Dave Ferguson is a Solution Architect and SME with Qualys and has been immersed in all things application security since 2006. After writing code as a developer for over a decade, Dave worked as a consultant pen-testing applications and training other developers on how to build secure apps. Prior to Qualys, he led the global application security program at Sabre Corporation and worked at Veracode. Dave is author of the OWASP Forgot Password Cheat Sheet and holds CISSP and CSSLP certifications.