Companies that currently make software testing tools? They could integrate the top-25 test suite with their own products, which customers would still buy for all the other code problems that those products catch.

And corporate IT shops that think they can't afford testing tools? They'd have no excuse not to use the free top-25 test suite.

Developing that suite wouldn't be easy -- technically or politically. But SANS and Mitre have already lined up the big players who can help make it happen. This is their chance to make more-secure software a reality.

That would sure beat yet another list.

Frank Hayes is Computerworld 's senior news columnist. Contact him at .