Very cool! Security awareness and training that doesn't suck (I'm talking to you, Java "training" Applets from 2000) is probably one of the highest impact "soft

Very cool! Security awareness and training that doesn't suck (I'm talking to you, Java "training" Applets from 2000) is probably one of the highest impact "soft" things that companies can do to actually make their company (and people) more secure. We've built on top of an API (primarily for data I/O), but haven't exposed anything for public consumption yet (the API's only used by our app), simply because we have so much to tackle already that we're not ready to support a developer community using the API quite yet. Like you said, building arbitrary logic into forms is hard...