Major Cyber Threat Detection Vendors Shift from MITRE to UK Testing Program
SE Labs launched PIVOT, a six-month vendor detection testing program backed by CrowdStrike, Fortinet, Palo Alto Networks and Sophos, as major vendors exit MITRE evaluations.
SE Labs unveiled PIVOT on September 15, a six-month testing program in which its ethical hackers replicate nation-state and criminal attack chains against participating vendor products, with results due January 2027. Broadcom (Symantec/Carbon Black), CrowdStrike, Fortinet, Palo Alto Networks and Sophos have confirmed participation, and Gartner and Forrester analysts will verify the underlying evidence before publication. The launch follows declining participation in MITRE Engenuity ATT&CK Evaluations: Enterprise, which fell from 30 vendors in 2023 to 11 in 2025 after public withdrawals by Microsoft, SentinelOne and Palo Alto Networks.
- PIVOT results will be verified by Gartner and Forrester analysts and published in January 2027 after the October test phase ends.
- MITRE ATT&CK Evaluations: Enterprise participation fell from 30 vendors in 2023 to 19 in 2024 and 11 in 2025.
- Microsoft, SentinelOne and Palo Alto Networks publicly withdrew from the 2025 MITRE test.
- MITRE is executing its 2026 Enterprise evaluation covering financially motivated and PRC espionage tradecraft, with results due in December.
- Vendors
- SE LabsBroadcomSymantecCarbon BlackCrowdStrikeFortinetPalo Alto NetworksSophosMicrosoftSentinelOne
- Products
- PIVOT
- Organizations
- MITRE Engenuity
- Countries
- United Kingdom
From the original article
5 min read at infosecurity-magazine.com
A group of cyber threat detection providers, including CrowdStrike, Palo Alto Networks and Sophos, have joined SE Labs’ PIVOT program
By Kevin Poireault · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.