For vendors

01

Know when a seat changes

A new CISO reviews the stack in the first quarter. New in seat lists who took a top security seat recently, as a weekly digest and as sector alerts, built from the same verified records as the Wire. Open seats shows where our record has a vacancy, and security leadership jobs reads employers' own job boards every six hours. Every row links to its source.

02

Data you can cite

The open dataset: every confirmed appointment and departure on the record as JSON and CSV, plus the vendor directory as data, free with attribution and a link. The Security Seat Index, time in the CISO seat and the SEC cyber incident disclosures recalculate on every deploy from that record. Cite them in a deck or a report; the numbers stay checkable against their sources.

03

Claim your directory entry

The vendor directory records what security companies sell, in our words, from each company's own site and filings, with the source behind every fact. It is a record, not a marketplace: vendors are listed alphabetically, never ranked, scored or recommended. A company can claim its entry. No account, no form, no token: control of your domain is the proof, and claiming changes nothing about the text.

Publish a plain-text file on the domain of the website on our record, at https://<your-domain>/.well-known/cisotribune-claim.txt, like this:

claim: Example Security
contact: pat@example.com
briefing: yes

• claim: your company name exactly as it appears on your directory page. Required.
• contact: a work email, optional. Used only to reach you about your entry; never published, never stored in our records.
• briefing: yes, optional: opts that address in to the vendor briefing when it starts (our newsletter provider asks you to confirm first).

We read the file once a day with one plain request (if your site lives on a subdomain, the main domain is checked too). When the name matches your record, the change goes through our fact-check gate and your page shows "Claimed by the company · verified <date>" once it merges, usually within a day. Leave the file in place until the marker appears; after that it can stay or go. Or, if you have access to our GitHub, the claim form does the same with a one-time token.

What a claim gives you: a "Claimed by the company · verified <date>" marker on your page and in the listing, and a direct route for corrections. What it does not do: change the description, which stays ours; move you up a list, since there are no lists to move up; or buy coverage. Nothing from the file enters the published record beyond the date and the proof method.

04

Suggest a correction

A fact on your entry is wrong or out of date: headquarters, founding year, ownership, a product, a category. The correction form asks for the field, the correct value and a source on your own domain (or an established publication or filing). An editor checks the source and applies what it supports; corrections of substance are noted on the entry and on the corrections page. Wording requests are not corrections: the description stays in our words. Missing from the directory? Say so through the tip line.

05

How coverage works

Wire records are about seats, not products: a company appears on the Wire when its own top security seat changes hands, with the announcement as the source. A product launch, a funding round or a partnership is not a Wire record. The directory records what you sell; Voices records that sitting security leaders spoke in public; analysis interprets the record. None of it is for sale, and no vendor pays to be listed, to change what we write, or to be covered. Pitches for product coverage are not answered; corrections and tips with a primary source are. How we work describes the whole process.

06

Sponsorship

Newsletter sponsorship is available: a clearly labelled sponsor slot in The Briefing, our weekly email. Sponsors never influence the Wire, the directory, Voices or analysis, and a sponsorship buys no coverage, no placement and no change to any record. The terms are written down in our sponsorship policy. To ask about it, use the contact page (subject: Press & partnerships).