Which vendors cite which reports?
- Credo AI cites a Forrester Wave Leader placement.
- Holistic AI cites being named a Challenger in the 2026 Gartner Magic Quadrant for AI Governance Platforms.
- Pillar Security cites 2026 Gartner Cool Vendor in AI Software Security and CRN's 10 Hottest AI Security Startups of 2026.
- Lasso cites a Leader placement in the Latio 2026 AI Security Market Report and a mention in the Gartner Hype Cycle for AI 2026.
- Alice and SPLX: no analyst citation was part of the facts we recorded from their pages.
Why are citations not part of our scores?
Our scores measure what each platform documents publicly about eight criteria. Analyst reports use different criteria, different vendor sets and, often, briefings and customer references we cannot see. Mixing them in would score something we cannot check. We list citations on profiles, attributed, so you know they exist.
It would also make our scores depend on which vendors took part in which reports, a decision the vendors make, not the buyer. Citations also have dates; check whether a report is current before giving it weight.
What should you ask about a citation?
- Which report, which year and which market definition? A report on AI governance platforms and one on AI application security cover different products.
- Which product did the analyst assess? Some vendors sell several.
- What were the criteria and weights?
- Is the full report available to you, or only a vendor excerpt?
- Is the placement a ranking, a category such as Leader or Challenger, or an inclusion in a list?
How do citations fit in an evaluation?
Use them to build a long list and to understand how analysts define the market. Use public documentation, like the material behind this site, to build a short list. Use a proof of concept on your own system to decide.
A citation is most useful when you can read the report itself. If you only have the vendor's excerpt, treat it as the vendor's summary of someone else's view, and weigh it accordingly against what the vendor documents and what your own tests show.
How do citations differ from what this site measures?
- Our scores: what each platform documents publicly on eight criteria, read on one date, weighted toward enforcement and evidence.
- An analyst evaluation: the analyst's own criteria and vendor set, often informed by briefings, demos and customer references.
- A press list such as CRN's: an editorial selection, usually without published scoring.
- A hype cycle mention: a position for a technology category, with vendors named as examples, rather than a vendor evaluation.
What should a long list look like?
Start with the vendors whose public pages describe the steps your program needs first. Add vendors that analysts or peers mention, and check their pages against the same criteria. Then cut to two or three for a proof of concept. The six platforms on this site are one such long list for AI governance in production: two inventory-first platforms and four that pair runtime controls with testing and framework mapping.
How will we handle new citations?
When a vendor adds or changes an analyst citation on its pages, we will update the profile's facts with the date we read it. Citations will not change scores. If a citation names a product other than the one we score, we will say so.