Loading...
Founder of CybersecTools and Mandos. Enterprise security leader, 14 years.
14 years in enterprise security leadership: hundreds of vendor evaluations and RFPs, security budgets defended to boards, and a consolidation that cut €35M across 24 markets. He reviews every shortlist on CybersecTools.
58 published articles.
The best attack surface management solutions: Cortex Xpanse, Microsoft Defender EASM, Mandiant ASM, CyCognito, Zafran, Censys, and CrowdStrike Falcon Exposure Management compared.
The best data protection solutions: Microsoft Purview, Varonis DSPM, Palo Alto Enterprise DLP, Zscaler Unified DLP, Netskope One DLP, CrowdStrike Falcon Data Protection, and Cyera DSPM compared.
The best application security solutions: Snyk, SonarQube Cloud, Veracode, Black Duck SCA, Wiz Supply Chain Security, and JFrog AppTrust compared by the job each one does.
Managed detection and response providers compared: Unit 42, Mandiant, Arctic Wolf and 3 more. What each one covers and who it fits.
Phishing simulation solutions for email, SMS, voice and deepfakes. Compare SoSafe, Adaptive Security, revel8 and 4 more, with the reason for each.
Brand protection solutions that find fake domains, cloned sites and fake accounts. Compare ZeroFox, Netcraft, Cyberint and 4 more, and why we picked each.
The 12 enterprise security products every stack needs, what each one does, where it fits in NIST CSF, and the order to buy them in.
Access management solutions for SSO, MFA and device trust. Compare Microsoft Entra ID, Okta, Duo and 4 more, with the reason for each pick.
The best cyber-physical and OT security solutions: Claroty, Dragos, Darktrace OT, Armis, Palo Alto Medical Device Security, Zscaler IoT/OT, and CrowdStrike Falcon for XIoT compared.
Post-quantum cryptography, CWPP, CASB, endpoint telemetry and PAM: what each advanced control solves, who needs it now, and when it is fine to wait.
What AI-driven security solutions really do: alert triage, behavior-based detection, risk ranking and automated response, and how to test the AI claims.
The best SASE solutions: Prisma Access, Netskope One, Cato SASE, FortiSASE, Versa, Sangfor Access Secure, and iboss compared by backbone, SSE features, and fit.
Six enterprise security trends for 2026, from identity as the perimeter to continuous compliance, and the product categories each one sends you to.
How to choose enterprise cybersecurity products: seven selection criteria, what to compare, how to run a proof of concept and what goes in the contract.
ITDR solutions that catch identity attacks in Active Directory and the cloud. Compare Silverfort, Microsoft Defender for Identity and 5 more.
The best IAM solutions: Okta Universal Directory, Saviynt, Broadcom IAM, SAP Cloud Identity Access Governance, ManageEngine Identity360, and ThreatLocker Elevation Control compared by directory, governance, and privilege.
The best mobile app security solutions: Zimperium MAPS, Appdome, Protectt.ai, Ostorlab, NowSecure, Guardsquare App Attestation, and ImmuniWeb compared by testing vs protection.
The best security awareness training solutions: KnowBe4, Proofpoint, Infosec IQ, Mimecast Engage, Terranova, Trend Micro, and ESET compared by how they target training.
The best EDR solutions: CrowdStrike Falcon, SentinelOne Singularity, Microsoft Defender for Endpoint, Darktrace, Tanium, IBM QRadar EDR, and Cybereason compared by response model and fit.
How GDPR, HIPAA, PCI DSS, OT and your sector change the security products you need, and the one architecture that holds up under all of them.
How to assess NIST CSF 2.0 Identify maturity: score asset management, risk assessment and improvement on coverage and effectiveness, then brief the board.
A governance maturity assessment guide: score Govern honestly, spot the five failure patterns and improve governance and compliance maturity over time.
Most recovery maturity scores are inflated. Where programs fall short on RTO, backup integrity and communications, and how to test and close the gap.
Compare the best email security platforms, including Microsoft Defender, Proofpoint, Abnormal, and Mimecast. Find the right fit for your stack and threat model.
The 7 best agentic AI security solutions: Cortex AgentiX, Falcon AIDR, Silverfort, Zenity, Straiker, Oligo, and Arcade. See where each fits and what to check.
Most Protect functions look solid on paper and fail in practice. How to test real control maturity, rank the gaps and take them to your board.
The 7 best post-quantum cryptography solutions for PQC migration, crypto asset discovery, NIST compliance, and quantum-safe networking.
The 7 best database security solutions reviewed: encryption, monitoring, masking, and access control for SQL, NoSQL, and cloud data warehouses.
A security vendor consolidation strategy that holds up: the full cost model, when fewer vendors cut risk, when they add it, and what to sequence first.
Compare the best AI SPM solutions. Prisma AIRS, Zscaler, Noma, Sweet, Zenity, and more reviewed for real enterprise deployments.
The 7 best AI security solutions reviewed: Palo Alto, CrowdStrike, Zscaler, Silverfort, and more. Find the right fit for your AI security stack.
Compare the best DAST solutions: Burp Suite Enterprise, Invicti, Acunetix, Checkmarx, and more. Find the right scanner for your stack.
Compare the best API security solutions, including Cloudflare API Shield, Imperva, Akamai, Escape, and more. Find the right fit for your environment.
How to build an incident response program with five people: who owns what, which products to buy, when to use MDR, and what to report to the board.
SAST solutions that scan your code in the IDE and CI/CD pipeline. Compare SonarQube Cloud, Coverity, Snyk and 4 more, with the reason for each.
Compare the best cloud WAAP solutions: Cloudflare WAF, Akamai, Imperva, F5, FortiWeb, Cisco, and Radware. Find the right fit for your stack.
Endpoint security and EDR solutions compared: CrowdStrike, SentinelOne, Microsoft Defender and 4 more. What each one covers and who it fits.
Cloud security solutions for CSPM, CNAPP and cloud detection. Compare Wiz, Microsoft Defender for Cloud, CrowdStrike and 4 more.
How to build a protect program with five people: pick the right domains, split the roles, buy fewer products, and report metrics your board trusts.
Run security controls like production systems: set coverage targets, catch drift early, test controls monthly and report control health to your board.
Why an all-technical security team stays invisible to the business, and how to split yours into specialists, risk advisors and integrators.
How to build the NIST CSF 2.0 Identify function with five people: asset inventory, risk assessment and improvement, what to buy, what to tell the board.
Compare the best Zero Trust Network Access solutions, including Cloudflare Access, Zscaler, BeyondCorp, Cato, Akamai, AWS, and Cisco Duo.
How to run security governance with five people: a tiered control model, a short risk register, tiered vendor reviews and a one-page board report.
Compare the best container security solutions: image scanners, runtime protection, and Kubernetes security platforms reviewed for real-world deployment.
How to build a detection program with five people: scope it to your threat model, split the roles, pick products, track the right metrics, brief the board.
Compare the best email DLP solutions. Forcepoint, KnowBe4 Prevent, Egress, Trustifi, and more reviewed for real-world deployment.
How to build a cyber recovery program with five people: shared RTO and RPO, clear roles, immutable backups, decision-tree runbooks and board metrics.
A CISO 90 day plan: what to do first, what to deliver by day 90, how to brief the board, and the mistakes that sink new security leaders.
SIEM solutions compared: Splunk, Microsoft Sentinel, IBM QRadar and 4 more. What each one does well, who it fits, and why we picked it.
Small security budget cuts compound. How to show your CFO and board the combined risk, protect headcount and get risk acceptance in writing.
Next-gen firewalls for branch, cloud and data center. Compare Palo Alto Networks, Fortinet, Cato and 4 more, with the reason for each pick.
Five security metrics boards act on: time to contain, crown jewel coverage, third-party exposure, security debt and resilience, with how to build each one.
Compare the best key management solutions, including Thales CipherTrust, Futurex KMS, Akeyless, and more. Find the right KMS for your compliance and deployment needs.
Ceremonial security controls cost budget and analyst time but do not reduce risk. How to find them, measure them and replace them with controls that work.
The 7 best digital risk protection solutions. Compare ZeroFox, SOCRadar, Rapid7, Cyberint, and more for dark web monitoring and brand protection.
Quarterly access reviews pass the audit but leave the risk in place. What replaces them: automatic offboarding, role drift checks and live SoD rules.
Compare the best PAM solutions: Securden, BeyondTrust, One Identity, Delinea, Saviynt, Silverfort, and Idira. Find the right fit for your environment.