Craig MacAlpine is CEO and Founder of Expert Insights. Before founding Expert Insights in August 2018, Craig spent 10 years as CEO of EPA Cloud, an email security provider that rebranded as VIPRE Email Security following its acquisition by Ziff Davis, formerly J2Global (NASDAQ: ZD) in 2013.
Craig is a passionate security innovator with over 20 years of experience helping organizations to stay secure with cutting-edge information security and cybersecurity solutions.
Using his extensive experience in the email security industry, he founded Expert Insights with the singular goal of helping IT professionals and CISOs to cut through the noise and find the right cybersecurity solutions they need to protect their organizations.
We compared 10 alternatives to Zscaler Internet Access, spanning cloud proxies, converged SSE platforms, and browser-based tools, reviewing their threat protection, data controls, and the infrastructure each one requires.
by Joel Witts
We reviewed the leading endpoint security platforms on the breadth of threat detection, how well each handles the range of device types in modern enterprise environments, and the management overhead that security teams face at scale.
We compared eight alternatives to Island's enterprise browser, from secure browser extensions to managed and cloud-isolated browsers, on DLP enforcement, admin visibility into web activity, and the rollout effort each one demands.
by Joel Witts
We compare the leading AI code review tools on merge gating, source control coverage, setup effort, and pricing model, so you can find the right fit for your team.
by Joel Witts
We compare the leading software supply chain security tools on malicious package detection, SBOM management, build provenance, and regulatory alignment, so you can find the right fit for your organization.
by Joel Witts
Deception technology makes life difficult for cybercriminals by building decoys and honeypots in your environment. In this guide, we look at ten of the top solutions on the market.
by Joel Witts
We reviewed leading VM backup platforms on backup frequency, deduplication efficiency, and recovery speed under realistic conditions. Here's what the testing showed.
We reviewed the leading Google Workspace backup solutions on recovery granularity, eDiscovery depth, and how they handle retention policy enforcement. The differences matter when you need to restore.
We reviewed the leading BCDR solutions on workflow automation, data replication performance, and how well each supports the regular testing that distinguishes organizations that will recover quickly from those that will not.
by Caitlin Harris
We reviewed the leading M365 email archiving solutions on how well they extend native retention capabilities, the speed and granularity of eDiscovery search, and the compliance reporting that audit teams need beyond what Microsoft provides.
We compared the leading Kaspersky alternatives on protection depth, management console quality, and the migration support that determines how disruptive the transition will be. Here's what we found.
by Joel Witts
We reviewed the leading secret management platforms on vault architecture, secrets rotation automation, and how well they integrate with CI/CD pipelines where credentials are most often exposed.
We reviewed 12 email security platforms built for Microsoft 365 environments. The best ones extend native Defender capabilities; the weakest ones duplicate them.
by Craig MacAlpine
We reviewed the leading email archiving platforms on search performance under large data volumes, retention policy flexibility, and the eDiscovery workflows that legal and compliance teams rely on when records are requested.
We reviewed the leading DR software solutions on replication performance, the accuracy of automated recovery testing, and how well each surfaces gaps between documented recovery objectives and actual recovery capability.
We reviewed the top business password managers on encryption architecture, admin visibility, and team sharing controls. Our top picks are Dashlane, Keeper, Proton, and NordPass.
A shortlist of the best AI Red Teaming platforms, allowing you to stress-test LLMs, GenAI apps, and AI agents with adversarial tactics. These platforms also cover continuous testing and compliance mapping with frameworks like EU AI Act and NIST AI RMF.
by Alex Zawalnyski
We reviewed 10 CIAM platforms on authentication option depth, how well each handles consent management at scale, and the developer experience that determines how quickly customer identity can be integrated into your applications.
We reviewed the leading email security platforms built for Google Workspace on how effectively they extend native protection, the depth of BEC detection, and how well they handle threats that arrive through legitimate-looking senders.
We reviewed the leading BEC protection solutions on the accuracy of sender impersonation detection, how well each identifies payment redirect fraud, and the speed at which suspicious communications are flagged for human review.
We reviewed 10 xUEM platforms on the range of device types and operating systems they manage consistently, the depth of application lifecycle controls, and the policy enforcement that applies uniformly across corporate and personally-owned devices.
We reviewed email security platforms built for MSP environments on tenant isolation, white-label options, and the automation that matters most when you are managing security at scale.
We reviewed 11 MDR providers on SLA commitments, analyst response quality, and what their platforms do versus what their teams do. The split matters more than vendors admit.
We reviewed the leading MFA platforms on the authentication methods they support, application coverage breadth, and how well they handle step-up authentication for high-risk access scenarios.
We reviewed 10 platforms that sit natively inside cloud email environments. The gap between the strongest and weakest on compromised account detection was significant.
We reviewed the leading browser isolation platforms on the fidelity of the isolation environment, how well DLP policies hold up for downloads and uploads, and the performance trade-offs that determine whether employees will actually use the solution.
Serval is an AI-native service management platform. We think it is a strong fit for large IT teams with a strong governance model.
We reviewed the leading anti-impersonation and spoofing solutions on DMARC enforcement depth, display name spoofing detection, and how well each identifies the lookalike domains that attackers use to conduct convincing phishing campaigns.
We reviewed the leading email spam filtering platforms on catch rates, the false positive rates that determine whether legitimate email gets blocked, and how well each handles the phishing and malware payloads hidden in spam campaigns.
We reviewed the leading phishing protection platforms on detection accuracy, response speed, and how well technical controls complement awareness training to reduce overall click-through risk.
We compared 10 Mimecast alternatives on threat detection accuracy, Microsoft 365 integration, and total cost of ownership. Here's what we think is worth your time to evaluate.
We reviewed the leading email security platforms on threat detection coverage, deployment complexity, and how well each handles the full range of attacks targeting business email. Here's what we think organizations should be running.