Hey, wow - where to start. So the gist of what I believe you're trying to accomplish is a) increase awareness of security + php b) provide yourself as a consul

Hey, wow - where to start. So the gist of what I believe you're trying to accomplish is a) increase awareness of security + php b) provide yourself as a consultant for those that need more help. Would that be it in a nutshell? My experience, having both sold security services, tools, and software projects in the past (along with actually doing the implementation, etc) - is that only a small subset of developers actually really truthfully care about the deep and dirty aspects of security. A security team doing vulnerability assessments do, security managers do, and Fortune companies at risk do. Systems engineers often do, but mainly developers (tend) to care more about new programming technologies or technology tools. That's where I could see a disconnect. I would use the methods you're mentioning below (blogs, guest blogs, assessments, tool patches, seminars) are all FANTASTIC for building your credibility and brand in the business. Which is more important in the long run. You could also get great traction by networking at PHP groups. Even you could map a few in metros near your (eg: if you're in Texas.... Austin, Dallas, Houston, Denver). ETc. This could give you an endless collection of work.