CF Specific Advisories and White Papers: http://allaire.com/developer/SecurityZone/ General Web Applications Security: http://www.owasp.org Any specific concerns or areas of interest? --rt Ron_Senykoff at BEAEROSPACE.COM wrote: > Any recommended sites / resources for coldfusion security?