Corrections

Corrections log

When we get something wrong we fix it on the page and record it here. Vendor status, sponsor or not, makes no difference.

Right of reply

Any vendor, reader or practitioner can dispute an entry or a score by email to hello@ctee.org. We reply within 5 working days. If the entry is wrong, we correct it within 10 working days and record the change below with its date. Sponsors get no veto and no different treatment: the same rules apply whether or not a vendor pays for a labelled listing.

Claim or correct this listing

Tell us what is wrong or what you want to confirm, and link a public source we can check. The owner reviews every claim. Nothing changes on the site until it has been reviewed, and a claim never changes a score or placement.

Material corrections, newest first
DatePageWhat changed
22 Sep 2026Vendor directoryPricing field changed from "enterprise quote" to "not published" for 12 vendors, because no vendor page states quote-only pricing. Microsoft Security Exposure Management: "per-user" changed to "bundled with licence suites".
21 Sep 2026Nucleus SecurityFounding year corrected from 2018 to 2019, per the vendor's about page.
21 Sep 2026CyCognito"Some 30 exposure categories" corrected to "35 or more threat categories", per the vendor's testing page.
20 Sep 2026Tenable OneValidation score raised from 0 to 1 after re-review of public documentation.
20 Sep 2026Nucleus SecurityDiscovery score raised from 0 to 1 after re-review.
20 Sep 2026DetectifyMobilisation score raised from 0 to 1 after re-review.
20 Sep 2026Armis CentrixValidation score lowered from 1 to 0: its checks confirm a vulnerability is present but do not test exploitability.
20 Sep 2026IONIXHeadquarters corrected from New York to Tel Aviv; pricing "per-asset" changed (now "not published", see 22 Sep).

Send corrections to hello@ctee.org.