[jerf]

"Trust Guard's emphasis/value appears to be sales conversions, not security per se."

The first startup I worked for was a PCI-compliance company. So I can tell you that the only way to sell "PCI-compliance" is that the credit card companies require it, and the only way to differentiate your service is by hyping the conversions it will help with. The reason is that these companies are fundamentally selling a check in the checklist that their customers otherwise do not care about. (Alas, even requiring people to care about security doesn't actually make them care about security.) For their front page, this isn't necessarily a surprise, it really doesn't tell you anything about the company either way.

Now, XSS on their front page... conclude away.