Methodology

How we rank cybersecurity companies

Each city page orders its companies by a rank score. This is exactly what goes into it, and what does not.

Last updated

The rank score

Five factors, 100 points

The factors in the rank score and the points each is worth
FactorUp toWhat counts
Verified20 pointsThe company has been checked by the Cybases team.
Google rating and reviews30 pointsThe company's public Google rating, weighted by how many reviews stand behind it. A high rating from a handful of reviews counts for less than a good rating from many.
Profile completeness20 pointsLogo, tagline, description, services and certifications are all filled in: 4 points for each.
Range of services15 pointsHow many relevant security services the company lists, up to five.
Certifications and compliance15 pointsPublished certifications (8 points) and compliance frameworks (7 points).

Rules

How the list is built

  • The score runs from 0 to 100 and is worked out by the system, not set by hand.
  • An editor can add or remove up to 10 points with a written reason that we keep on record.
  • Plan, Featured status and payment are not inputs to the score.
  • Companies marked Sponsored are shown first, labelled, and kept apart from the organic list. Removing every sponsored company would leave the organic order exactly as it is.
  • A city page is published only when it lists at least 10 active companies.
  • Companies that have closed or been acquired are removed from the pages.

Looking for how our product and vendor rankings work? See How We Rank. Back to the cybersecurity companies directory.

Directory ranking: questions

Straight answers about the rank score and labels.

Can a company pay to rank higher in the organic list?

No. The organic order comes from the rank score, and plan, Featured status and payment are not part of it. A paid Sponsored spot sits above the list and is labelled.

Where do the Google ratings come from?

They are each company's public Google rating and review count. A company with no rating simply gets no points for that factor.

Does Cybases test these companies?

No. The directory compares published information about companies. It does not test their services, so use it to build a shortlist and then ask for references and a proposal.

Why is a company I know missing?

It may not be listed yet, or its city page may not have reached 10 companies. Contact us with the company name and website and we will look into it.

Tell us your company and website, and we'll send the slots and details.

By sending this you agree to our Privacy Policy and Terms.