Making security pay (no bejesus required)

Security vendors often stand accused of scaring people into purchase by publishing ‘threat reports’ that warn of impending doom, complete with statistics suggesting that the Internet is the modern equivalent of the Wild West but never quite add up when you think about it. So I was actually quite intrigued to find a report from an application security vendor which instead attempts to justify your spending by researching the return on investment rather than scaring the bejesus out of you.