For security incident response companies, Capability scores are driven by the depth of data ingestion, the reliability of their data lake in handling exabyte-scale data, and the breadth of out-of-the-box integrations with enterprise tools.
Innovation scores are heavily influenced by the maturity of their Agentic AI, the use of graph analytics to visualize attack paths, and the presence of Hyperautomation that learns from previous incidents to suggest new playbook rules. Top-performing vendors demonstrate transparency by citing the sources of their AI suggestions and openness by supporting the OCSF schema and avoiding data lock-in.
To improve their ranking, vendors must focus on concrete improvements in reducing Time to First Insight and proving a direct link between their platform and reduced regulatory risk.
