Dave Ferguson is a Solution Architect with Qualys and has been a specialist in Application Security since 2006. After writing tons of Java and C++ code as an application developer for over a decade, he joined FishNet Security (now Optiv) and pen tested countless applications and trained developers worldwide on secure coding techniques. Dave also led the global application security program at Sabre Corporation. He is author of the OWASP Forgot Password Cheat Sheet and holds CISSP and CSSLP certifications. In his spare time, Dave serves as a researcher and bug bounty participant.