Editorial Policy

1. Who Writes Our Content

Every research report and guide lists its author by name, role, and credentials. Our authors are practicing engineers and researchers — including our Director of Research, Security Research Lead, and Senior Research Engineers — and each piece shows who wrote it and why they are qualified to do so.

2. Expert Review Before Publishing

• Every report is reviewed by at least one independent expert who did not write the first draft.
• Findings must trace back to data we can describe: sample size, method, and limits.
• Security guidance is checked against current OWASP and ISO/IEC 25010 references before release.

3. Corrections

When we find an error, we fix it promptly and note what changed. Substantive corrections are dated so readers can see the history of a claim. To report an error, contact us via our Contact page.

4. Keeping Content Current

Research pages show their publication date. We review flagship reports at least once a year and update or retire guidance that no longer reflects current practice.

5. Independence

Our findings are not for sale. Sponsors and partners do not approve, edit, or preview research conclusions. Where a partner contributed data, we name them, as in our research collaborations.