Research notes · OCTOBER 30, 2026

A documented feature is not the same as a licensed feature

Keep product functionality, package entitlement, and demonstration evidence separate.

Product documentation can establish that an offering supports a capability without proving that the capability is included in every subscription. Licensing documents identify commercial boundaries. A pilot demonstrates behavior within a particular setup. Keep all three forms of evidence when a purchase depends on a feature.

Name the offering

A vendor portfolio may include exposure management, endpoint protection, cloud security, managed services, and automation. Write down the product and package you intend to evaluate. A feature belonging to another product should not silently become part of that baseline.

Separate four questions

Use missing evidence carefully

If a source does not establish a capability, record a research gap. Do not automatically conclude that the product lacks the feature. The useful next step is a specific request for documentation, an entitlement statement, or a demonstration.

Ask for an entitlement map

For each essential function, identify the product component, subscription tier, data source, and operating owner. Add a source link or written vendor confirmation. This gives procurement and operators a shared reference when the proposal changes.

Preserve source dates

Products and packages change. Keep the date of the source check separate from the date an article was published. A new editorial introduction does not constitute a new verification of the entire vendor portfolio. The product summaries on this site retain the evidence dates of their underlying research.

Use the research approach to interpret the difference between documented functionality and established package inclusion.