Last month, I essentially "called out" software makers for not being forthcoming about the security processes they use while developing software. Only one of them has cared enough to follow up about it, even if it did take an e-mail from an influential member. Props to the Apache Foundation for caring about software security.

Over 60 Apache projects for their own security, "and they often consult with the ASF Security team if there are specific issues that need to be addressed," a spokesperson said. I'm following up with Lars Eilebrecht, a founding member of that team, to learn more.

Here's a list of companies that haven't followed up with me since my report was published:

Adobe, Amazon, Apple, CollabNet (the CEO did e-mail me asking about when I contacted it), the Eclipse Foundation, the Free Software Foundation, IBM, Intel, the Linux Foundation, Oracle, Red Hat, Software AG, Sun Microsystems, Sybase, VMware and Yahoo. Nokia and Salesforce.com acknowledged the request but were unable to provide comment by my story deadline—not a word since then.

Any of these companies can contact me at any time to discuss what is being done by their development teams to protect customers. Security is an important topic for our readers and important to the industry as a whole. Hopefully I will hear from at least one other company... Any takers?