Major Cyber Threat Detection Vendors Shift from MITRE to UK Testing Program
SE Labs launched PIVOT, a six-month vendor detection testing program backed by CrowdStrike, Fortinet, Palo Alto Networks and Sophos, as major vendors exit MITRE evaluations.
SE Labs unveiled PIVOT on September 15, a six-month testing program in which its ethical hackers replicate nation-state and criminal attack chains against participating vendor products, with results due January 2027. Broadcom (Symantec/Carbon Black), CrowdStrike, Fortinet, Palo Alto Networks and Sophos have confirmed participation, and Gartner and Forrester analysts will verify the underlying evidence before publication. The launch follows declining participation in MITRE Engenuity ATT&CK Evaluations: Enterprise, which fell from 30 vendors in 2023 to 11 in 2025 after public withdrawals by Microsoft, SentinelOne and Palo Alto Networks.
- PIVOT results will be verified by Gartner and Forrester analysts and published in January 2027 after the October test phase ends.
- MITRE ATT&CK Evaluations: Enterprise participation fell from 30 vendors in 2023 to 19 in 2024 and 11 in 2025.
- Microsoft, SentinelOne and Palo Alto Networks publicly withdrew from the 2025 MITRE test.
- MITRE is executing its 2026 Enterprise evaluation covering financially motivated and PRC espionage tradecraft, with results due in December.
Coverage timelineoldest first · each row is one article
- · 6d ago11 Best Device Control & USB Security Tools Compared (2026): Features & Pricing
GBHackers· 10
2026 comparison of 11 device control and USB security tools ranks CoSoSys Endpoint Protector first for cross-platform control and DLP.
- · 6d ago12 Best Endpoint Encryption Software Compared (2026): Features & Pricing
2026 buying guide compares 12 endpoint encryption tools, framing paid products as management layers over free BitLocker and VeraCrypt engines.
- · 6d ago12 Best Ransomware Protection Solutions Compared (2026): Features & Pricing
GBHackers compares 12 ransomware protection solutions for 2026, recommending layered stacks of EDR prevention, managed detection, containment, and guaranteed recovery.
- · 6d ago12 Best Server Security Solutions Compared (2026): Features & Pricing
GBHackers ranks 12 server security solutions for 2026, naming CrowdStrike and SentinelOne as server EDR leaders and Trend Micro Deep Security top for virtual patching.
- · 2d ago12 Best CWPP Solutions Compared (2026): Features & Pricing
CWPP comparison favors Sysdig for container runtime depth, Prisma Cloud for workload breadth, and Aqua for cloud-native lifecycle security.
- · 2d ago12 Best CWPP Solutions Compared (2026): Features & Pricing
Editorial comparison ranks twelve CWPP vendors, with Sysdig leading K8s runtime depth, Prisma Cloud workload breadth, and Wiz agentless speed.
- · 1d ago12 Best CASB Solutions Compared (2026): Features & Pricing
GBHackers' 2026 buyer's guide compares 12 CASB-capable vendors, arguing standalone CASB pricing has dissolved into per-user SSE subscriptions.
- · 1d agoMajor Cyber Threat Detection Vendors Shift from MITRE to UK Testing Program
Infosecurity Magazine· 40
SE Labs launched PIVOT, a six-month vendor detection testing program backed by CrowdStrike, Fortinet, Palo Alto Networks and Sophos, as major vendors exit MITRE evaluations.
- · 23h ago12 Best Container Security Tools Compared (2026): Features & Pricing
GBHackers compares pricing and features of 12 container security platforms, from free Trivy, Falco, and SUSE NeuVector to commercial Sysdig, Wiz, and Aqua.
- · 23h ago12 Best Kubernetes Security Tools Compared (2026): Features & Pricing
GBHackers compares 12 Kubernetes security vendors including Sysdig, Wiz, Aqua, and Cisco Isovalent on features, pricing units, and procurement strategy.
- · 23h ago12 Best Kubernetes Security Tools Compared (2026): Features & Pricing
A buying-guide comparison of twelve Kubernetes security vendors, from free OSS tools like Falco and Kubescape to paid platforms led by Sysdig and Aqua.
- · 54m ago12 Serverless Security Options Compared (2026): Features & Pricing
A buyer-focused comparison of twelve serverless security offerings concludes no standalone SKU is worth buying in 2026, with function protection bundled inside CNAPP contracts.