For what it's worth your view is contrary to mine: I've attended quite a few local OWASP chapter meetings and volunteered at OWASP AppSec. I've found it's a pre

For what it's worth your view is contrary to mine: I've attended quite a few local OWASP chapter meetings and volunteered at OWASP AppSec. I've found it's a pretty diverse set of DEFENDERS, not so much the pentesters. Also found some of the best non-vendor/sales pitch talks to help raise knowledge and awareness in the appsec/ infosec community. I will admit they don't drop cutting edge knowledge or zero-day type stuff. They are a pragmatic group trying to make things better. I think this is a hugely valuable effort.