Category Definition

Every evaluation system in
this market is vendor-controlled.

Gartner is paid by vendors. G2 reviews are solicited by vendors. Forrester evaluates vendor-submitted materials. Trust pages are vendor marketing. SOC 2 audits are vendor-funded.

At no point in this process does anyone observe what the vendor’s code actually does on your website.

The Vendor-Controlled Evaluation Stack

Who pays. What they test. What they miss.

Gartner Magic QuadrantVendor-Funded

Vendors pay Gartner for inclusion. Gartner's revenue depends on the vendors it evaluates. NetScout v. Gartner (2020) established that MQ positions are 'non-actionable expressions of opinion,' not objective assessments.

Who Pays
The vendor
What It Tests
Market positioning, analyst opinion, vendor briefings
What It Misses
Runtime behavior, data practices, consent compliance, actual customer impact
G2 ReviewsVendor-Funded

Vendors solicit reviews from their own customers via in-app prompts. The vendor controls timing, audience, and incentives. G2's attribution pixel tracks reviewers across the web. No review verifies technical claims.

Who Pays
The vendor (for badges, profiles, data)
What It Tests
User sentiment, feature satisfaction, NPS-style ratings
What It Misses
What the vendor's code does on the reviewer's site, undisclosed data practices, shadow IT loaded by vendor scripts
Forrester WaveVendor-Funded

Vendors submit their own materials for evaluation. Analyst scoring is weighted by criteria the vendor can influence through briefings. Placement correlates with vendor engagement, not customer outcomes.

Who Pays
The vendor (for reprints, citations, briefing access)
What It Tests
Product vision, strategy, vendor-submitted documentation
What It Misses
Claims vs. reality gaps, defeat devices, pre-consent behavior, CRM access scope
Trust Pages / Security CentersVendor-Funded

Vendor-authored marketing pages. No independent verification. Claims like 'GDPR Compliant' and 'Privacy by Design' are self-attestations with no audit trail. BLACKOUT found 80% of vendors with compliance claims are in observable violation.

Who Pays
The vendor (it's their website)
What It Tests
Nothing — it's a marketing page
What It Misses
Everything — no testing occurs
Legal Precedent

“Non-actionable expressions of opinion.”

NetScout Systems v. Gartner, Inc. (2020)

NetScout sued Gartner claiming their Magic Quadrant placement was unfair and commercially damaging. The court ruled that Gartner’s Magic Quadrant positions are “non-actionable expressions of opinion” — meaning they are not factual claims and cannot be relied upon as objective assessments.

In other words: a court of law determined that the most widely referenced technology evaluation framework in the world is legally classified as opinion, not fact.

Every procurement decision that references a Magic Quadrant placement is citing a document that its own publisher has legally defended as not being objective or factual.

The Structural Conflict

Four reasons vendor evaluations fail.

The vendor pays the analyst

Gartner, Forrester, and IDC derive significant revenue from the vendors they evaluate — through consulting, briefings, events, and reprint licensing. The entity being evaluated is funding the evaluation.

The vendor controls the inputs

Analyst evaluations are based on vendor-submitted documentation, vendor-conducted demos, and vendor-selected reference customers. The vendor curates what the analyst sees.

The vendor controls the reviews

G2 and TrustRadius reviews are solicited by the vendor via in-app prompts, email campaigns, and incentive programs. The vendor decides when to ask, whom to ask, and how to incentivize. Unsolicited negative reviews are diluted by volume.

Nobody tests the code

No analyst firm, no review platform, and no trust page involves executing the vendor's JavaScript on a customer site and observing what it actually does. The evaluation is entirely based on what the vendor says, not what the vendor does.

What BLACKOUT Does Differently

We don’t ask. We don’t rate. We observe.

Who Pays

You. The customer. BLACKOUT is paid by the company being protected, not the vendor being evaluated. Zero vendor revenue. Zero vendor influence. Zero conflicts.

What We Test

The vendor’s actual code executing in your environment. Runtime behavior. Network requests. Cookie operations. CRM access. Consent compliance. Supply chain. Not documentation. Not opinion. Observation.

What We Find

The gap between what vendors claim and what they do. Pre-consent tracking, undisclosed subprocessors, CRM data exfiltration, defeat devices, competitor data sharing. The things no questionnaire asks about and no analyst observes.

BLACKOUT has no vendor customers. No vendor pays us. No vendor briefs us. No vendor submits materials to us. We observe their code running on customer sites. The vendor has no input, no influence, and no advance notice. That’s the difference between intelligence and opinion.

Gartner sells opinions. G2 sells sentiment. Trust pages sell marketing.

BLACKOUT sells evidence.

See the Platform