Evidence is pretty much never considered in "enterprise security" purchasing. The entire industry runs on snake oil, which the buyers knowingly buy because they

Evidence is pretty much never considered in "enterprise security" purchasing. The entire industry runs on snake oil, which the buyers knowingly buy because they themselves only need it to tick some checkbox on an audit form and rarely care about actual security.