Joel is the Director of Content and a co-founder at Expert Insights; a rapidly growing media company focused on covering cybersecurity solutions.
He’s an experienced journalist and editor with 8 years’ experience covering the cybersecurity space. He’s reviewed hundreds of cybersecurity solutions, interviewed hundreds of industry experts and produced dozens of industry reports read by thousands of CISOs and security professionals in topics like IAM, MFA, zero trust, email security, DevSecOps and more.
He also hosts the Expert Insights Podcast and co-writes the weekly newsletter, Cyber Weekly. Joel is driven to share his team’s expertise with cybersecurity leaders to help them create more secure business foundations.
We reviewed the leading cookie consent platforms on compliance coverage, banner customization, and how well they handle consent records across multi-language and multi-region deployments.
We reviewed 11 consent management platforms on consent record accuracy, preference center quality, and how well they handle consent withdrawal and audit requests under regulatory scrutiny.
We reviewed the leading AI-native IT service management platforms on how automation is created and executed, the range of requests each can resolve without human involvement, and the audit trail left behind by automated actions.
by Joel Witts
We've evaluated the best browser security solutions for small businesses to help lean security and IT teams protect web-based work, prevent data loss, and stop phishing without heavy infrastructure or dedicated security staff.
We reviewed the leading GenAI security platforms on the breadth of AI tool coverage, DLP enforcement for AI-generated and AI-submitted content, and how well each gives security teams the visibility they need to govern AI use across the organization.
We reviewed the leading CDR platforms on detection logic depth, response automation, and how well each handles multi-cloud environments. Cloud-native coverage varied more than vendors suggest.
We reviewed 11 cloud compliance platforms on frameworks supported natively, audit evidence quality, and how well they handle shared responsibility model compliance obligations.
We reviewed 11 compliance management platforms on framework breadth, audit workflow quality, and how well each handles vendor risk alongside internal controls. The range of capability was wide.
We reviewed 11 cybersecurity risk management platforms on risk quantification depth, the quality of threat and vulnerability data they ingest, and how well they translate technical risk into the financial and business impact language that boards need.
We reviewed 11 DRP platforms on external threat coverage, alerting speed, and the quality of the intelligence they surface. Some are genuinely useful; others are dashboards dressed as solutions.
We reviewed the leading vulnerability management platforms on the accuracy and coverage of scanning, how well risk scoring reflects real-world exploitability rather than theoretical severity, and the remediation workflows that help teams close exposures at pace.
We compared 10 alternatives to Zscaler Internet Access, spanning cloud proxies, converged SSE platforms, and browser-based tools, reviewing their threat protection, data controls, and the infrastructure each one requires.
by Joel Witts
We reviewed the leading EDR platforms on detection accuracy, the quality of behavioral analysis, and how well automated response handles threats that require speed over manual investigation.
We reviewed the leading malware protection platforms on detection accuracy across delivery vectors, remediation speed, and how well they integrate endpoint and email protection into a coherent defense.
by Alex Zawalnyski
We reviewed the leading endpoint security platforms on the breadth of threat detection, how well each handles the range of device types in modern enterprise environments, and the management overhead that security teams face at scale.
We compared eight alternatives to Island's enterprise browser, from secure browser extensions to managed and cloud-isolated browsers, on DLP enforcement, admin visibility into web activity, and the rollout effort each one demands.
by Joel Witts
We compare the leading AI code review tools on merge gating, source control coverage, setup effort, and pricing model, so you can find the right fit for your team.
by Joel Witts
We compare the leading software supply chain security tools on malicious package detection, SBOM management, build provenance, and regulatory alignment, so you can find the right fit for your organization.
by Joel Witts
Deception technology makes life difficult for cybercriminals by building decoys and honeypots in your environment. In this guide, we look at ten of the top solutions on the market.
by Joel Witts
Agentic MDR is a new way of delivering managed detection and response, with AI workflows built in. We look at ten of the best solutions currently on the market.
by Joel Witts
We reviewed 10 NHI management platforms on how completely they discover NHIs across cloud and SaaS, how well they flag which identities pose a real risk, and whether they remediate by rotating and revoking credentials, rather than just raising alerts.
We've evaluated the best agentic IAM solutions to help security and identity teams register AI agents as first-class identities, enforce least-privilege access at runtime, and close the shadow agent gap.
We reviewed the leading secure data management platforms on classification accuracy, policy enforcement depth, and how well they support audit and compliance workflows across enterprise data environments.
We reviewed 9 Microsoft Entra ID alternatives on identity lifecycle management, SSO and MFA capabilities, and how well each supports environments that extend beyond Microsoft's ecosystem. Some offer capabilities Entra ID does not.
We compared the leading Kaseya VSA alternatives on automation depth, security monitoring integration, and how well each handles the range of OS types and device categories that modern IT environments include.
We compared the leading Datto RMM alternatives on automation breadth, security monitoring integration, and pricing at different client volume levels. Here's what we think is worth trialing before you commit to a switch.
by Caitlin Harris
We compared the leading Atera RMM alternatives on automation capabilities, monitoring depth, and how the pricing models compare for practices managing different volumes of endpoints and clients.
by Mirren McDade
We reviewed 9 Entra ID backup solutions on granular object recovery, retention depth, and security controls. Native Microsoft tooling does not cover what these platforms protect.
Discover the best patch management solutions for Windows devices. Explore features such as update scanning, automated patch deployment, and reporting.
We reviewed 11 ITDR platforms on the accuracy of identity threat detection, how well each integrates with existing IAM and directory environments, and the speed of alerting when privileged identity activity deviates from established patterns.
We reviewed the leading desktop management platforms on policy enforcement consistency, the automation that reduces manual configuration tasks, and the reporting that gives IT teams visibility over compliance status across the device fleet.
We reviewed leading VM backup platforms on backup frequency, deduplication efficiency, and recovery speed under realistic conditions. Here's what the testing showed.