Their site seems focused on CISOs which in my experience lack serious technical skills. In fairness this is part of their job, but it is sometimes annoying whe

Their site seems focused on CISOs which in my experience lack serious technical skills. In fairness this is part of their job, but it is sometimes annoying when they refuse to recognise real risks and just focus on stuff that's just show. Like bitsight scores. In our case they don't reflect our actual environment at all (they don't recognise 99% of our traffic), but the CISOs love bitsight because our score is an A.