About Denim Group
Denim Group develops secure software, helps organizations assess and mitigate risk with existing software, and provides training on best practices in software security.
Denim Group is a strong contributor to the larger application security community, and has been involved with the Open Web Application Security Project (OWASP) since shortly after its inception. Additionally, Denim Group was ranked in Inc. Magazine's 5,000 Fastest-Growing Private Companies in America in 2008 and 2009.
Build. Integrate. Secure.
Denim Group provides IT consultancy services encompassing all phases of the software development lifecycle including software development, application security assessments, development team training and consulting.
The Company's core expertise includes medium- and large-scale custom software development projects involving sophisticated programming solutions such as E-commerce, customer relationship management and portal development. Denim Group also integrates a wide variety of applications ranging from legacy systems to high-performance E-commerce sites and develops custom applications to pick up where the off-the-shelf software leaves off.
Denim Group developers are trained and experienced security consultants. Their working knowledge of the threats and countermeasures encountered in the application security arena, as well as development strategies that fit into the software development lifecycle, provide the level of expertise needed to develop, assess and remediate application source code.
Denim Group regularly hosts training seminars targeted at security professionals and developers to address secure development and auditing practices. As an element of Denim Group's security offerings, the Company also provides mentoring services through which security experts at Denim Group personally train security professionals and developers on-site.
Denim Group works with both commercial and government entities. Specific industry experience includes: financial services, banking, insurance, healthcare and defense. Denim Group also has strong competencies working with other industries including education, entertainment, retail and online commerce, construction, energy, high tech, and marketing/creative.
A Trained and Trusted Workforce
Unlike many technology consulting companies who regularly use contract labor, each member of the Denim Group team is a W2 employee. Having a tight core team allows Denim Group to invest in training and certifications resulting in unparalleled performance and consistency of execution. Additionally, every employee of Denim Group undergoes thorough background checks that cover criminal, lawsuit and credit history. A large percentage of these employees are also ex-military, and many have held the highest government clearances available.
Recognized Industry Leaders
The management team at Denim Group has over forty years experience in large-scale software development projects and information security. This depth and breadth of experience has allowed Denim Group to successfully provide solutions for a variety of enterprise clients.
Dan Cornell, Denim Group co-founder and principal, is a recognized expert in application security for SearchSoftwareQuality.com, has been quoted as an expert in SC Magazine and speaks at national conferences on web application security. John Dickson, a CISSP and another principal, also speaks for regional and national industry organizations including the Computer Security Institute, ISSA and ISACA and has presented at such industry conferences as TRISC and ConSec.
The Denim Group partners contribute to industry best practices through involvement in the technology community. They founded the San Antonio chapter of the Open Web Application Security Project (OWASP) and hold leadership positions in organizations including the Technology Advocates of San Antonio (TASA).
Denim Group evaluates a number of products and companies on a regular basis and selectively looks for best-in-industry alliances to offer their clients the most complete solutions.
- HP Fortify
- White Hat Sentinel