Craig MacAlpine is CEO and Founder of Expert Insights. Before founding Expert Insights in August 2018, Craig spent 10 years as CEO of EPA Cloud, an email security provider that rebranded as VIPRE Email Security following its acquisition by Ziff Davis, formerly J2Global (NASDAQ: ZD) in 2013.
Craig is a passionate security innovator with over 20 years of experience helping organizations to stay secure with cutting-edge information security and cybersecurity solutions.
Using his extensive experience in the email security industry, he founded Expert Insights with the singular goal of helping IT professionals and CISOs to cut through the noise and find the right cybersecurity solutions they need to protect their organizations.
We reviewed the leading email security platforms built for Google Workspace on how effectively they extend native protection, the depth of BEC detection, and how well they handle threats that arrive through legitimate-looking senders.
We reviewed 12 email security platforms built for Microsoft 365 environments. The best ones extend native Defender capabilities; the weakest ones duplicate them.
by Craig MacAlpine
We reviewed the leading anti-impersonation and spoofing solutions on DMARC enforcement depth, display name spoofing detection, and how well each identifies the lookalike domains that attackers use to conduct convincing phishing campaigns.
We reviewed 10 platforms that sit natively inside cloud email environments. The gap between the strongest and weakest on compromised account detection was significant.
We reviewed the leading email spam filtering platforms on catch rates, the false positive rates that determine whether legitimate email gets blocked, and how well each handles the phishing and malware payloads hidden in spam campaigns.
We reviewed the leading BEC protection solutions on the accuracy of sender impersonation detection, how well each identifies payment redirect fraud, and the speed at which suspicious communications are flagged for human review.
We reviewed the leading phishing protection platforms on detection accuracy, response speed, and how well technical controls complement awareness training to reduce overall click-through risk.
We compared 10 Mimecast alternatives on threat detection accuracy, Microsoft 365 integration, and total cost of ownership. Here's what we think is worth your time to evaluate.
We reviewed 10 xUEM platforms on the range of device types and operating systems they manage consistently, the depth of application lifecycle controls, and the policy enforcement that applies uniformly across corporate and personally-owned devices.
A shortlist of the best AI Red Teaming platforms, allowing you to stress-test LLMs, GenAI apps, and AI agents with adversarial tactics. These platforms also cover continuous testing and compliance mapping with frameworks like EU AI Act and NIST AI RMF.
by Alex Zawalnyski
Serval is an AI-native service management platform. We think it is a strong fit for large IT teams with a strong governance model.
We reviewed the leading email security platforms on threat detection coverage, deployment complexity, and how well each handles the full range of attacks targeting business email. Here's what we think organizations should be running.
We review 11 phishing simulation platforms based on simulation quality, training content, and reporting capabilities.
We reviewed 10 phishing awareness training platforms on simulation quality, content engagement, and the reporting that tells you which employees remain your highest risk. Click rates alone are not enough.
We reviewed the leading KnowBe4 alternatives on training content freshness, the sophistication of phishing simulation templates, and the behavioral reporting that shows whether training is translating into lower click rates.
We reviewed 11 security awareness training platforms on content engagement, simulation realism, and behavioral change metrics. The best ones show measurable risk reduction; the weakest ones show completion rates.
We reviewed the leading zero trust security platforms on identity verification depth, the granularity of resource segmentation, and how well each supports phased implementation for organizations transitioning from perimeter-based architectures.
We compare the leading software supply chain security tools on malicious package detection, SBOM management, build provenance, and regulatory alignment, so you can find the right fit for your organization.
by Joel Witts
We compare the leading AI code review tools on merge gating, source control coverage, setup effort, and pricing model, so you can find the right fit for your team.
by Joel Witts
Escape combines business-logic-aware DAST with agentic AI penetration testing. We think it is a strong fit for security teams supporting large engineering organizations, and it covers ground other scanners do not. 1. Expert Insights Verdict Escape is an offensive security platform built around two testing layers: business-logic-aware DAST that runs on every release, and agentic...
We reviewed the leading endpoint backup solutions on backup automation, the speed and granularity of recovery, and how well each manages protection across organizations with endpoints in multiple locations.
We reviewed the leading server backup platforms on backup window efficiency, restoration speed under realistic conditions, and encryption depth. Here's what we think is worth running in production.
We reviewed the leading Google Workspace backup solutions on recovery granularity, eDiscovery depth, and how they handle retention policy enforcement. The differences matter when you need to restore.
We reviewed leading SaaS backup platforms on the breadth of application coverage, recovery granularity, and how well they handle point-in-time restoration. The gaps in coverage were eye-opening.
We reviewed the leading M365 backup platforms on workload coverage, recovery granularity, and how well they handle eDiscovery requests alongside standard data restoration. Native M365 tooling does not replace what these platforms deliver.
We reviewed email security platforms built for MSP environments on tenant isolation, white-label options, and the automation that matters most when you are managing security at scale.
The best all-in-one RMM and PSA software for MSPs, compared by Expert Insights.
We reviewed the leading CASB platforms on cloud application discovery depth, DLP enforcement, and how well they integrate with existing identity and network security controls.
We reviewed the leading DevSecOps tools on how well they integrate into CI/CD pipelines, the depth of automated security checks at each pipeline stage, and whether developer-facing output drives faster fixes or just longer review queues.
We reviewed leading VM backup platforms on backup frequency, deduplication efficiency, and recovery speed under realistic conditions. Here's what the testing showed.
We reviewed the leading BCDR solutions on workflow automation, data replication performance, and how well each supports the regular testing that distinguishes organizations that will recover quickly from those that will not.
by Caitlin Harris
We reviewed 11 cloud orchestration platforms on workflow flexibility, integration breadth, and how much manual effort they actually eliminate. The gap between the most and least capable was significant.