About

This site publishes profiles of software vendors in one narrow category, written for people who have to choose between them and live with the choice. runtime protection, static analysis and access control is the scope; nothing outside it is covered.

Each profile follows the same structure on purpose. What the product actually does, described in terms of the mechanism rather than the marketing. How the pricing behaves once you are inside it, which is usually where the surprises live. Where the approach breaks down, because every tool has a shape of problem it does not fit. And what leaving would cost, because switching cost is a feature of the product whether or not the vendor lists it.

The material comes from public sources: the vendor's documentation, its pricing page, its changelog and its own published material about itself. Where a vendor does not publish pricing, the structure of the commercial relationship is described and the absence of a list price is stated rather than filled in with a guess.

Corrections are welcome and are applied to the page rather than appended. If a pricing model has changed since a profile was written, the profile is the thing that should be wrong, not the reader's understanding.

This site carries advertising. The advertising has no influence on which vendors are profiled or what the profiles say — the list is chosen by what people in the category actually evaluate, and a vendor cannot buy a favourable profile.