Craig MacAlpine is CEO and Founder of Expert Insights. Before founding Expert Insights in August 2018, Craig spent 10 years as CEO of EPA Cloud, an email security provider that rebranded as VIPRE Email Security following its acquisition by Ziff Davis, formerly J2Global (NASDAQ: ZD) in 2013.
Craig is a passionate security innovator with over 20 years of experience helping organizations to stay secure with cutting-edge information security and cybersecurity solutions.
Using his extensive experience in the email security industry, he founded Expert Insights with the singular goal of helping IT professionals and CISOs to cut through the noise and find the right cybersecurity solutions they need to protect their organizations.
We reviewed 12 email security platforms built for Microsoft 365 environments. The best ones extend native Defender capabilities; the weakest ones duplicate them.
by Craig MacAlpine
We reviewed the leading email spam filtering platforms on catch rates, the false positive rates that determine whether legitimate email gets blocked, and how well each handles the phishing and malware payloads hidden in spam campaigns.
by Joel Witts
We reviewed the leading endpoint security platforms on the breadth of threat detection, how well each handles the range of device types in modern enterprise environments, and the management overhead that security teams face at scale.
by Joel Witts
We reviewed email security platforms built for MSP environments on tenant isolation, white-label options, and the automation that matters most when you are managing security at scale.
by Joel Witts
We reviewed the leading phishing protection platforms on detection accuracy, response speed, and how well technical controls complement awareness training to reduce overall click-through risk.
by Caitlin Harris
Serval is an AI-native service management platform. We think it is a strong fit for large IT teams with a strong governance model.
We reviewed the leading M365 backup platforms on workload coverage, recovery granularity, and how well they handle eDiscovery requests alongside standard data restoration. Native M365 tooling does not replace what these platforms deliver.
by Caitlin Harris
We reviewed the leading KnowBe4 alternatives on training content freshness, the sophistication of phishing simulation templates, and the behavioral reporting that shows whether training is translating into lower click rates.
by Mirren McDade
We reviewed the top business password managers on encryption architecture, admin visibility, and team sharing controls. Our top picks are Dashlane, Keeper, Proton, and NordPass.
by Joel Witts
Teleskope combines DSPM with cloud and SaaS DLP and fixes what it finds in the same platform, from redaction to revoking access. We think it fits security teams with more sensitive data exposure than people to fix it.
by Craig MacAlpine
We reviewed 12 patch management platforms on scanning accuracy, deployment automation, and how well each helps teams prioritize the patches that reduce the most risk. Automation depth varied significantly.
by Joel Witts
We reviewed 11 UEM platforms on the range of device types and operating systems they manage consistently, the depth of application lifecycle controls, and the policy enforcement that applies uniformly across corporate and personally-owned devices.
by Caitlin Harris
The best all-in-one RMM and PSA software for MSPs, compared by Expert Insights.
by Joel Witts
We reviewed 11 cloud orchestration platforms on workflow flexibility, integration breadth, and how much manual effort they actually eliminate. The gap between the most and least capable was significant.
by Alex Zawalnyski
We reviewed the leading user authentication and access management platforms on policy control depth, the range of authentication options, and how well each handles risk-based access decisions in real time.
by Joel Witts
We reviewed the leading server backup platforms on backup window efficiency, restoration speed under realistic conditions, and encryption depth. Here's what we think is worth running in production.
by Caitlin Harris
We reviewed 9 RMM platforms on automation depth, multi-client management, and the monitoring quality that tells you about problems before your clients do. Pricing structure matters as much as features at scale.
by Caitlin Harris
We reviewed the leading IGA platforms on access certification workflow accuracy, the depth of lifecycle management automation, and how well each enforces least privilege across the identity environment.
by Mirren McDade
We reviewed the leading XDR platforms on the breadth of data sources they ingest, the quality of cross-layer correlation, and how well automated response handles threats that span endpoint, identity, and network.
by Alex Zawalnyski
We reviewed the leading email encryption platforms on the strength of encryption implementation, the friction they introduce for recipients, and how well the admin controls support compliance and audit requirements.
by Joel Witts
We reviewed the leading business DMARC solutions on reporting quality for identifying unauthorized senders, ease of moving from monitoring to enforcement, and how well each surfaces domain spoofing attempts before they reach targets.
by Joel Witts
We reviewed the leading CyberArk alternatives on privileged access controls, session monitoring depth, and implementation overhead. Some are simpler; some are comparably capable at lower cost.
by Caitlin Harris
We reviewed the leading CASB platforms on cloud application discovery depth, DLP enforcement, and how well they integrate with existing identity and network security controls.
by Joel Witts
We reviewed the leading BEC protection solutions on the accuracy of sender impersonation detection, how well each identifies payment redirect fraud, and the speed at which suspicious communications are flagged for human review.
by Alex Zawalnyski
We reviewed the leading endpoint backup solutions on backup automation, the speed and granularity of recovery, and how well each manages protection across organizations with endpoints in multiple locations.
by Mirren McDade
We reviewed the leading anti-impersonation and spoofing solutions on DMARC enforcement depth, display name spoofing detection, and how well each identifies the lookalike domains that attackers use to conduct convincing phishing campaigns.
by Mirren McDade
We reviewed the leading policy management platforms on the ease of policy creation and distribution, automated review scheduling, and how well each tracks employee acknowledgment in a format that satisfies auditors.
by Craig MacAlpine
We reviewed DMARC platforms built for MSP deployments on tenant management depth, white-label reporting quality, and the automation that reduces the manual effort of moving client domains toward full enforcement.
by Alex Zawalnyski
We reviewed the leading SharePoint Online backup solutions on site, library, and item-level recovery granularity, how well each handles versioned content, and the restoration speed that determines how long SharePoint is unavailable after a loss event.
by Joel Witts
We reviewed the leading Active Directory recovery tools on the granularity of object-level restoration, how quickly each can perform a full forest recovery, and whether the backup architecture protects against the ransomware attacks that most commonly take AD offline.
by Mirren McDade
We reviewed on-premises endpoint security platforms on detection accuracy, management console depth, and how they perform without cloud connectivity. Here's what we found for organizations that need full local control.
by Mirren McDade
We reviewed the leading Dynamics 365 backup solutions on the breadth of data covered, recovery granularity, and how well each handles the complex entity relationships in Dynamics environments that make selective restoration challenging.
by Joel Witts