Why does nobody talk about vendor reviews that are secretly sponsored?

I was skeptical of a network detection tool that had glowing reviews on a popular security blog. Turns out the blogger got a free partnership deal, and the tool missed 40% of our test threats during a trial last month. Has anyone else caught fake reviews in cybersecurity marketing?

3 comments

3 Comments

harpery4717d ago

Read a report from some security researcher last week. They found 12 blogs with clear sponsorship ties to vendors. The worst part is the FTC rules are pretty clear about disclosure but nobody enforces it. Vendor marketing teams are basically writing fake case studies and paying bloggers to post them. Always run your own PoC before trusting any review site.

uma_ellis17d ago

Ran into this exact mess last year when we were evaluating endpoint detection tools. Found three different "independent" review sites that had identical wording about a specific vendor's solution - word for word copy pasted with just the logo swapped out. PoC saved us from wasting budget on something that was clearly overhyped. My rule of thumb now is if a review blog only talks about the top 5 vendors and never mentions a single negative point, its probably a paid placement. Run your own tests in your own environment, that's the only way to know if it actually works for your use case.

ellis.susan17d ago

Did your friend happen to notice if those review sites had any contact info or an about page that looked real? A buddy of mine once found a "review" site that raved about a firewall product, but when he dug around, the site was registered to a PO box that matched the vendor's marketing office. He wasted two weeks setting up demos with four vendors, only to realize the whole site was basically a brochure with comments turned on. Made him way more careful about looking at the domain registration before he even reads a review now.