Judging a security vendor from its own materials tells you little about how it compares to the rest. Cyber Company Profiles scores hundreds of cybersecurity companies from public sources.
Cyber Company Profiles is a free site that analyzes the market positions and product strategies of cybersecurity companies. My AI tooling produces each profile from public sources, sifts through the data to answer a fixed set of questions, and scores the answers consistently. I created this tool to understand the cybersecurity product landscape better.
The questions the site answers are the ones I kept asking in my own work. As a buyer of security products, I wanted to see where the vendor was taking its portfolio and whether it would keep innovating after I committed. And I wanted to know whether a startup would still be around in two or five years. As a product leader, I wanted to understand the competitive dynamics and market pressures my roadmap had to withstand.
Generic AI assistants will answer those questions inconsistently. The results change with each run, depending on how you direct the AI and what it finds that day. One investigation is not necessarily comprehensive or even correct, and when you rerun it, you get yet another answer. The variability also means you can’t compare findings across companies.
Start with a company that’s on your mind.
Cyber Company Profiles covers hundreds of cybersecurity companies, and the entire site is free to use. Read any company’s profile to see its summary, its scores with the rationale behind each one, and a deep dive into the strategy. You can also use your AI agent to fetch the data through an API.
If you’re planning to buy a product, read the vendor’s profile to prepare. If you’re building a product, search for your own company’s profile, or review another vendor in your market. Compare the automated analysis against your own perspective. When you disagree, follow the sources cited in the profile to see the original materials and context.
Standard questions make the profiles comparable.
I used several published frameworks for Cyber Company Profiles to ensure that the profiles are consistent and comparable. They supply the questions, the scoring scales, and the structure of each profile. For every company, AI gathers the public details, answers the questions, and scores the answers against the scales. The frameworks are:
- The Market Readiness Scorecard measures how well a company can compete in its security market. Its dimensions, such as market timing and team credibility, are based on my RSAC Innovation Sandbox analysis.
- The Security Product Creation Framework structures the strategy deep dive, which is the narrative part of a profile. I explained it in my guide to creating security products.
- My adaptation of Ben Vierck’s Defensibility Rubric measures how well a company can hold its position when AI lowers the cost of building software. I’ve applied his rubric to security vendors in an earlier post.
Cyber Company Profiles applies the same questions and scales to every company, which makes the scores comparable across profiles. The site rates market readiness as Emerging, Established, or Advanced, based on the company’s score relative to those analyzed so far. Established is the most common of the three, so the rating tells you whether a company scores above, within, or below the typical range.
The analysis is independent and based solely on public sources.
I run Cyber Company Profiles independently of the companies it covers. Companies don’t pay for coverage. And anyone can report an error if they spot one in a profile.
AI builds each profile solely from public signals. As a result, the profiles have the limitations of any open-source intelligence analysis. This means that a company doing good work out of the public’s eye will have a thinner profile than one that’s highly public about its activities. Another limitation, of course, is that AI can misunderstand a source or miss the context that a human domain expert would catch.
Even so, it can be useful to see how a company looks from the outside based solely on its publicly visible presence. Treat each profile as one perspective, and validate it against your own diligence.
