Cybersecurity Vendor Claims Research

Hi, I'm Jitesh Chavan. I'm conducting independent research into how companies evaluate and verify claims made by cybersecurity vendors.

This is purely research. I'm not selling anything, and there will be no sales follow-up.

The survey takes about 3 minutes. If you leave your email, I'll share the key findings with you once the research wraps up.

Have you been involved in evaluating or selecting a cybersecurity vendor in the past 24 months?

Yes, as a decision-maker

Yes, as part of the evaluation team

Yes, as an advisor/influencer

When evaluating a cybersecurity vendor, which sources does your organization typically use to verify its claims?

Product demo or proof of concept

Technical documentation

Independent testing or benchmarks

Certifications or audit reports

Peer recommendations

Online reviews or communities

Internal security or technical testing

Vendor-provided case studies

We generally do not independently verify claims

Think about the most recent cybersecurity vendor your organization evaluated. Was any important claim difficult to verify?

How confident are you in your organization's ability to verify claims made by cybersecurity vendors?

What makes you less confident in a cybersecurity vendor's claim?

How useful would an independent assessment of the evidence supporting a cybersecurity vendor's claims be before speaking with its sales team?

About Your Organization

These questions help compare responses across different types and sizes of organizations.

Approximately how much does your organization spend annually on cybersecurity tools and services?

$50,000–$249,999

$250,000–$999,999

$1 million–$4.9 million

$5 million–$9.9 million

How is cybersecurity threat response currently handled at your organization?

Dedicated in-house security team

Outsourced or managed security provider (MSSP)

Combination of in-house and outsourced teams

Handled informally

No dedicated function

Which best describes your organization's approach to cybersecurity risk management?

Reactive, with no formal process

Aware of risks, but processes are not formalized across the organization

Formal policies and processes are applied consistently

Continuously improving using threat intelligence, incident learnings, and feedback

What is your job title or role?

What industry does your organization operate in?

Approximately how many employees does your organization have?

Get the Research Findings

Leave your email if you'd like a copy of the research findings when they're ready.

We'll use your information only to analyze survey responses and, if requested, share the findings with you. We won't add you to a sales or marketing list through this survey.