Research standards
How Zero Day Analysis researches providers, labels claims and corrects published work.
What we publish
Zero Day Analysis publishes editorial research about cybersecurity providers, security services and defensive technologies. We are a publication, not a security vendor: we do not monitor, scan, test or defend any reader's infrastructure, and we operate no live threat feed.
How claims are labelled
Every substantive statement is attributed. Provider-reported claims come from vendor material and are not independently verified. Historical statements reflect the wording of the original publication date and may no longer be accurate. Editorial assessment is our own analysis and is identified as such.
No scores, no rankings
We do not publish security scores, star ratings, or 'best provider' league tables without a documented, reproducible methodology. Where legacy article titles use superlative language, that language is preserved as published and labelled as historical.
Sources
Research draws on vendor documentation, public company material and published reporting. Where a source is available it is linked from the article. We do not invent statistics, testimonials, certifications or customer counts.
Corrections
Published research is updated when a factual error is identified or when a provider's services change materially. Update dates are shown on every article. Correction requests can be sent through the contact route on the About page.
Independence
Coverage decisions are editorial. Any commercial relationship that could affect coverage is disclosed on the article where it applies.
Author
Evan Cross
Evan Cross, a cybersecurity analyst and University of Bristol graduate, specializes in reviewing IT and cybersecurity service providers for Zero Day Analysis.