Why two dates?
Desk research has gaps. Pages fail to load, trust centers render nothing without a script, pricing addresses move. On 27 September 2026 we read most vendor product pages. On 11 October 2026 we went back to fill the gaps, with a different browser setup that could open several pages the first pass could not. Every fact on this site carries the date it was read; this note explains what the second pass found.
Mate Security
- Trust center. In September the trust center rendered no text, so we relied on the homepage's mention of SOC 2, ISO 27001 and HIPAA. In October it rendered. It lists ISO 27001:2022, SOC 2 Type II, HIPAA, CCPA and GDPR, and documents including a SOC 2 Type 2 report, an ISO 27001 certificate, a 2026 penetration test report and a disaster recovery drill report.
- Hosting. The trust center lists both Amazon Web Services and Google Cloud as cloud subprocessors. Mate's AWS Marketplace post still says the platform is built on AWS infrastructure. Reading the September material alone, it would have been easy to call Mate AWS-only. That would be too narrow. This site describes Mate as a SaaS service whose listed cloud providers are AWS and Google Cloud, with no customer-chosen hosting option described.
- Platform. The October read confirmed the three autonomy levels and added a detail we score: each action is checked on Confidence, Precision and Reversibility, enforced outside the agent loop.
- Price. Mate's AWS Marketplace listing, linked from its own blog, shows $150,000 for a 12-month contract for the Mate Enterprise Tier, a usage tier the listing does not define. Mate's own site shows no price.
Other vendors
- Torq. Its pricing address returned a not-found page. A December 2025 post lists SOC 2 Type 2, HIPAA, ISO 27001, ISO 42001 and German BSI C5.
- 7AI. Its security page says it completed a SOC 2 Type II audit. Its pricing and integrations addresses returned not-found pages. Its AWS Marketplace listing shows $50,000 for a 12-month contract with custom pricing on request. The platform page lists ways to engage, including PLAID ELITE.
- Dropzone AI. The pricing page, read again, still publishes the unit and the base subscription contents without prices.
- Conifers. Its pricing address returned a not-found page. Its trust center publishes retention (24 months by default) and deletion (within two weeks of a written request) terms.
- Prophet Security. Its homepage, integrations page and trust center opened on the second try. The trust center lists SOC 2 Type II, ISO/IEC 27001:2022 and ISO/IEC 42001:2023, dedicated single-tenant hosting with your own keys, and AWS processing in four countries. The integrations page shows 72 named integrations by our count, against the 200+ its homepage stated in September; we kept the vendor's figure and show both. Its pricing address returned a not-found page.
- Intezer. Its security page and pricing page opened. The security page confirms a SOC 2 Type II examination and hosting on AWS and Azure; the pricing page confirms two packages priced by endpoints, without prices.
- Search-result text. One fact still comes from search-result text and is labelled that way: Prophet's AWS Marketplace listing referring buyers to Prophet's site. So do three funding figures in our funding note.
How the scores used these facts
A second pass can raise or lower a score. It should never be used to steer one, so the order of work matters as much as the facts themselves.
Scores were set from the facts first, then the weights were chosen, and no score was changed to move a rank. Our hosting and data handling criterion asks about attestations and subprocessors as well as tenancy, so the October reads affected it: Mate scores 6, credited for the attestations and the published subprocessor list, and held below Conifers, Prophet and Dropzone AI because it describes no dedicated, customer-tenant or regional option. Conifers rose to 9 for its published retention and deletion terms, and Prophet to 8 for its ISO certifications and regional processing. Torq, 7AI and Intezer gained credit for attestations found in October. On pricing, a published unit scores 5, a marketplace list price for an undefined tier 4 (Mate and 7AI), a route without a price 3 (Prophet) and nothing published 2. Mate still scores lower than Dropzone AI and Intezer on pricing, and lower than the leaders on data sources and hosting. Conifers' reasoning score reflects its March 2026 announcement of visible reasoning on verdicts.
What we still could not read
Radiant Security's own pages did not load in either pass, so it is not profiled. Prophet's marketplace listing did not load directly. Several vendors' integration catalogues are unpublished. These gaps are listed on the scoring page.
How to tell us we are wrong
If a vendor page says something different from what we show, send the link through the contact page with the topic Correction to vendor information. We check the page, update the fact and its read date, and the totals recompute.
What we will do next time
The next reading pass will start with the gaps above: Radiant Security's pages, Prophet's marketplace listing, the news releases behind three funding figures, and any integration catalogues vendors publish. Each new fact will carry its own read date, and any change in score will be explained the same way as in this note, so readers can see what moved and why rather than finding a different number without context.