The top tips to choose an application security vendor would include evaluating the achievements, checking the knowledge base and not just certifications, knowing about the type of testing used, and the quality of reporting and analysis, among others.