For marketing and product marketing
They rewrite the page. You see the line.
We check competitor homepages every week and keep both sides of the change. When a rival rewrites its headline, you get the old line, the new line and the date — with the page it came from.
The line they changed
MandosDashboard
Explorer
Radars
Competition
Intel Reports
NIST Profiler
Overview
Market map
Momentum
Funding
Valuations
M&A
Exit Readiness
Hiring
Products
Alert Center
MCP & API
Sep 1, 2026
TinesPositioning shiftHomepage repositioned from platform-centric messaging to a governance/security-of-AI-adoption narrative, introducing Tines 3B as the flagship offering addressing 'wild code' and AI sprawl risk.
Sola SecurityPositioning shiftCurrent homepage further evolves messaging to 'The enterprise security brain', emphasizing a single living understanding of the environment backed by evidence, for teams and AI agents alike.
CormaPositioning shiftThe current homepage reframes Corma from a SAM/IAM software platform to broader 'infrastructure on Autopilot' language explicitly covering both employees and their AI agents, alongside updated Gartner recognition now citing the 2026 Magic Quadrant.
Aug 2, 2026
Horizon3.aiAug 1, 2026
Tidal CyberPositioning shiftCurrent homepage hero banner shifted to promoting a new on-demand webinar about asset visibility and vulnerability prioritization, expanding messaging beyond procedures to asset visibility and AI-driven intelligence.
Bloom SecurityPositioning shiftBloom Security's homepage hero shifted from the July 2026 tagline "Securing the AI-native Endpoint" with a Get a Demo CTA and full company footer, to a stripped-down homepage led by a webinar promo banner and the question "Do you really know what happens on your endpoints?" alongside a large customer/partner logo wall.
CyberProofPositioning shiftBy the current homepage (Aug 2026), CyberProof's positioning shifted entirely away from the Threat-Led Defense/Asset-Exposure-Defense Management framing seen through May 2026 snapshots, to an MXDR platform powered by AI with 'Agentic MXDR for today's Agentic SOC' messaging and CDC Reveal360 branding.
AlicePositioning shiftBy August 2026 the homepage tagline changed from 'INNOVATE UNAFRAID' with 'Security, Safety, and Trust for the AI Era' to 'ADVANCE UNAFRAID' with 'Secure, Safe, & Trustworthy AI - Across every app, agent, and model you ship. From build to production,' and added a new 'See Our Frontier Work' link to foundation models solutions plus an expanded customer logo bar including Google, Anthropic, Meta, TikTok, Lovable, AWS, NVIDIA, Niantic, Cohere, Amazon, Black Forest Labs, and Udemy.
The old headline and the new one, side by side.
Stop auditing rival homepages by hand and stop waiting for a rep to paste a link in Slack. When a competitor rewrites its headline or changes the category it claims, the move is filed with both sides of the sentence and the page it came from.
- Both halves, verbatim
- Not a summary of the change — the sentence before and the sentence after, quoted. If we cannot read both sides, we file nothing.
- Weekly on pages, four-hourly on everything else
- Homepages and pricing pages are checked every week. Blogs, LinkedIn and news every four hours. We say which, because the difference matters when you are timing a response.
Your narrative through the buyer's eyes
MandosDashboard
Explorer
Radars
Competition
Intel Reports
NIST Profiler
Overview
Market map
Momentum
Funding
Valuations
M&A
Exit Readiness
Hiring
Products
Alert Center
MCP & API
How Oasis Security reads to a CISO buyer
Verdict
Oasis sells to the person who signs. The homepage puts Fortune 500 logos and quantified business outcomes above the fold, five industry pages speak to regulated buyers, and the published SLA and DPA give procurement something real to read. The Agentic Access Management page is the strongest asset on the site and the easiest to miss: real product screenshots, a 2:29 walkthrough, the AI platforms it brokers access to named one by one, and a chain of custody that names its own links.
Two things hold the score at 6.5. The hero still leads with a category Oasis invented, so a buyer searching for non-human identity security meets that phrase only in the browser tab and the nav dropdown. And the answer to "why not Microsoft, why not the IGA and PAM we already own" is written, but it is in the blog, while Why Oasis leads with "Superior Insights" and "best in class".
Read this as a re-score. The number has not moved since 29 August because the site has not moved. Measured on 8 September, the product and Why Oasis pages are identical to their 27 August versions, and the homepage changed by exactly one line: the banner now reads "Oasis has been acquired by Cyera", where on 27 August it read "Oasis + Cyera: Building the Next-Generation AI Security Platform". The Cyera deal is closed. Every fix the last score asked for is still open.
The homepage H1 is still "Agentic Access Management", the category Oasis trademarks as AAM. The subhead does real work: "Access control that understands intent, not just static roles and permissions." But "non-human identity" never appears in the hero a visitor reads. It sits in the browser tab title and the Product nav dropdown. The plain sentence, "Oasis secures AI agents and non-human identities across IaaS, SaaS, PaaS, and on-prem", is a full scroll down.
Claims a rival could not honestly copy do exist: Oasis Scout with AuthPrint threat-actor fingerprinting on /product, and on /agentic-access-management a chain of custody that names its own links, "Prompt, Intent, Policy, Session, Action", plus a short-lived identity per session. But Why Oasis, where a buyer goes for "why not them", still leads with "Breadth of integrations" and "Superior Insights ... best in class". No named rival on any page, and none answers Microsoft Agent 365.
Checkable and strong: readable Fortune 500 logos in the homepage hero (Citizens Financial, BlueCross BlueShield, Chipotle, Mars), a five-line Business Impact strip of quantified outcomes, seven award badges, and original vulnerability research on the Cursor autorun flaw. Two gaps hold it here. Measured 8 September: G2 shows 0 reviews, Gartner Peer Insights 1 review at 5.0. Both customer quotes are anonymous roles, and SOC 2 and ISO 27001 are footer images with no trust centre behind them.
The homepage Business Impact strip is board language: a Fortune-50 healthcare provider avoiding a $3 to 5M HIPAA fine, a Fortune-500 logistics firm cutting secret-rotation effort by 35%, an F300 CPG cutting attack surface 60% during a POV. Procurement gets a published SLA with 99.9% uptime, service credits and severity response times, plus a DPA. Five industry pages address regulated buyers. Short of the top band: framework mapping is asserted on the governance page, never shown.
Integrations are named, not implied: Okta, Ping, HashiCorp Vault, Azure Key Vault and AWS KMS on /product, and on /agentic-access-management the AI platforms themselves, Claude, OpenAI, Microsoft Copilot, Cursor, Gemini and Glean. That page carries real product screenshots of a Cursor session escalating into Databricks and a 2:29 walkthrough video, the strongest architect-facing proof on the site. Still missing: public docs, an API reference, a stated deployment model and a data-handling page.
Two registers on one site. The AAM page is the good one: "No standing privilege, no long-lived tokens, no hard-coded secrets." The product page is where it slips, and none of it moved in ten days. Inventory still promises "a consolidated single pane of glass", the opening strip still says "Leverage AI-powered insights", and Context still reads "The system goes beyond raw data by furnishing essential contextual information." The lifecycle strip still misspells "Decomission".
Measured against the full sitemap on 8 September: 264 URLs, no pricing page. No page names an edition, a tier, or a unit of pricing, and every route is Request a Demo or Chat with Us. What is public is the contract, not the packaging: the SLA states 99.9% uptime, a service-credit table and severity response times, and a DPA and subscription agreement are published. The nav does name two products, NHI Security Cloud and Agentic Access Management, and that is the only shape a buyer gets.
Fix these first
- 1Put the searched category in the H1. Lead with non-human identity and AI agent access, and keep Agentic Access Management as the sub-line. Today "non-human identity" appears only in the browser tab and the nav dropdown.
- 2Promote the Agentic Access Management page. It carries the site's best proof and its clearest copy, but it sits one nav item deep and nothing on the homepage links to it. The homepage banner points at the Cyera post instead.
- 3Move the "why not them" answer onto Why Oasis. The IGA, PAM, CSPM and Microsoft Agent 365 comparisons already exist as blog posts. Put them on the page, and replace "Superior Insights" with the Scout and AuthPrint claims.
- 4Publish packaging without publishing prices. Name the editions, state the unit (per non-human identity, per environment, or per workload) and any minimum, so a CISO can build a budget line before booking a demo.
- 5Stand the trust signals up. Link the SOC 2 and ISO 27001 footer badges to a trust centre, and ask three reference customers for Gartner Peer Insights reviews. Measured 8 September: G2 shows 0, Gartner shows 1.
Stop losing enterprise deals on your homepage.
Generic positioning loses enterprise deals. I score your homepage, sales deck and funding deck against the seven checks above, then rewrite what fails. Buyers and investors get your value in 30 seconds.
See what you getReviewed by a security leader, not by a model.
It reads a vendor's positioning the way a security buyer does, on the seven dimensions of the CISO Positioning Framework. Every mark carries the evidence it was given, and the verdict names what is holding the number down — including where a claim is hype that will not survive procurement.
- Seven dimensions, the real ones
- Value Proposition Clarity, Competitive Differentiation, Trust Signals & Social Proof, CISO Buyer Fit, Technical Credibility, Website Copy Quality, and Pricing & Packaging Clarity.
- That is a real score, not a sample
- The screen above is Oasis Security's published score, out of ten, exactly as it reads on their profile.
Sourced messaging history, with dates
MandosDashboard
Explorer
Radars
Competition
Intel Reports
NIST Profiler
Overview
Market map
Momentum
Funding
Valuations
M&A
Exit Readiness
Hiring
Products
Alert Center
MCP & API
Sep 17, 2026
CyeraContent updateCyera publishes a comprehensive security guide on Model Context Protocol (MCP) vulnerabilities and mitigation strategies, drawing on the company's research into real-world incidents including OpenClaw and postmark-mcp. The guide covers four key security pillars (identity/authentication, network/transport, supply chain, runtime data access) and outlines common MCP attack patterns and defenses.
Sep 16, 2026
CyeraPartnershipCyera announced a partnership with Snowflake to secure AI agents accessing Snowflake environments. The partnership demonstrates how Cyera surfaces every agent with access to Snowflake, shows what each agent can reach, and remediates access to exposed or sensitive data using dynamic masking and least-privilege enforcement. Cyera and Snowflake are hosting a joint webinar on October 20 featuring Cyera's Gal Pollak and Snowflake's Navnit Shukla.
Sep 10, 2026
CyeraContent updateCyera publishes a case study demonstrating how it used its own platform to audit Snowflake access before deploying Claude Cowork agents to 1,500 employees. The article describes discovering hidden access through nested roles, identifying dormant accounts, and mapping privileged access to ACCOUNTADMIN, positioning Cyera's DSPM and identity capabilities as essential for agent security.
Sep 9, 2026
CyeraContent updateCyera announces a unified integration between its Data Security Posture Management (DSPM) and Data Loss Prevention (DLP) capabilities, enabling shared data intelligence to flow between discovery and enforcement. The integration allows DSPM classifications to inform DLP policies and enables direct remediation actions like triggering backups from DLP findings.
CyeraContent updateCyera publishes thought leadership on AI agent security risks, analyzing two real-world incidents where AI agents bypassed read-only restrictions to communicate with each other. The article frames Cyera's Agent Guardian platform as a solution for detecting and preventing intent drift across three dimensions: agent-user, agent-organization, and user-organization.
Sep 8, 2026
CyeraContent updateCyera publishes thought leadership on 2026 cybersecurity trends, emphasizing how AI adoption, agentic systems, and data fragmentation will test enterprise resilience. The article features insights from Cyera's Office of the CSO on cybercrime acceleration, CISO strategy shifts toward precision, and the emergence of agentic AI as an inflection point enterprises are unprepared for.
Bring the record, not a hunch.
When someone asks why a rival is winning mindshare, open their timeline: the messaging pivots, the launches, the hiring, the press, newest first, each row linked to where it came from.
- Every row carries its source
- A move links back to the page, post or article it was read from, wherever we have one. Your recommendation cites rather than asserts.
- The depth is printed, not promised
- Each profile shows how many moves are on file and how many days carry one. History runs deeper for some companies than others, so we print the number instead of claiming a span.
Where your category actually sits
MandosDashboard
Explorer
Radars
Competition
Intel Reports
NIST Profiler
Overview
Market map
Momentum
Funding
Valuations
M&A
Exit Readiness
Hiring
Products
Alert Center
MCP & API
Icon size = total capital raised. Axes split on the median. Companies with no disclosed funding are left out of the average — an unknown is not a zero.
Every category, placed by how crowded and how well funded.
Each mark is a category: how many companies are in it, against how much capital each one raised. The crosshairs are the market medians, so you can see at a glance whether you are arguing into a crowd or into empty ground.
- Four quadrants, not a ranking
- Few players and big cheques is a different messaging problem from many players and small ones. A league table hides that; a map does not.
- An unknown is not a zero
- Companies with no disclosed funding are left out of the average rather than counted as nothing. The chart says so on its face.
Every rival at once
MandosDashboard
Explorer
Radars
Competition
Intel Reports
NIST Profiler
Overview
Market map
Momentum
Funding
Valuations
M&A
Exit Readiness
Hiring
Products
Alert Center
MCP & API
Sep 19, 2026
AcunetixProduct launchAcunetix announced the release of Acunetix Version 13, introducing the SmartScan engine, malware detection functionality, comprehensive network scanning, proof-of-exploit, incremental scanning, and an improved user interface.
TrendAI (Trend Micro)PartnershipTrendAI announced a strategic partnership with Anthropic to embed Claude models across its platform to power agentic workflows, automation, AI-native security operations, and threat research. The partnership spans vulnerability discovery, platform innovation, and go-to-market execution.
Acumen CyberCustomer winKura has appointed Acumen Cyber to provide 24/7 cyber defence services across its UK and South Africa operations.
CensysContent updateCensys announced record growth metrics for the first half of 2026, including 115% growth in Platform customers, 400% increase in customers generating $1M+ in ARR, global expansion into Japan and the Middle East, and partner ecosystem growth to 200+ partners. The company is actively hiring across the board.
AnchoreContent updateAnchore published a LinkedIn post highlighting how SBOM-powered security enables historical vulnerability analysis across the entire software lifecycle, allowing organizations to determine if previously shipped software is vulnerable today without re-scanning archived artifacts.
Picus SecurityContent updatePicus Security published threat research on LinkedIn analyzing SprySOCKS, a Windows backdoor variant used by Aquatic Panda (also tracked as Earth Lusca and FishMonger) that uses a kernel driver to hide its files, processes, and network connections. The analysis covers the group's campaigns, malware capabilities, MITRE ATT&CK techniques, and how to test controls using Aquatic Panda threats in Picus.
ZeroFoxNewsThe US Secret Service issued an RFP for ZeroFox software licenses with a due date of September 21, 2026. The bid was posted on September 12, 2026 on GovDirections.
EctacomContent updateEctacom's events listing page showcasing upcoming cybersecurity events and conferences where ectacom presents solutions from its partner vendors including Aikido, Cofense, Nozomi, and iVerify.
UpGuardContent updateUpGuard published security rating and vendor risk assessment pages for multiple third-party vendors (Status.io, 6clicks, Cornerstone OnDemand, Everbridge, GBG), showcasing UpGuard's Trust Exchange and security assessment capabilities for vendor evaluation.
ClarotyNewsNotice.co provides a market snapshot of Claroty's valuation, funding history, and investor information. The page shows Claroty's current $3B valuation (as of January 2026 Series F round), total funding of $882M across 6 rounds, and lists major investors including Bessemer, Temasek, SoftBank, and Schneider Electric.
One feed, dated, across the whole category.
Launches, page rewrites, executive changes, customer wins, partnerships and acquisitions, filed by type and by date. Watch the companies fighting for your buyer's budget and read the week in one screen instead of fifteen tabs.
- Filter by what happened
- Funding, product and feature launches, executive changes, customer wins, partnerships, positioning shifts, acquisitions and IPOs each file as their own type.
- Typed, dated, sourced
- Each move carries its type, its date and a link back to the page or article it came from, where we have one.
See your category in Mandos today.
3,777 companies tracked · 37,000+ dated moves on file