Newsletter

How to read a vendor-commissioned security test

Three security reports this month lead with a score. Here is what each one measures, and what it leaves out.

F5 says SecureIQLab gave its WAAP and AI Guardrails product a 97.09% total security protection score. In a separate SecureIQLab comparative, F5's Distributed Cloud WAAP scored 92.75% for complete security, about 7% above the average of the products tested, and 94.7% for operational efficiency. F5 named a leader in SecureIQLab's Cloud WAAP v5.0 report

Check Point, meanwhile, hired Miercom to run competitive effectiveness tests on hybrid mesh network security products, its own included. Hybrid Mesh Network Security Competitive Assessment

These are real tests run by real labs. They are also tests the vendor paid for, or chose to publicize. A careful buyer keeps both facts in mind at once.

Four questions for any score

  • Who picked the products in the comparison, and who was left out?
  • Which configuration was tested: the default, or one tuned by the vendor's own engineers?
  • What is the false-positive rate? A tool that blocks everything scores beautifully on protection. To its credit, the F5 comparative reports false-positive avoidance.
  • Can you get the full methodology, or only the summary?

Speed is the benchmark that matters now

Exaforce's SOC platform guide opens with a claim from the Cyber Security Agency of Singapore: attackers are already using agentic AI to compress multi-day campaigns into hours. Exaforce also cites one customer, Accton Technology, reporting investigations cut from three hours to ten minutes and 91% fewer false-positive alerts. That is a single deployment result, reported by the vendor. Treat it as a reason to ask for a pilot on your own data. Before you choose a SOC platform

For the regional picture, Ensign InfoSecurity's Cyber Threat Landscape Report 2026 draws on frontline incident work across ASEAN, Australasia and East Asia. If you operate in those markets, read it before any of the product comparisons. Cyber Threat Landscape Report 2026

Not cited, worth reading

More on Cybersecurity

The category →
Next articleEveryone is running AI. Almost nobody is governing it.