Sometimes it's difficult to blog on what I do for a living.
That last entry came out sounding a bit like marketese, but it wasn't meant to be. The crappy data that this industry churns out really pisses me off. It's bad when it comes to our customers, but it's REALLY bad when it comes to what we do.
One of my team noted it on Friday night while we were having a drink or two:
"Mike, you just seem so... uh... agitated sometimes.
You know what? I AM agitated.
I'm agitated whenever I see a false positive. I'm agitated when I see us fail to report on something that we should.
And I'm especially agitated for this entire industry, because I know that we do it better than anybody else out there. I can't imagine running my business on some of the crappy data that is out there:
"Your 500,000 hosts may be vulnerable". Gee, thanks, Sherlock... I knew THAT before I bought your vulnerability management tool.
Our product (IP360) is far from perfect, but I'd at least trust the results to make a huge number of decisions on. And it gets better every day - we put a lot of effort into making a damn good product.
We don't do the whole "maybe" vulnerability thing - I don't think I could look myself in the mirror in the morning if we did.