-May-
08

Seeker Nails Hacker Pr0n

Do SQL injections turn you on? How about double SQL injections? If the answer is ‘yes’, then

1): Good luck with your dating life.

2) Boy are you in some luck!

A new of breed of security product called Seeker produces some vivid hacker pr0n in the form of a video (see above) of how it broke and exploited every nook and cranny of your unsecure code. Yes, I’m going to say it, Seeker might be the Seymore Butts of security products!

Kidding aside, Seeker seems be packing pretty fearsome application security technology. The company behind it is an Israeli white hat hacking shop called Hacktics. These guys do work for startups, banks, telcos, governments, and homeland security agencies. Their team members hold very high security clearances due to their prior and current service records in the IDF (Israeli Defense Force). It’s safe to say these guys know a thing or two about application security.

Seeker was designed for use by individuals that are part of the development organization which do not necessarily possess security knowledge, or even deep technical knowledge. These can range from developers, to QA staff, to team leaders. It’s for this reason that Seeker points to real business threats rather than just technical issues.

This is where a two particular product features stand out. Seeker produces screenshots (see below) that allow testers to see the vulnerabilities in the context of the actual application functionality they relate to, rather than getting just technical information based on URLs. The screenshots also contain screenshots showing how the application handled each attack.

The second stand-out feature is ‘Exploit Videos’. Seeker automatically creates a step-by-step exploit video for each vulnerability it identifies and exploits, making it easier for the developer to manually reproduce errors before and after fixing the code. Video is also quite an effective method for non-security users to understand the actual threats and potential exploits. Just imagine being able to show management or external developers such a video. Pretty effective stuff.

Seeker’s methodology is to perform runtime analysis of code executed in order to identify security flaws in the application. This is done by hooking into the process executing the application, and performing step-by-step analysis of the executed code. The attacks themselves are generated dynamically based on a ‘Smart Attack Tree,’ a long list of rules for mutating attacks based both on how the application reacts to them, and the actual application code.

The product supports an orgy of vulnerabilities, including: SQL injection, XML/XPath injection, directory traversal, cross-site scripting, parameter tampering, forceful browsing, malicious content upload, username/password enumeration, insecure redirects, source code disclosure, insecure storage of sensitive data (such as Credit cards, CVVs, SSNs), cookie poisoning and plenty more.

Currently supported are Java and .NET code analysis, using any database if no stored procedures are used. For stored procedures, Seeker supports Microsoft SQL and Oracle. PHP, as well as support for MySQL stored procedures, will be rolled out in a few months.

Seeker is currently headquartered in Israel, with $3M in funding under its belt.

Seeker

 

Seeker

This post was originally posted on TechCrunch.com where I cover the Israeli startup scene.

-May-
08

Soho OS: Soup-to-Nuts Utility Platform for Small & Micro Businesses

Soho OS

If you are a regular TechCrunch reader, describing a product as a SaaS hybrid of Quicken + Zoho + SalesForce, would paint a fairly clear picture in your mind of the product. And this is pretty much what Soho OS is. Thing is, the odds that their target user bases, small and micro-business, are regular TechCrunch readers, are slim.

But let’s push the ‘how to succinctly describe the offering’ issue aside, because Soho OS really does offer a well-rounded package of small business management services, from CRM, to invoicing, to VOIP. And it comes at an unbeatable price: it’s 100% free, with a commitment to remain so forever.

The founders of Soho OS built it specifically for micro-businesses, with fewer than 10 employees, for example freelancers, design houses, boutique PR agencies, etc . The idea was to provide a number of key businesses utilities for free, with a few premium ones as the base for a business model.

Sure, the interface could certainly use a UX overhaul with some American product design sensibility, but this is what Beta releases are for, and a chunk of the company’s next fundraising round has been earmarked for such an overhaul.

Once logged-in, users are presented with three main areas: Business, Networking, and Services.

The Business area is populated with the following ‘golden-oldie’ business utilities:

  • Accounts – Account management with shared calendar & email features.
  • Sales – Purchase and sales orders, leads and quotes management.
  • Marketing – Campaign management and tracking.
  • Finance – Bookkeeping and client billing.
  • Inventory – Products management, price lists, vendors and purchase orders, automatic inventory renewal, sales and purchase order alerts.

The Networking area is aimed at helping small businesses add or better manage their social online activity. Twitter and Facebook feeds can be added and easily converted into actions such as tasks, leads, contacts and events. Other features include:

  • Chat – With internal and external users.
  • Inbox – Including mass email capabilities.
  • Contacts – With multiple tasks such as sending SMS, faxes and voice messages.

This Services area section offers premium services on a pay-as-you-go basis. These include:

  • Text & Voice Messaging – To single contacts or groups.
  • Fax – Both sending and receive.
  • VoIP – Both domestic and international calls.
  • Conference Calls – Perform conference calls.
  • Credit Card Processing – Process and track credit card transactions.

Based on a few hundred users, early traction is encouraging. Here is some data the Soho OS team shared with me on a recent campaign it ran on Facebook:

  • 55% use Soho OS 9 times a month or more, 36% use it over 26 times per month.
  • Average use time is 31min per visit.
  • 20% out of the 400 approved beta users (out of 1200 requests) consume premium services.
  • The leading premium service is VoIP followed by SMS and Fax.

This post was originally posted on TechCrunch.com where I cover the Israeli startup scene.

    -Mar-
    17

    Tawkon Measures The Radiation Spewing From Your iPhone. No Wonder Apple Doesn’t Approve It.

     Tawkon_2

    Here we go again . . . Apple App Store Fail No. 5102928. A few weeks ago stealth Israeli startupTawkon gave me a sneak-peak developer build of what I believe is the most important app on my iPhone. What does it do? It analyzes the cellular radiation your iPhone emits at any given moment, at any given location, whether in standby mode, or within a call.

    Sounds like science fiction, right? Well, that’s where Israeli hardware and software engineering prowess come into play (more on that in a second). Sadly, Israeli military training may have met its match . . .  the infamous iPhone App Store approval process.

    The purpose of Tawkon’s app is to provide the user with an indication—or “prediction” as they call it—of the radiation level being emitted by the iPhone. This level changes based on environmental conditions, distance from cell towers, and even the manner in which the device is held. To illustrate: the iPhone’s antenna is located at the bottom of the device. If the user cradles the phone too tightly in the palm, the antenna has to work harder, thereby increasing radiation. The 3GS models have improved chipsets, so radiation would be lower on them compared to previous versions, and Tawkon takes this into considering when calculating its prediction.

    When launched, the app instantly provides users with an indication of the radiation level in the iPhone’s stand-by mode. A green/orange/red pulse makes this dummy-proof. For example, radiation levels in my office are minimal, but are much higher in the men’s room which is deeper in the building, where more concrete forces the iPhone to work harder to hold a connection to the nearest cellular base station.

    Tawkon_3To find out what the radiation levels are during a call, the app lets users launch a call through the iPhone’s address book. It then monitors the radiation levels in real time and sends prompts via vibration and a tone should they reach the high-end of its threshold. The app also employs the iPhone’s proximity sensor and provides suggestions such as moving location, using a headset and even changing the iPhone’s orientation to your face.

    So how does Tawkon do it? Algorithmic magic analyzes your phone’s dynamic SAR (Specific Absorption Rate) levels, location, environmental factors, as well as unique smart-phone capabilities such as bluetooth, accelerometer, proximity sensors, GPS and compass. The level of radiation a person is exposed to during calls is determined by analyzing several dynamic parameters, including the impact of environmental factors such as distance from cellular towers, network and weather condition, terrain, antenna’s proximity from the body, antenna orientation (if the user is holding the phone vertically or horizontally) and travel speed.

    It’s perfectly natural to be skeptical about Tawkon’s app, so let me lay out a couple of things to set the record straight: first, Tawkon is not looking for controversy. They contacted me weeks before they submitted the app to the App Store with the sincere hope of not being stonewalled. Ironically, were this a gag app, not only would there have been no controversy, the app’s revenue potential may actually be higher. Second, I have no way of testing whether the app’s output is actually correct. However, I took the time to meet the three founders and feel comfortable stating that they struck me as serious, highly capable hardware and software engineers who’ve spent 18 months developing a technology they believe holds real compelling value for users. They claim the app has gone through lab testing to ensure its output is correct. For what it’s worth, I take their word for it.

    Tawkon’s app has been in the approval process for a couple of weeks with the App Store denying approval on the grounds that a diagnostic tool of this nature would create confusion with iPhone owners from a usability perspective. This reasoning was communicated by an App Store representative on a phone call with the Tawkon team. I find this claim questionable as I’ve been using the app and there’s nothing problematic about it in this respect.

    Tawkon is keeping optimistic, holding hope that Apple will approve the app which they intend to sell for between $5-$10. In the mean time, it’s plugging ahead in its development of Blackberry and Android versions.

    This post was originally posted on TechCrunch.com where I cover the Israeli startup scene.

    -Mar-
    17

    Kampyle Confirms Funding, Kicks Off Beta Test For Application Feedback Product

    Kamyple

     Kampyle , maker of a user feedback analytics platform, is finally confirming a round of financing it closed in 2009. I had a chance to sit down with Kampyle CEO Ariel Finkelstein who officially confirmed that Carmel Ventures led the company’s $1M Series A round, closed back in January 2009. He also shared with me that the company has begun beta testing a new feedback product for downloadable applications.

    Last year was a pivotal one in the life of Kampyle, which complemented its round of financing with a blow-out year across all KPI’s. Customer growth rate surged 600%, up 25,000 for a total of 35,000 (although Finkelstein did not share how many of these are paying customers).

    On average, 19 users saw a Kampyle feedback button every second, ultimately converting to a total of 8M feedbacks processed. Interestingly, 57% of users who provided feedback included their real email address, thereby expressing their desire for a follow-up by the website owners or software providers that implemented the feedback form.

    Kampyle is enhancing its current feedback products, one for websites, the other for software install/uninstall, with ‘Kampyle for Applications’. Currently being beta-tested, the new product is designed to solicit user feedback regarding people’s actual usage of the applications.

    With this third product, and integrations with SalesForce, Omniture, NedStat and Google Analytics, Kampyle believes it’s able to provide the holistic, end-to-end view software developers require to effectively understand their user flow—from the initial user visit to their website, through the installation phase, to the user’s actual usage and possible uninstall.

    Kamyple

    This post was originally posted on TechCrunch.com where I cover the Israeli startup scene.

    -Feb-
    03

    Israel’s Time To Know Aims To Revolutionize The Classroom

    TimeToKno

    This is the story of Time To Know, an enigmatic Israeli startup that has somehow managed to remain under the radar of Israel’s tightly knit startup scene. What makes this feat wondrous is not only because of the daunting challenge the company has chosen to meet, but that it has quietly ramped to 350 employees and no less than $60M in funding—all without attracting attention.

    Time To Know is the realization of a single man’s vision to un-root teaching methodologies from their 19th century origins and thrust them into the 21st century. The entrepreneur is Shmuel Meitar, co-founder of Israeli hi-tech posterchild Amdocs. To appreciate Meitar’s commitment, consider this: He is TimeToKnow’s sole investor. That’s right, the $60M the company has taken in funding all came out of his pocket.

    The basic thesis Time To Know is operating under is that today’s current classroom is following a teaching paradigm designed in the industrial age, i.e., a teacher standing in front of a class, a blackboard on the wall and students at their desks. Think of it this way… Imagine time warping a teacher from the 1800’s and implanting her in a classroom in 2010. She could basically hit the ground running with little to no adjustment in teaching style. Quite scary when you think about it.

    Time To Know believes there are three main reasons why today’s classroom is ineffective: First, relevancy—or rather, irrelevancy. Kids are living in a digital world with a tremendous amount of stimulus. Expecting them to happily and effectively embrace ‘passive learning’ that requires them to just sit, listen and provide output in exams is simply unrealistic. Second, variance. There no such thing as a homogeneous level of learning and comprehension in a classroom of students. Third, assessment—aka, the feedback loop. In today’s classroom a student could have gotten lost with the material three weeks back, but the teacher would be oblivious to it.

    Contrary to partial solutions such as computerized tutorials, or digital whiteboards, Time To Know set out to create a holistic solution designed to migrate from instructional to Constructivist Learning in which learning and knowledge are experience driven.

    Due to the nature of the work environment (the classroom), and the content (curriculum), Time To Know has set certain infrastructure and operational prerequisites schools must commit to. These are:

    Infrastructure: Every student must be allotted a laptop or netbook with a headset. No more than one student per machine. Every classroom must also be equipped with a laptop for the teacher that is connected to a projector. A WiFi Internet connection is another prerequisite. Ethernet will not do as it restricts inner-class mobility.

    Support & Professional Services: Schools committing to Time To Know’s curriculum must be able to provide on-premises technical support. This means that if a student’s netbook experiences technical problems, it will dealt with immediately, rather than having to wait for an IT support professional to make a call days after.

    Schools must also commit to provide their teachers with training and support. This sounds obvious, but if mis-handled it could be the Achilles heal of the entire initiative. These services can be provided by Time To Know itself or by a third party.

    For all intent and purpose, Time To Know is a software company whose management application, applets and content, all reside on the cloud and are accessible via web browser. There are two main components to the system:

    Learning Management System: This is the teacher’s command center, a management application that allows the teacher to review each student’s progress, view trends in the class’ performance, as well as plan for the next day’s lessons.

    It also allows teachers to customize learning sequences, assign assessments to students, and create reports of student progress. As each student uses a laptop during class, the teacher can monitor individual progress and communicate with each student unobtrusively.

    The application is quite robust, so here are just a few of its many features:

    • Alert Management: Real-time notifications of student progress that alerts teachers on students that require extra attention and assistance.
    • Content Preview & Simulation: Teachers are able to run through lessons at home, allowing them to review lesson plans ahead of class time.

      Once the teacher runs through the lesson in the classroom, the system begins to record data such as what learning activities were used, student achievement, etc.

    • Gallery: Students can submit their work to the shared Gallery area for peer review and class discussion. Teachers can divide students into groups with unique assignments, and then have the groups share and discuss their work in the Gallery. They can also promote collaboration and peer review by encouraging students to write comments on peer and group projects in the Gallery. These can be performed as part of the lesson, or afterward.
    • Administration: Teachers, principals and superintendents can generate various reports to monitor class progress (standard coverage for instance) and achievements (grades). The system allows data analysis, graphing and reporting. The system also comes with an administration component for control of all the technical elements.

    The Curriculum: Time To Know designs and produces what it calls ‘full digital curriculum coverage,’ which is a complete year’s worth of lesson plans, learning activities, and homework assignments. To grasp just what an immense undertaking this is, multiply these by the four subjects matters Time To Know targets—math, science, language arts and social studies—and now multiply that by 13 year’s worth of education (kindergarten plus 12 formal years of schooling). To put this into perspective, in a single year Time To Know produces animation with a combined length of one and a half feature films.

    The challenge is daunting not only because of the sheer amount of content that requires to be designed and produced, but also because the curriculum has to fulfill alignment to state and country standards. This means that curriculum which received approval in Texas will require tweaking for approval in New York. This explains why Time To Know employees a team of 350 consisting of 120 pedagogy and instructional designers (aka teachers), 60 graphics artists, illustrators and animators and 80 technologists.

    To date, Time To Know has produced yearly curriculums for Israeli schools in the subjects of Hebrew, English and math for 4th, 5th and 6th grades. For American schools, it’s produced yearly curriculums for 4th and 5th grades in the subjects of math and language arts. By July 2011, curriculums will be expanded to include grades 3 and 6, with curriculums for science added across all four grades.

    The curriculum combines ‘blended learning’ materials, from movies, to on-screen tutorials, to on-paper exercises. Take for example, 4th grade math aligned to Texas state standards. There are 81 lesson segments, each 120 minutes long. The lesson segments provide a complete coverage and preparation for standardized testing. Lesson segments include:

    • Learning activities based on interactions with Rich Exploration Applets (more on these below). These activities include group, teacher-led, and individual work.
    • Instructional games that directly relate to the concepts taught in the segments.
    • Guided discussions to help teachers motivate and summarize lesson segment concepts.
    • Instructional video clips used to introduce, elaborate, or reinforce lesson segment concepts.
    • Review activities that help prepare students for benchmarks and standardize testing.

    Teachers do have flexibility and can mix and match lesson plan modules and exercises. There’s also the ability to add external items such as videos from YouTube for example, or links to sites on the Web. Time To Know discovered from its pilots that American teachers stuck to the structured curriculum, while Israeli teachers took advantage of the flexibility at their disposal and enriched the curriculum with external materials.

    The curriculum is presented to and interacted with by the students through ‘Rich Exploration Applets’. These provide guided learning sequences intended to facilitate the development of cognitive learning skills in a sequential and spiraled manner. The purpose of the applets is to motivate students to explore, experiment, discover, and discuss the concepts presented under each subject. Doing so allows students to form deeper understandings of these concepts and how they can be extended and adapted to new situations.

    The Geoboard Applet for example (thumbnail on right) is designed to encourage students perform constructive problem solving. It has four areas: The first is the Work Grid in which the student can manipulate different objects, draw lines and polygons, write text, and measure objects. The second area is the Toolbox, which contains different tools for mathematical expressions, drawing, coloring, measuring and entering text. The third area is a collection of visual objects to be placed on the grid. The fourth area is the External Atoms Zone where the student receives instructions and answers different questions regarding his/her conclusions. The atoms, containing the questions and directions, are gradually exposed to coincide with progresses.

    If this isn’t compelling enough, the system is also adaptive. A component called PAL, which stands for ‘Practice and Learning’, maps each student’s knowledge in response to answers given in the subjects of math and language arts. As a result, a practice path is then built on the fly to address the student’s specific strengths and weaknesses.

    Students also have home remote access so they can go over materials that were taught in the classroom, do homework, or review and comment on items in the Galleries.

    Time To Know has been running pilots in four schools in Texas and ten schools in Israel. The expectation for the 2010/2011 school year is for fifteen pilots in the US and around 50 in Israel.

    The feedback collected from teachers is quite interesting: 86% reported an increase in instructional time. There was also a decrease in discipline and an increase in individual assistance during class time. Teachers also reported an increased sense of empowerment to guide and support the learning process.

    Feedback collected from students showed that they perceived the new learning methodologies as fun and relevant. There was also an increase in motivation and positive attitude to subjects taught. Put differently, the kids started enjoying math(!)

    Another dimension was brought from Israel’s Ministry of Finance and Bank of Israel, which both see TimeToKnow’s approach as being able to ultimately increase the GDP.

    “LaAsot Kavod LaMedina” is an Israeli expression that sums-up Time To Know’s story. It translates roughly to “to bring national pride” and it’s used to express “bravo, I’m proud to be an Israeli because of ________”. Rarely, if at all, is it used in the context of a startup. In the case of Time To Know though, it fits hand to glove. Respect.

    T2K: a Paradigm Shift in K-12 Education from Time To Know on Vimeo.
    This post was originally posted on TechCrunch.com where I cover the Israeli startup scene.

    -Jan-
    31

    Refer Java Developers & Get an iPad!

    iPad

    If you, or someone you know is looking for an exciting Web challenge and a great working environment, this should interest you.

    This for a funded startup in Hertzeliya Pituach. It’s still a small company so each person that joins will have a large impact. This means they’re looking for smart, capable, passionate developers.

    The deal with the iPad is simple… If you refer someone that ends-up getting hired, you get a 16GB Wifi iPad! Yes, you’ll have to wait until they’re actually shipping).

    Here are the positions:

    Front-End
    Seeking front-end Web developers with experience in building Rich Internet Applications, with emphasis on rich user interaction and AJAX. Relevant know-how:

    • Concrete experience in planning and building complex rich java web applications from the ground up.
    • Knowledge of Spring Web MVC or an equivalent technology.
    • Experience in Hibernate and Spring.
    • Knowledge of CSS, HTML and JavaScript.
    • Experience in JQuery is a major plus.
    • Widget development experience a plus.

    Email CV’s to: ipad@relativeshare.com.

    Server Side
    Preferred previous work experience may include ad networks, billing systems or other entities that deal with large-scale transactional environments. Relevant experience in:

    • Developing large scale, high volume web applications.
    • Strong knowledge of Java, Spring, Hibernate, Tomcat.
    • Experience with the following is a plus: Distributed Caching (Memcached, Terracotta, etc.), Business Rule Engines.
    • Experience with Linux is a plus.

    Email CV’s to: ipad@relativeshare.com.

    If you have any questions, please email me at: roi.carthy@gmail.com.

    -Jan-
    12

    Followbase: A Twitter CRM Starter Kit

    Followbase

    Although there is no shortage of businesses large and small making great use of Twitter, many are still trying to make heads-and-tales of how to harness its power to communicate with existing and prospective clients. CoTweet and HootSuite are trying to meet this opportunity with feature-rich CRM applications, but for businesses who are Twitter newbies, these apps can be daunting.

    Followbase saw this opportunity-within-an-opportunity and designed a simple, bare-bones Twitter CRM app that could form a stepping stone to the more heavy-duty apps.

    All you need to do to get started with Followbase is to connect it with a Twitter account. Twitter’s standard 3rd-party OAuth approval is used here to ensure the user is the actual account owner. Followbase then begins scanning the stream and funnels tweets into four customer service oriented topics: Mention, Ideas, Problems and Questions.

    Tweets under each topic column are displayed with threaded replies as well as highlighting for the main account and additional team members. The columns are formed automatically, based on the usage of the “?” operator and keywords found in the body of the tweets. Examples include: idea, feature, suggestion, bug, issue, fail, etc.

    Followbase attempts to deal with false positives in sense that phrases such as “any idea…” or “no idea…” do not end up classified under the Ideas column. If a tweet was accidentally mis-categorized, it can then be moved manually.

    If you’re wondering whether there are any semantic or sentiment analyses, the answer is no. Nir Buschi, founder of Followbase, says that a 3rd party semantic engine could be integrated down the road but right now the focus is on keeping the entire experience as simple as possible for newbies.

    Additional features expected to be rolled out in the near future include domain aliasing, customization of look & feel, custom search lists, and issue management.

    Followbase is currently a free service, but I can certainly see it scale into a freemium model where it could charge small and medium businesses $10-20 per month.

    This post was originally posted on TechCrunch.com where I cover the Israeli startup scene.

    -Dec-
    15

    Attn: Online Job Boards – Subject: RealMatch Breathing Down Your Neck.

    RealMatch If you think that the online job board vertical occupied by the likes of Monster.com can’t be shaken up, think again. Case in point:Realmatch, an Israeli founded startup that is climbing up the job classified food chain. In only three years, it has managed to form a 1200-strong partner network that is reaching 37 million job seekers per month with 60,000 positions available at any given time.

    Realmatch’s end-to-end solution appeases employers, candidates and partners. It begins with employers who instead of shelling a couple hundred bucks, get to post their jobs for free. They’ll then start receiving candidates for which they’ll be able to view CV summaries for. Employers who want access to full CVs can either purchase a pack of six views for $95, or unlimited views per job posting for $195. Once access is purchased, employers can then contact the candidates by way of email, chat, and video conferencing, all of which are integrated into Realmatch’s system.

    Realmatch does a couple of interesting things before it sends CVs to employers. First, it qualifies each candidate by grading and ranking their skills against the requirements of the position. I was told there’s real algorithmic work here to ensure quality matching. Second, Realmatch also sends employers ‘passive’ job seekers. These are prospects which did not submit their CV to the particular position, but whose skills were found to be a match by Realmatch after mining its candidate database.

    The second end of the equation is Realmatch’s partner network. The company believes its real strength is in taking the form of a dating network so to speak, as opposed to a destination such as Monster.com. To be able to achieve such a network paradigm, Realmatch’s solution is offered in white-labeled form that can be easily integrated into the partner sites.

    The partner solution includes a variety of features such as a back-office suite with client and job management, reporting and CRM with campaign and contact management. Partners can modify the job site’s homepage but not the internal pages. They can however run their own ads on any of the pages.

    The partner network which is reaching 37 million job seekers a month now tops 1200 sites that range from online editions of newspapers to blogs, and any site in between. Current partners include the South Bend Tribune, Washington Times, BioFind.com and SanDiegojobMatch.com.

    Revenue produced by employers’ purchase of CV access packages is split three ways. The partner site gets a third, the site that added the employee’s CV into the pool gets a third, and Realmatch gets a third. As fair and square as it comes.

    Finally, the benefit for candidates is obvious. CV’s uploaded into any Realmatch-powered site is distributed across its network, regardless of where they where added.

    Realmatch is currently in the midst of raising a second round of financing.

    RealMatch

    This post was originally posted on TechCrunch.com where I cover the Israeli startup scene.

    -Dec-
    02

    Need Help Selecting a Payment Processor? Look No Further Than Payments-R-Us

    Payment-R-UsMore and more startups are finally focusing on real business models, ones that are based on actually selling a product or service. You know, for money.The irony is that many get pretty far down the development path before realizing that adding billing infrastructure to their offering may not be as simple as integrating with PayPal’s API or some other payment processor.

    Choosing the right processor, and many times, processors, from a confusing multi-layered vendor ecosystem can be tricky. Poor decision-making when it comes to issues such as terms of pricing, business fit, or processing capability, can each be a deep gash in any startup’s soft underbelly.

    Payments-R-Us is trying to alleviate the confusion by providing a payments vendor-to-merchant wizard that makes it a snap to choose the right payment processor. The wizard is supplemented with some in-depth content aimed at educating merchants to better grasp the ins and outs of the terms and options offered by vendors so they can better negotiate agreements.

    The Payments-R-Us wizard covers four major verticals: traditional US, international, digital goods and high risk. There are currently 15 processing services listed (including several from Amazon, PayPal, and Google Checkout), with about a dozen more in the pipeline. CEO Michael Shatz stresses that most are considered ‘Tier 1? processors, defined by the fact that they are listed in the top 50 of the annual Nilson Report on top processors.

    The wizard is pretty thorough and will walk a merchant through a selection process that includes such options as multi-currency support, affiliate marketing, digital content, eCommerce hosting, alternative payments, as well as adult and gaming.

    Payments-R-Us’ business model is a fairly simple one: affiliation. It gets a commission for every merchant it refers to a vendor. Does the fact that Payments-R-Us earns a commission impact its objectivity? I don’t believe so. One of the founders and investors in the company is Yuval Tal, Founder & CEO of Payoneer, which we’ve previously written about. By all accounts, Tal is considered a stand-up entrepreneur in the Israeli startup community.

    Payments-R-Us won’t be a billion dollar business. But it serves a real need and has a clear hook for a business model which I imagine could run revenues up to six-figures per month. Its only challenge will be to situate itself as a key destination for merchants when making their processing vendor selection.

    Payment-R-Us

    This post was originally posted on TechCrunch.com where I cover the Israeli startup scene.

    -Nov-
    12

    Looking for Rockstar Devs in Israel

    Developers Wanted

    Ambitious and funded Israeli startup is seeking versatile lead developers with fierce coding skills to build out a transactional platform from the ground-up. If you consider yourself a developer with serious skills (and this could be any kind of development project - if you could build something like http://www.casino.com/ - we’re interested), then think about applying.

    Web Developer:Seeking a front-end Web developer with experience in building Rich Internet Applications, with emphasis on rich user interaction and AJAX. Relevant know-how:

       

    • Concrete experience in planning and building complex rich java web applications from the ground up
    • Knowledge of Spring Web MVC or an equivalent technology
    • Experience in Hibernate and Spring
    •  

    • Knowledge of CSS, HTML and JavaScript.
    • Experience in JQuery is a major plus.
    • Widget development experience a plus.

    Server Side:

    Preferred previous work experience may include ad networks, billing systems or other entities that deal with large-scale transactional environments. Relevant experience in:

    • Developing large scale, high volume transactional web applications.
    • Strong knowledge of Java, Spring, Hibernate, Tomcat/Jetty, JAX-RS and SOAP.
    • Knowledge of grid/cloud infrastructures
    • Experience with the following is a plus: Distributed Caching (Memcached, Terracotta, etc.), Hadoop, Business Rules Engines, BPM.
    • Experience with Linux is a plus.

    Please email CV’s to: roi.carthy@gmail.com