5 Security Questions to Ask Your Software Vendor
A good answer: We ensure that all critical security defects will be fixed within one month of discovery. We use our severity rating to define critical, and we stand by our commitment to eradicate all serious vulnerabilities that might put our customers at risk.
Likelihood of getting this answer: Almost zero. There are very few companies willing to take such a public stance and stand by it contractually. However, more customers are asking for such terms, which will force software vendors to be more attentive to security defects.
$firstKeyword



