Joel is the Director of Content and a co-founder at Expert Insights; a rapidly growing media company focused on covering cybersecurity solutions.
He’s an experienced journalist and editor with 8 years’ experience covering the cybersecurity space. He’s reviewed hundreds of cybersecurity solutions, interviewed hundreds of industry experts and produced dozens of industry reports read by thousands of CISOs and security professionals in topics like IAM, MFA, zero trust, email security, DevSecOps and more.
He also hosts the Expert Insights Podcast and co-writes the weekly newsletter, Cyber Weekly. Joel is driven to share his team’s expertise with cybersecurity leaders to help them create more secure business foundations.
We reviewed 9 Entra ID backup solutions on granular object recovery, retention depth, and security controls. Native Microsoft tooling does not cover what these platforms protect.
We reviewed the leading email security platforms built for Google Workspace on how effectively they extend native protection, the depth of BEC detection, and how well they handle threats that arrive through legitimate-looking senders.
We reviewed 12 email security platforms built for Microsoft 365 environments. The best ones extend native Defender capabilities; the weakest ones duplicate them.
by Craig MacAlpine
We reviewed the leading anti-impersonation and spoofing solutions on DMARC enforcement depth, display name spoofing detection, and how well each identifies the lookalike domains that attackers use to conduct convincing phishing campaigns.
We reviewed 10 platforms that sit natively inside cloud email environments. The gap between the strongest and weakest on compromised account detection was significant.
We reviewed the leading email spam filtering platforms on catch rates, the false positive rates that determine whether legitimate email gets blocked, and how well each handles the phishing and malware payloads hidden in spam campaigns.
We reviewed the leading BEC protection solutions on the accuracy of sender impersonation detection, how well each identifies payment redirect fraud, and the speed at which suspicious communications are flagged for human review.
We reviewed the leading phishing protection platforms on detection accuracy, response speed, and how well technical controls complement awareness training to reduce overall click-through risk.
We reviewed 9 Proofpoint email security alternatives on detection accuracy, the quality of threat intelligence, and how well each integrates into Microsoft 365 environments where most organizations have now consolidated their productivity infrastructure.
We compared 10 Mimecast alternatives on threat detection accuracy, Microsoft 365 integration, and total cost of ownership. Here's what we think is worth your time to evaluate.
We reviewed the leading static code analysis tools on detection accuracy, the false positive rate that determines developer trust, and how well each integrates into existing build pipelines without slowing delivery.
We reviewed the leading SCA tools on how accurately they identify vulnerable open-source components, the quality of license compliance reporting, and how well they fit into developer workflows without slowing delivery.
We reviewed 12 cyber threat intelligence platforms on the relevance and freshness of intelligence, how well each integrates with SIEM and SOAR tools, and whether the output drives faster response or just adds to the analyst reading list.
We reviewed 10 xUEM platforms on the range of device types and operating systems they manage consistently, the depth of application lifecycle controls, and the policy enforcement that applies uniformly across corporate and personally-owned devices.
The exploit involves routine git startup checks performed by each agent.
by Alex Blake
Every local user's refresh token carries an administrator type, and Cleo looks its subject up in a separate admin store with password checks disabled.
by Alessandro Mascellino
Serval is an AI-native service management platform. We think it is a strong fit for large IT teams with a strong governance model.
We reviewed the leading ITSM platforms on ticket routing automation, knowledge base integration, and the SLA tracking that shows where your service desk is performing and where it is falling short.
We reviewed 8 IT asset management solutions on discovery accuracy, the depth of software license tracking, and how well each connects asset data to the security and compliance workflows that depend on knowing exactly what is in your environment.
We reviewed the leading email security platforms on threat detection coverage, deployment complexity, and how well each handles the full range of attacks targeting business email. Here's what we think organizations should be running.
We reviewed 11 consent management platforms on consent record accuracy, preference center quality, and how well they handle consent withdrawal and audit requests under regulatory scrutiny.
We reviewed the leading cookie consent platforms on compliance coverage, banner customization, and how well they handle consent records across multi-language and multi-region deployments.
We review 11 phishing simulation platforms based on simulation quality, training content, and reporting capabilities.
We reviewed 10 phishing awareness training platforms on simulation quality, content engagement, and the reporting that tells you which employees remain your highest risk. Click rates alone are not enough.
We reviewed the leading KnowBe4 alternatives on training content freshness, the sophistication of phishing simulation templates, and the behavioral reporting that shows whether training is translating into lower click rates.
We reviewed 11 security awareness training platforms on content engagement, simulation realism, and behavioral change metrics. The best ones show measurable risk reduction; the weakest ones show completion rates.
We reviewed 9 Azure VM backup solutions on recovery granularity, backup policy depth, and how well each handles cross-region recovery scenarios when Azure infrastructure itself is affected.
We reviewed the leading MDM platforms on the range of device types and OS versions they support, remote management depth, and the application analytics that show what is running on managed devices.
We reviewed the leading cloud directory solutions on identity data management, custom attribute support, and integration depth with downstream applications. Here's what we think is worth evaluating.
We reviewed the leading zero trust security platforms on identity verification depth, the granularity of resource segmentation, and how well each supports phased implementation for organizations transitioning from perimeter-based architectures.
We reviewed the leading AI-native IT service management platforms on how automation is created and executed, the range of requests each can resolve without human involvement, and the audit trail left behind by automated actions.
by Joel Witts
We reviewed the leading enterprise IT management platforms on the range of infrastructure types they monitor, the quality of optimization recommendations, and how well each supports IT service management alongside technical operations.