How we score
In short: Each platform is scored from 0 to 10 in seven areas, using public vendor material only. The total is the weighted sum divided by 100, rounded to two decimals, and a validator checks every total before each build. Platforms within 0.10 of each other share a rank. Scores are reviewed every month.
Which areas are scored, and how much does each count?
| Area | Short label | Weight |
|---|---|---|
| A1 Inventory and discovery | inventory | 15 |
| A2 Ownership and accountability | ownership | 20 |
| A3 Policy authoring and enforcement | policy | 20 |
| A4 Human approval and escalation | approval | 15 |
| A5 Audit evidence | audit evidence | 15 |
| A6 Lifecycle and revocation | lifecycle | 10 |
| A7 Buying clarity | buying clarity | 5 |
Total = sum of (score × weight) ÷ 100, shown to two decimals. Ownership and policy carry the most weight because they are the controls an auditor tests first.
What does each score mean?
- 9 to 10The vendor documents the area fully, with specific mechanisms, in public material.
- 7 to 8Documented with a clear mechanism, but one part is missing or general.
- 5 to 6Partly documented, or described in general terms without the mechanism.
- 3 to 4A related capability exists, but the area itself is not described.
- 0 to 2Not found in public material.
Every score carries a one-sentence reason and at least one source, read on 3 November 2026.
How are ties handled?
A platform shares the rank of the platform above it when its total is within 0.10 of the first platform in that group. Shared ranks show an equals sign, such as 3=. The next rank skips accordingly, so two platforms at 3= are followed by 5.
What do the evidence labels mean?
- documentedThe control is described in the vendor's public material, with a mechanism.
- partly documentedA related capability is described, but not the whole control.
- not found in public materialWe did not find it in the sources listed. This does not mean the product lacks it.
We use public pages, documentation and press releases. We do not use briefings, private demos or paid placements.
How often is the register updated?
Monthly. Each review rechecks every source, records changes in the corrections log and on the home change log, and updates the reviewed date. Buyer-need rankings use the same scores with their own weights, so they update at the same time.
Reviewed by The Register desk