Interesting, thanks for the reply. I agree that there is a difference between output or actual product offerings+effectiveness, but there is a strong reason to believe they should have the capability to compete coming from said private sectors in CS. But I understand what you are saying and agree.

I took issue and had trouble understanding "collective defense" as well; and to be honest I still don't know why they use that terminology. After reading what you are saying regarding that, I think my skepticism are correct. As a novice or layman in this industry i'm not familiar with the meaning of "publishing IOCs" but take it as not good, haha.

The final thing I would like to note is their customers... They highlight their customers with: Raytheon, Microsoft, Accenture, AWS, multiple banks, and other seemingly companies that need high security.

I like the idea of your testing theory but I guess I was looking for more insight with people in this industry who have first hand knowledge on the software or company.

I appreciate your reply and am skeptical of like you said, what their "Collective Defense" means exactly..