Companies to do code review of crypto in an ActiveRecord / Ruby on Rails webapp? [closed]

Question

We have written a Ruby on Rails application that allows a visitor to fill out a form with personal information (name, address & other confidential details), which is stored in a database until the information can be collected by a batch process running inside institution's firewall.

To prevent attackers from getting this confidential information in the event of a database compromise, we have devised a mechanism for automatically encrypting the user's input using OpenPGP before storing it in the database.

Where can I find a company that will assess this code and provide us with a report that we will be able to show to our customers? They would need to be familiar with both cryptography and with ActiveRecord.

Answer 1

We do, www.comsecglobal.com, or www.codefend.com.

Best, Sharone

Answer 2

Matasano are a good security research firm, and they're a Ruby shop.