RFI / RFP questionnaires

Neutral, vendor-agnostic evaluation questions with answer keys and source references — plus balanced strengths/gaps for each vendor in the category. 99 categories · 2803 questions.

Advanced Persistent Threat Detection · 16 questions8 RFI8 RFP
AI / LLM Security · 21 questions11 RFI10 RFP
API Security · 24 questions · 8 vendors compared11 RFI13 RFP
Application Security (ASPM) · 16 questions · 13 vendors compared10 RFI6 RFP
Attack Surface Management (ASM) · 18 questions11 RFI7 RFP
Autonomous SOC (AI SOC) · 18 questions10 RFI8 RFP
Backup as a Service · 23 questions10 RFI13 RFP
BEC Protection · 12 questions7 RFI5 RFP
Breach & Attack Simulation / Pen Testing · 219 questions12 RFI207 RFP
Bug Bounty · 16 questions10 RFI6 RFP
Business Continuity Planning · 30 questions10 RFI20 RFP
Certificate Lifecycle Management · 16 questions10 RFI6 RFP
Cloud Access Security Broker · 20 questions10 RFI10 RFP
Cloud Application Detection and Response · 16 questions10 RFI6 RFP
Cloud Infrastructure Entitlement Management (CIEM) · 17 questions10 RFI7 RFP
Cloud Investigation and Response Automation · 14 questions8 RFI6 RFP
Cloud Storage Security · 14 questions9 RFI5 RFP
Cloud-Native Application Protection (CNAPP) · 17 questions · 11 vendors compared10 RFI7 RFP
Confidential Computing · 16 questions10 RFI6 RFP
Container Security · 16 questions10 RFI6 RFP
Content Disarm & Reconstruction · 14 questions9 RFI5 RFP
Continuous Controls Monitoring · 17 questions10 RFI7 RFP
CPS Protection · 16 questions10 RFI6 RFP
Customer Identity and Access Management (CIAM) · 16 questions10 RFI6 RFP
Cyber Asset Attack Surface Management (CAASM) · 17 questions10 RFI7 RFP
Cyber Range Training · 19 questions9 RFI10 RFP
Data Access Governance · 18 questions10 RFI8 RFP
Data Classification · 20 questions10 RFI10 RFP
Data Loss Prevention · 36 questions9 RFI27 RFP
Data Masking & Synthetic Data · 17 questions10 RFI7 RFP
Data Privacy · 24 questions11 RFI13 RFP
Data Security Posture Management (DSPM) · 16 questions · 10 vendors compared11 RFI5 RFP
Database Security · 20 questions10 RFI10 RFP
Decentralized Identity · 16 questions10 RFI6 RFP
Deepfake Detection · 15 questions9 RFI6 RFP
Detection Engineering · 19 questions9 RFI10 RFP
Digital Forensics · 28 questions10 RFI18 RFP
Digital Risk Protection (DRP) · 17 questions10 RFI7 RFP
Email DLP · 18 questions10 RFI8 RFP
Email Encryption · 16 questions10 RFI6 RFP
Email Security · 17 questions10 RFI7 RFP
Encryption · 27 questions11 RFI16 RFP
Endpoint Detection & Response · 31 questions · 11 vendors compared10 RFI19 RFP
Enterprise Browser Security · 17 questions10 RFI7 RFP
Firmware & Embedded Security · 17 questions10 RFI7 RFP
GRC & Compliance Automation · 263 questions14 RFI249 RFP
Honeypots & Deception · 16 questions10 RFI6 RFP
Identity & Access Management · 141 questions · 8 vendors compared16 RFI125 RFP
Identity Threat Detection and Response · 18 questions10 RFI8 RFP
Identity Verification · 17 questions10 RFI7 RFP
Incident Response · 53 questions11 RFI42 RFP
Insider Threat Detection · 20 questions10 RFI10 RFP
Intrusion Detection and Prevention Systems · 20 questions11 RFI9 RFP
IoT Security · 16 questions10 RFI6 RFP
Key Management · 16 questions10 RFI6 RFP
Machine Learning Security Operations (MLSecOps) · 15 questions9 RFI6 RFP
Malware Analysis · 16 questions10 RFI6 RFP
Managed Detection & Response (MDR) · 99 questions · 10 vendors compared11 RFI88 RFP
Managed File Transfer · 14 questions9 RFI5 RFP
Medical Device Security · 14 questions9 RFI5 RFP
MFA & Passwordless · 28 questions12 RFI16 RFP
Microsegmentation · 18 questions10 RFI8 RFP
Mobile App Security · 18 questions10 RFI8 RFP
Mobile Data Protection · 15 questions10 RFI5 RFP
Mobile Device Management · 18 questions10 RFI8 RFP
Mobile Threat Defense · 16 questions10 RFI6 RFP
Network Access Control · 16 questions10 RFI6 RFP
Network Detection & Response (NDR) · 19 questions10 RFI9 RFP
Network Firewall (NGFW) · 19 questions10 RFI9 RFP
Network Sandboxing · 16 questions10 RFI6 RFP
Non-Human Identity & Secrets · 16 questions · 10 vendors compared12 RFI4 RFP
OT / ICS Security · 26 questions10 RFI16 RFP
Password Management · 30 questions10 RFI20 RFP
Policy Management · 21 questions10 RFI11 RFP
Quantum Security · 16 questions11 RFI5 RFP
Risk Assessment · 57 questions10 RFI47 RFP
Runtime Application Self-Protection · 16 questions9 RFI7 RFP
SaaS Security Posture Management (SSPM) · 16 questions · 7 vendors compared11 RFI5 RFP
Secrets Detection · 16 questions10 RFI6 RFP
Secure Access Service Edge (SASE/SSE) · 18 questions10 RFI8 RFP
Secure Code Training · 17 questions10 RFI7 RFP
Secure Collaboration & Messaging · 16 questions10 RFI6 RFP
Secure File Sharing · 18 questions10 RFI8 RFP
Security Awareness Training · 32 questions10 RFI22 RFP
Security Information and Event Management (SIEM) · 196 questions · 9 vendors compared11 RFI185 RFP
Security Orchestration, Automation & Response (SOAR) · 28 questions10 RFI18 RFP
Security Scanning · 26 questions10 RFI16 RFP
Serverless Security · 13 questions8 RFI5 RFP
Shadow IT Discovery · 14 questions8 RFI6 RFP
Software Supply Chain Security · 22 questions10 RFI12 RFP
Threat Exposure Management (CTEM) · 17 questions10 RFI7 RFP
Threat Hunting · 25 questions10 RFI15 RFP
Threat Intelligence · 38 questions10 RFI28 RFP
Threat Modeling · 18 questions10 RFI8 RFP
User and Entity Behavior Analytics · 26 questions10 RFI16 RFP
Virtual Private Network (VPN) · 18 questions10 RFI8 RFP
Vulnerability Management · 44 questions13 RFI31 RFP
WAF / DDoS / App Protection · 19 questions10 RFI9 RFP
Workload Protection · 16 questions9 RFI7 RFP

Use these to structure your own RFI/RFP. Questions and answer keys are platform baseline content, labeled by source — not vendor-influenced. Browsing this list is always open; opening a category's full questions requires a free account.