Editorial policy

How scores are set. Each tool is scored 0 to 10 on eight criteria: rule languages and conversion paths (15), git-native workflow and CI/CD (18), testing (15), coverage analytics (12), rule health (18), versioning and rollback (8), content library size and freshness (8) and pricing transparency (6). The weights sum to 100. A criterion scores in one of three bands: documented (8.0 to 9.5), partial (5.0 to 7.0) and not documented (2.0 to 4.0). Nothing scores 10. The weighted total is computed in code from the weights file, and the build refuses to publish a total that does not equal the sum of its parts.

What counts as evidence. Only what a tool's public documentation, repository or product page states. A vendor statement with no method stays a vendor claim and is labelled as one; it scores in the partial band at best unless the docs show commands, fields or limits. A page that could not be read scores as not documented, and the reason says so. Not documented means a reader following public pages would not find the feature. It does not say the feature is absent.

Corrections. Send the URL of a public page that names the feature to editor@detectionascode.com. The cell is re-read and changed if the page supports it, and the change is logged with its date on the corrections page. A correction that moves a cell up needs a public page. A request to remove a cell needs no justification if the page was withdrawn. Corrections are applied within ten working days.

Vendors cannot pay to change a score, a rank or a read date. A vendor that publishes new documentation can send the link and the cell is re-read like any other. Every tool in the matrix is scored on the same evidence rules, including Mate Security, which ranks where the evidence puts it. The full read of every page repeats each quarter; the next is 2027-02-03.

The criteria and weights are on the rubric page, the grid method is on the matrix method page, and every change is logged on the corrections page. Send a correction to editor@detectionascode.com.