Editorial policy

Research standards

Every company profile is built from publicly available material: vendor websites, published methodology and service documentation, case studies, and where available third-party coverage. We do not fabricate certifications, client testimonials, review-platform ratings or pricing figures. Where public information does not confirm a specific claim, the profile states that directly rather than presenting an assumption as fact.

Where a figure originates from a vendor's own materials, we attribute it as such rather than presenting it as independently measured. Where a previously published figure can no longer be verified — for example after an acquisition removes the page that carried it — we mark it as historical and say so in the profile.

Scoring criteria

Companies are scored against the criteria described in our methodology: Active Directory and lateral movement coverage, privileged-access path validation, named team certifications, compliance framework mapping, reporting and retesting practices, and UAE market presence. The same criteria and the same profile format apply to every company in the comparison, without exception, including profile length.

We also publish drawbacks for every vendor, not only for the ones placed lower in the list. A profile with no stated limitations would tell a buyer nothing useful, so where a vendor's public documentation leaves a gap that matters to an internal engagement — an unpublished certification roster, no detail on Active Directory methodology — the profile names it plainly.

Updates and corrections

Rankings are reviewed periodically as vendor capabilities, public documentation and market conditions change. If a company believes its profile contains outdated or inaccurate information, corrections can be requested through our contact page. Requests that include a link to public documentation are actioned faster, because they can be verified without a call.

Substantive corrections are reflected in the “last reviewed” date in the site footer. We do not silently rewrite a profile's conclusions without also revisiting the scoring criteria behind them.

Vendor relationships

We do not accept payment in exchange for a specific ranking position. Companies can request inclusion through our submission page; submissions are evaluated against the same published criteria applied to every other entry. Any commercial relationship relevant to a specific listing, where one exists, is disclosed within that listing rather than concealed in the site's general presentation.

Scope and limitations

This is a comparison of publicly documented vendor capability and positioning. It is not an independent, hands-on technical audit of any vendor's actual testing quality. Readers should treat this content as one input into a vendor selection process, not a replacement for direct due diligence, reference checks and a scoped RFP process. See our risk disclosure for more detail on these limitations.