The Research Program

The State of Security Messaging

First edition in progress — publishing when the analysis is complete.

We are running 100 security-vendor homepages through The CISO Filter™ and publishing the aggregate patterns — which stamp each opening claim earns, which categories bury their mechanism deepest, and what the top decile does differently. No vendors named. Just the data the category needs and doesn't have.

What we're measuring

Each homepage goes through the same four-phase pass we run on client engagements: every claim extracted verbatim, and each one carrying exactly one of the five stamps — UNFALSIFIABLE, NO MECHANISM, UNVERIFIABLE, EMPTY SUPERLATIVE or SOUND — then mapped against the evidence a buyer could actually check. The published report aggregates the patterns across the whole sample — categories, not companies.

What we won't do

No vendors named, no screenshots that identify anyone, no rankings of real companies. The point is the category's patterns — not a public shaming list. The methodology is documented on the CISO Filter methodology page; the findings publish when the analysis is complete, and not a day before.

Get the report when it publishes

One email when the first edition is out. Nothing else.

✓ Noted. You'll get one email when the first edition publishes.

Don't want to wait for the aggregate data?

The Breach-Grade Messaging Audit runs the same analysis on your homepage, privately — with one section rewritten so you can judge the standard.

Get a Breach-Grade Messaging Audit →