Tekspace Research

See how the products you’re considering actually perform.

We test security products against the same benchmarks. Three are published in full, and all twenty categories shape the advice we give.

Get startedGet new research first
20
categories researched
3
benchmarks published
1,700+
features compared

As featured in

  • IT Brief
  • SecurityBrief
  • ChannelLife

Published benchmarks

Three categories, tested and published in full.

Latest benchmark

Browser security

Can you see what your people do inside the browser, AI tools included?

Protects where your people actually work: the browser, its extensions and the AI tools in it.

What we found

Visibility inside the session is what no other layer gives you. It tells an approved AI tool apart from sensitive data pasted into a personal account.

Examples of what we test

  • In-session, not at the network edge
  • AI and shadow SaaS governed
  • Agentless, BYOD included

Same tests on every product. The full scores are in the benchmark.

Read the benchmark

Vendors assessed13 vendors assessed

  • Acium
  • Akamai LayerX
  • Apozy
  • Conceal
  • CrowdStrike Seraphic
  • DefensX
  • Harmony
  • KeepAware
  • ManageEngine
  • Menlo Security
  • Push Security
  • Red Access
  • SquareX

1 / 3

Our method

Tested, then proven in the field.

  1. 01

    Market research

    We map every product in the category, then shortlist the leaders and the strong emerging players.

  2. 02

    Hands-on testing and vendor consultation

    We test each shortlisted product ourselves, then put our findings to the vendor’s own team before we score it.

  3. 03

    Live client environments

    We check the scores against how each product runs in the businesses we look after.

Research is step three of the Tekspace Fit Method: it decides which options deserve your time.See the Fit Method

Validated outside Tekspace

Checked by people who do this for a living.

Before we publish, we interview practitioners outside Tekspace: offensive security testers on the threat, and the people who run these tools on the outcomes.

Threat context · Parabellum

  • Martin Dybalski Director
  • Stuart Shanahan Director of Technical Services
  • Kris Bowen Senior Offensive Security Consultant

Security outcomes

  • Matt Flack Chief Services Officer, ASI Solutions
  • Francisco Vera Managing Director, Securelogic Solutions
  • Stacy Gurrie Chief Executive Officer, Byte
  • Mathew Jose Chief Information Security Officer, CodeBlue New Zealand

No vendor pays for a place in our research.

Seventeen more categories shape our advice before they’re published.

Get new research first

In the lab now

Updated 5 Oct 2026

Vulnerability orchestration

The layer between your scanners and your fixes: one queue of findings, the noise cut, each fix routed to the team that owns it.

  1. Threat research
  2. Product data
  3. Write-up
  4. Expert interviews
  5. Published

  • What we’re testing

    • 24/7 managed detection (MDR)
    • Correlates identity and cloud
    • Automated containment

  • What we’re testing

    • Default-deny allowlisting
    • Ringfencing trusted apps
    • Maintained known-good catalogue

  • What we’re testing

    • Third-party apps, not just OS
    • Staged rollout in rings
    • Essential Eight patch windows

  • What we’re testing

    • Ranked by exploitability, not raw CVSS
    • OS and third-party patching automated
    • Essential Eight remediation tracked

  • What we’re testing

    • App-level access, no VPN
    • Web gateway and CASB in one
    • One agent, one policy

  • What we’re testing

    • Zero-knowledge encryption
    • Shared admin logins controlled
    • Passkeys and secrets vaulted

  • What we’re testing

    • Phishing-resistant SSO and MFA
    • Joiner-mover-leaver automation
    • Access reviews and governance

  • What we’re testing

    • Discovery across every CA
    • Automated renewal (ACME)
    • Crypto-agility for post-quantum

  • What we’re testing

    • Agentless misconfig scanning
    • Attack paths ranked by risk
    • Runtime workload protection

  • What we’re testing

    • Agent and MCP discovery
    • Prompt injection blocked
    • Least-privilege agent identity

  • What we’re testing

    • Sensitive data found, labelled
    • Excess permissions removed
    • Copilot data exposure checked

  • What we’re testing

    • Noise filtered before ingest
    • Routing to low-cost storage
    • Data normalised at source

  • What we’re testing

    • Controls mapped to frameworks
    • Evidence collected automatically
    • Third-party risk tracked

  • What we’re testing

    • Autonomous internal pentesting
    • Controls tested by simulation
    • Fixes retested automatically

  • What we’re testing

    • Leaked credentials flagged
    • Impersonation sites taken down
    • Dark web chatter monitored

  • What we’re testing

    • Coverage mapped to MITRE ATT&CK
    • Broken or silent rules flagged
    • Config drift from baseline

  • What we’re testing

    • Drift from baseline reverted
    • Least-privilege delegated admin
    • Tenant config and data backed up

All twenty categories

Browse everything we research.

Open any category to see what we assess. Published benchmarks link to the full research; for the rest, join the waitlist to get it first.

3 published · 1,700+ features compared

  • Published benchmark

    Email Security

    Catches what Microsoft 365 and Google let through, before and after it reaches the inbox.

    Assessed on efficacy, not reputation.

    Vendors assessed include Abnormal, Barracuda, Check Point Harmony, Cloudflare, Darktrace, Graphus, Hornetsecurity Vade, Ironscales, KnowBe4 Egress, Material, Mesh, Mimecast, Paubox, Proofpoint, Sophos, SpamTitan, Sublime.

    What it answers: which capabilities matter, where products differ, and what to test in a proof of value.

    Read the researchSee every vendor

  • Published benchmark

    Security Awareness Training

    Turns staff from the easiest way in into people who spot the lure and report it.

    Assessed on efficacy, not reputation.

    Vendors assessed include Adaptive Security, Barracuda, Boxphish, CyberHoot, Hacker Rangers, Hoxhunt, Huntress, ID Agent, Immersive Labs, Infosec IQ, KnowBe4, MetaCompliance, Mimecast, Ninjio, Phished, Proofpoint, Riot, SANS Institute, SoSafe, usecure.

    What it answers: which capabilities matter, where products differ, and what to test in a proof of value.

    Read the researchSee every vendor

  • Internal research

    Endpoint Detection and Response (EDR/XDR)

    Spots and stops attacks on laptops and servers, with someone watching around the clock.

    What it answers: which capabilities matter, where products differ, and what to test in a proof of value.

    Internal research. Informs our advice, not yet published.

  • Internal research

    Application Control

    Stops unapproved software running, and limits what approved apps can touch.

    What it answers: which capabilities matter, where products differ, and what to test in a proof of value.

    Internal research. Informs our advice, not yet published.

  • Internal research

    Patch Management

    Gets operating system and app updates onto every device quickly, without breaking things.

    What it answers: which capabilities matter, where products differ, and what to test in a proof of value.

    Internal research. Informs our advice, not yet published.

  • Internal research

    Vulnerability and Exposure Management

    Closes the gap between finding vulnerabilities and fixing them, worst first.

    What it answers: which capabilities matter, where products differ, and what to test in a proof of value.

    Internal research. Informs our advice, not yet published.

  • Published benchmark

    Browser Security

    Protects where your people actually work: the browser, its extensions and the AI tools in it.

    Assessed on efficacy, not reputation.

    Vendors assessed include Acium, Akamai LayerX, Apozy, Conceal, CrowdStrike Seraphic, DefensX, Harmony, KeepAware, ManageEngine, Menlo Security, Push Security, Red Access, SquareX.

    What it answers: which capabilities matter, where products differ, and what to test in a proof of value.

    Read the researchSee every vendor

  • Internal research

    Secure Access (SASE/ZTNA)

    Connects staff to apps from anywhere, without a VPN that opens the whole network.

    What it answers: which capabilities matter, where products differ, and what to test in a proof of value.

    Internal research. Informs our advice, not yet published.

  • Internal research

    Password Management

    Keeps every password, passkey and admin login in a vault only you can open.

    What it answers: which capabilities matter, where products differ, and what to test in a proof of value.

    Internal research. Informs our advice, not yet published.

  • Internal research

    Identity and Access Management

    Gives people the right access, and takes it away the day they leave.

    What it answers: which capabilities matter, where products differ, and what to test in a proof of value.

    Internal research. Informs our advice, not yet published.

  • Internal research

    Certificate and Machine Identity Management

    Finds every certificate you own and renews it before an expiry causes an outage.

    What it answers: which capabilities matter, where products differ, and what to test in a proof of value.

    Internal research. Informs our advice, not yet published.

  • Internal research

    CNAPP

    Finds and fixes the risky settings, exposures and live threats across your cloud accounts.

    What it answers: which capabilities matter, where products differ, and what to test in a proof of value.

    Internal research. Informs our advice, not yet published.

  • Internal research

    Agentic AI Security

    Keeps AI agents in check: what they can reach and what they can do.

    What it answers: which capabilities matter, where products differ, and what to test in a proof of value.

    Internal research. Informs our advice, not yet published.

  • Internal research

    Data Governance and Access Control

    Finds your sensitive data and makes sure only the right people can open it.

    What it answers: which capabilities matter, where products differ, and what to test in a proof of value.

    Internal research. Informs our advice, not yet published.

  • Internal research

    SIEM Data Optimisation

    Cuts what you pay to collect and store security logs, without losing what matters.

    What it answers: which capabilities matter, where products differ, and what to test in a proof of value.

    Internal research. Informs our advice, not yet published.

  • Internal research

    Governance, Risk and Compliance

    Shows where you stand against the Essential Eight, ISO 27001 and other frameworks.

    What it answers: which capabilities matter, where products differ, and what to test in a proof of value.

    Internal research. Informs our advice, not yet published.

  • Internal research

    Penetration Testing and Exposure Validation

    Proves which weaknesses an attacker could actually use, and that your fixes worked.

    What it answers: which capabilities matter, where products differ, and what to test in a proof of value.

    Internal research. Informs our advice, not yet published.

  • Internal research

    Threat Intelligence and Digital Risk Monitoring

    Watches outside your network for leaked data, fake sites and attackers naming you.

    What it answers: which capabilities matter, where products differ, and what to test in a proof of value.

    Internal research. Informs our advice, not yet published.

  • Internal research

    SOC Drift Management

    Catches when your detections and security settings quietly stop working as intended.

    What it answers: which capabilities matter, where products differ, and what to test in a proof of value.

    Internal research. Informs our advice, not yet published.

  • Internal research

    M365 Management

    Keeps your Microsoft 365 tenant securely configured, backed up and tidy as it changes.

    What it answers: which capabilities matter, where products differ, and what to test in a proof of value.

    Internal research. Informs our advice, not yet published.