Editorial & Listing Policy
We make money from this site. Here's exactly how, and — more importantly — what that money can't buy.
What money can't buy
- No payment changes a Playbook page, a threat intelligence post, or the readiness assessment's scoring. That content is written to be useful, full stop.
- No provider can pay to be added to the directory if they don't genuinely operate in that category — paid tiers affect visibility, never eligibility.
- No sponsor sees assessment results, form submissions, or subscriber data beyond the leads they've explicitly paid to receive through a referral agreement.
Directory listing tiers
Every genuine provider we identify in a category gets a basic listing — name, category, and a factual blurb. No payment required.
Higher placement within a category and a distinguishing badge. Does not affect the factual content of the listing or how providers in other tiers are described.
Our top tier — priority placement, the badge, and eligibility for our lead-referral program. Reserved for providers we've done direct diligence on, not just paid us.
Newsletter sponsorships
Sponsored placements in the Enterprise Ransomware Brief are always labeled as sponsored, appear separately from editorial content, and never influence which threats or trends we choose to cover that week.
Lead-referral partnerships
A small number of Verified Partners pay us a referral fee for qualified leads from our crisis and assessment pages. Which partner a given request is routed to is based on category and stated need — never on which partner pays the most.
Corrections
Spot something inaccurate in a listing, a Playbook page, or a threat intelligence post? Tell us — see the About page — and we'll correct it.