Cyber Who’s Who is an independent directory. Positions represent a structured editorial estimate derived from publicly available information and periodic review. The quadrant is an original visualisation and is not affiliated with, endorsed by, or connected to any analyst firm.
Each speciality uses the same two dimensions. The horizontal axis represents Strategy & Innovation, reflecting differentiation, technical depth, and the coherence of a firm’s strategic direction. The vertical axis represents Delivery Maturity, reflecting repeatability, scale, governance, and demonstrable execution.
Each axis is scored from 0 to 100 for the selected speciality. Scores are not absolute measurements; they are a comparative framework intended to help users explore the market. A firm may appear in multiple specialities and will typically have different positions across them.
Strategy & Innovation is scored using a weighted rubric that considers capability differentiation, evidence of research and development, clarity of proposition and roadmap, integration into operational workflows, and practitioner credibility. Differentiation is assessed on whether it materially changes outcomes rather than marketing claims.
Delivery Maturity is scored using a weighted rubric that considers repeatability and process maturity, scale and coverage, depth of bench, assurance and governance, and evidence of outcomes. Where the service is inherently time-critical, such as incident response, maturity places greater emphasis on operating model and proven execution.
Positions are derived from publicly available evidence such as corporate documentation, product documentation, public case studies, reputable press coverage, and recognised certification bodies. Each firm record includes a “Last reviewed” date, with a recommended six-monthly review cycle and earlier review where material changes occur.
If a firm believes their profile is inaccurate, Cyber Who’s Who will review supplied evidence and may adjust the profile where it materially changes the scoring inputs. Changes are evidence-led and applied consistently across the directory.
Disclaimer: This site provides an independent directory view for comparative exploration. It is not investment advice, procurement advice, or a certification of security outcomes.