I know plenty about the https 'thing', but it hasn't stopped me from ordering thousands from Pelican and so far no body has taken over my accounts.

This is not dare.

Doesn't seem to mean much.

I have fraud guarantees on my cards anyway, so as long as it's a secure site (https), I'm happy.

Ben

I believe that they offer you a level of protection and security that you may otherwise overlook. They will test your site for vulnerabilities to certain known exploits as both a baseline and to things that may have become vulnerable due to some innocuous change.

If they keep their service up-to-date for newly discovered vulnerabilities, it's worth it. It especially will give you some piece of mind if your services are running on a Windows platform and/or heavily rely on Javascript.

As part of my work, I've been so deep inside some online auto parts sites that it's scary. Ask yourself the question, "Will it make me and my (potential) customers more comfortable?"

Did I happen to mention that I hold up my pants with a belt and suspenders? :p

Wayne security is both the consumer and vendors responsibility. If you are using SSL with 128b encryption, this is the standard way most sites are secured (including banks). I am satisfied with that because I know there are ways to break this and I take the responsibility for ordering online.
I use a credit card with a low limit just for ordering online.

I have heard there is someone that can now break 128bit SSL encryption in real time. This puts EVERYTHING at risk. luckly at this point, he is not using it for criminal purposes.
The moral is someone has already, and will always have a better mousetrap.

Wayne,
From what I've seen from the regular posters on this board, they could intelligently analyze just about anything and apply a pretty consistent cost factor to the process.

Your asking advice from your customers is priceless customer service.

David Duffield