them:

Dave can be reached at: dave.wichers (at) or dave.wichers (at)