Joel is the Director of Content and a co-founder at Expert Insights; a rapidly growing media company focused on covering cybersecurity solutions.
He’s an experienced journalist and editor with 8 years’ experience covering the cybersecurity space. He’s reviewed hundreds of cybersecurity solutions, interviewed hundreds of industry experts and produced dozens of industry reports read by thousands of CISOs and security professionals in topics like IAM, MFA, zero trust, email security, DevSecOps and more.
He also hosts the Expert Insights Podcast and co-writes the weekly newsletter, Cyber Weekly. Joel is driven to share his team’s expertise with cybersecurity leaders to help them create more secure business foundations.
Articles By: Joel Witts
711 results
Hackers Use Stolen Entra ID and Azure Credentials to Breach MSPs and Their Clients
Security provider Todyl says one operator used stolen app credentials to reach 27 organizations through managed service providers since Nov. 1, with no Microsoft vulnerability involved.
by Joel Witts
Best 10 Dashlane Password Manager Alternatives
We take a deep dive into 10 alternatives to Dashlane, looking at vault security, admin visibility, and end user features for creating and sharing passwords.
by Caitlin Harris
Best 9 NordPass Alternatives
We compare the top NordPass alternatives on identity integration, deployment options, compliance certifications, and pricing.
by Alex Zawalnyski
Best 10 Bitwarden Alternatives
We take a look at the leading Bitwarden password manager alternatives, considering deployment options, additional features like SSO, admin policies and breach monitoring, and cost.
by Joel Witts
Best 10 1Password Alternatives
We compare the top alternatives to 1Password, assessing their password management capabilities, their user experience, deployment options, and pricing tiers.
by Alex Zawalnyski
Best 10 MySQL Workbench Alternatives
Looking for a MySQL Workbench alternative? We compared the top MySQL clients on SQL editing, data modeling, OS support, multi-database work, and credentials.
by Joel Witts
Best 10 Microsoft SQL Server Management Studio (SSMS) Alternatives
We reviewed the leading SSMS alternatives on SQL Server query and administration tools, native support for Windows, macOS and Linux, coverage of other database engines, and how each one stores credentials and logs activity.
by Joel Witts
Best 10 DBeaver Alternatives
We compared the leading DBeaver alternatives, looking at which databases they support, their query and schema tools, how they store passwords and log activity, and whether they offer a free edition.
by Joel Witts
Best 10 Database Management Software For Developers and DBAs
We reviewed the leading database management tools on how many database engines each one connects to, the query and schema tools developers and DBAs use every day, and how each one stores credentials, controls team access, and logs activity.
by Joel Witts
Best eDiscovery Software Solutions
We reviewed 10 eDiscovery platforms on the speed and accuracy of custodian searches, the quality of legal hold workflows, and how well each handles large data volumes without sacrificing search precision.
by Caitlin Harris
Best Disclosure Management Software
We reviewed the leading disclosure management platforms on workflow automation for regulatory filings, the accuracy of XBRL tagging tools, and how well each handles multi-jurisdiction disclosure obligations.
by Alex Zawalnyski
Attackers Exploit Exposed Flowise AI Servers to Hunt for Cloud Credentials
Era found 703 Flowise servers online with no authentication as it tracked a framework that hid its commands behind chatbot “hello” messages.
by Alessandro Mascellino
CISO Q&A: John J. Masserini On Why A Breach Doesn’t Automatically Mean The CISO Failed
"I'd rather be measured on how fast we found the problem and how well we contained it, not on a perfect record no organization our size has ever achieved," says John J. Masserini, Founder and Managing Partner of SentiCon Security.
by Mirren McDade
Best Security Awareness Training Solutions
We reviewed 11 security awareness training platforms on content engagement, simulation realism, and behavioral change metrics. The best ones show measurable risk reduction; the weakest ones show completion rates.
by Joel Witts
Best Security Awareness Content Solutions
We reviewed the leading security awareness content platforms on module quality, the range of delivery formats, and how well organizations can tailor content to specific roles and risk levels.
by Mirren McDade
Best Phishing Awareness Solutions
We reviewed 10 phishing awareness training platforms on simulation quality, content engagement, and the reporting that tells you which employees remain your highest risk. Click rates alone are not enough.
by Caitlin Harris
Best Phishing Simulation And Testing Solutions
We review 11 phishing simulation platforms based on simulation quality, training content, and reporting capabilities.
by Alex Zawalnyski
Attackers Hijack Enterprise AI Accounts and Resell Access, Running Up Bills of Nearly $1 Million
Stolen cloud credentials let criminals switch on AI services victims weren’t using, sell the access on and leave the victim with the bill.
by Alessandro Mascellino
Best Alternatives to KnowBe4 SAT
We reviewed the leading KnowBe4 alternatives on training content freshness, the sophistication of phishing simulation templates, and the behavioral reporting that shows whether training is translating into lower click rates.
by Mirren McDade
Best 10 Agentic AI Governance Solutions (2026)
We reviewed the best agentic AI governance solutions for 2026, comparing agent discovery, policy enforcement, runtime monitoring, lifecycle governance, and compliance mapping to help you find the right fit for your business.
by Joel Witts
AI Red Teaming Solutions
A shortlist of the best AI Red Teaming platforms, allowing you to stress-test LLMs, GenAI apps, and AI agents with adversarial tactics. These platforms also cover continuous testing and compliance mapping with frameworks like EU AI Act and NIST AI RMF.
by Alex Zawalnyski
Best GenAI Security Solutions
We reviewed the leading GenAI security platforms on the breadth of AI tool coverage, DLP enforcement for AI-generated and AI-submitted content, and how well each gives security teams the visibility they need to govern AI use across the organization.
by Joel Witts
Best Remote Desktop Software
We reviewed 11 remote desktop platforms on connection performance, session recording, and the collaboration features that make remote support faster. Reliability under real-world network conditions separated the field.
by Caitlin Harris
Best Vulnerability Scanning Software Solutions
We reviewed the leading vulnerability scanning platforms on scan coverage, detection accuracy, and how well each integrates threat intelligence to help teams prioritize fixes based on real-world exploitability.
by Alex Zawalnyski
Best Unified Endpoint Management (UEM) Solutions
We reviewed 11 UEM platforms on the range of device types and operating systems they manage consistently, the depth of application lifecycle controls, and the policy enforcement that applies uniformly across corporate and personally-owned devices.
by Caitlin Harris
Best Desktop Management Software
We reviewed the leading desktop management platforms on policy enforcement consistency, the automation that reduces manual configuration tasks, and the reporting that gives IT teams visibility over compliance status across the device fleet.
by Alex Zawalnyski
Best Data Privacy Management Software
We reviewed the leading data privacy management platforms on the accuracy of automated data discovery, the quality of consent and DSAR workflows, and how well each keeps privacy programs current as regulations evolve.
by Caitlin Harris
Best Data Subject Access Request (DSAR) Software
We reviewed the leading DSAR software solutions on the speed of automated data discovery across sources, quality of response package generation, and how well each tracks requests from submission through to verified closure.
by Mirren McDade
Best Cookie Consent Software
We reviewed the leading cookie consent platforms on compliance coverage, banner customization, and how well they handle consent records across multi-language and multi-region deployments.
by Alex Zawalnyski
Best Consent Management Solutions
We reviewed 11 consent management platforms on consent record accuracy, preference center quality, and how well they handle consent withdrawal and audit requests under regulatory scrutiny.
by Alex Zawalnyski
Google Bans TV Box Maker That Built Backdoor Into 1.3 Million Android Devices
Google says Videostrong deliberately embedded malware in device firmware, giving criminal operators access to the devices and their internet connections.
by Alessandro Mascellino
Best Email Security Gateways
We reviewed the leading email security platforms on threat detection coverage, deployment complexity, and how well each handles the full range of attacks targeting business email. Here's what we think organizations should be running.
by Joel Witts