A map of cybersecurity moats
What's your moat?
A map that draws cybersecurity companies as castles. 7 walls each, and every fact on it has a source.
Rate your 7 walls. Watch the castle rise.
Be honest. The score uses the same sum as the real map: the 6 judged walls are worth up to 90 points, the measured one up to 10. The water gets deeper as the score grows.
Example, not a real company. With JavaScript on, you rate your own walls here.
- Data gravity. Do you own data that grows with every customer and that a rival cannot buy?
- Switching cost. How painful is it to rip you out?
- Platform breadth. How many budgets do you serve from one contract?
- Tech edge. Is there something real here that is hard to copy?
- Distribution. How easily can you reach buyers at scale?
- Trust. Would a cautious buyer sign without a fight?
- Agent readiness. Can an AI agent read your site, your docs and your prices without a human?
Want the real one?
On the real map nobody rates themselves. A company earns a castle by sending proof, and we judge it from public sources.
Send proof, earn a castle7 walls. 6 judged, 1 measured.
Each wall is rated from 0 to 5. Six are our judgment, built on public sources. The seventh is measured by a script, with yes or no checks and no AI.
- Data gravityDoes the company own data that grows with every customer and that a rival cannot buy? Judged.
- Switching costHow painful is it to rip out? Judged.
- Platform breadthHow many budgets does it serve from one contract? Judged.
- Tech edgeIs there something real that is hard to copy? Judged.
- DistributionHow easily can it reach buyers at scale? Judged.
- TrustWould a cautious buyer sign without a fight? Judged.
- Agent readinessHow ready the company's own site is for AI agents. Measured by a script.
Water
The water around a castle shows the overall moat. A deeper moat means a higher score.
Arcs
When a company makes a move against a rival, it shows as an arc between the two castles.
Outposts
Startups with no walls and no score yet. There is not enough public evidence for a fair one, so we do not guess.
- Every fact on the map carries a link to its source. A number we cannot source does not go on the map.
- Scores are our judgment, and they are labelled that way.
- A company can dispute its score at hello@lapingroup.uk.
- The scanner visits sites under its own name. If a site refuses it, that wall stays unmeasured. We never retry under another name.
What the map holds, as of 8 November 2026.
7 islands: Network and SASE, Endpoint and SecOps, Cloud, Identity, Data and Email, Code and Exposure, AI Agents. The scored map is in private preview while the scores are being checked.
Free to look at. Three things you can ask for.
Rival alerts
Know when a rival makes a move: a launch, an acquisition, a new partner. Checked at the source before it reaches you.
Price on request
Ask for alertsFull report
Your 7 walls, your rivals' walls, and every source behind them, in one document.
Price on request
Ask for a reportEarn a castle
Your company is an outpost, or not on the map at all? Send proof for each wall and get scored.
Price on request
Send proofThink we got a wall wrong?
Tell us, with a source. That is how the map gets better.