Independent Test

Just wondered when it comes to proving your solution is water tight, have you ever employed anyone outside your company to validate the secureness of both the local vault and probably more importantly your new website Account solution.

@davegarratt: Absolutely! Our security model is well known and the older local vault formats are open and have been hammered on for the roughly a decade already. And more importantly, our 1Password.com security white paper goes into great detail about how our hosted service works.

I'm not volunteering as it's not my area of expertise, but as a software developer its always the case that a 3rd party can look at something from a different perspective ?

Totally! We agree that's important, so we also have external auditors and independent security researchers hammer on things to find areas where we can improve our security. I hope this helps. Be sure to let me know if you have any other questions! :)