Regulated financial: the rubric reweighted

Banks, insurers and asset managers whose security team must show a reviewer what an automated action did, on what evidence and who approved it, and whose data may not leave a named region.

7.51D3 Security leads

The ranking

Totals recomputed in code from the weights below. Rank on the base rubric in the last column.
Rank	Platform	Total	Actions of 25	Base rank
1	D3 Security	7.51	19	1
2	Google Security Operations	6.26	19	3
3	Cyware	6.19	17	2
4	Torq	6.09	13	7
5	Palo Alto Cortex XSOAR	5.84	20	4
6	Swimlane (Turbine)	5.79	18	5
7	Mate Security	5.38	0	11
8	Splunk SOAR (Cisco)	5.37	19	6
9	Tines	5.36	22	8
10	Dropzone AI	5.30	2	10
11	Microsoft Sentinel	5.23	9	9
12	Prophet Security	5.14	0	11
13	ServiceNow Security Operations	4.29	7	13
14	CrowdStrike Falcon Fusion SOAR	3.51	0	14

A band is a run of neighbouring totals, not a ladder. Bands chain: a new band starts only where the gap to the total above exceeds 0.25, so a band can be wider than 0.25 and the order inside it is not an order. Band groups under these weights: Google Security Operations, Cyware, Torq, Palo Alto Cortex XSOAR, Swimlane (Turbine); Mate Security, Splunk SOAR (Cisco), Tines, Dropzone AI, Microsoft Sentinel, Prophet Security.

Why these weights

The weights move 5 points from coverage and 5 from time-to-contain evidence into the explanation trail (25) and the approval, rollback and blast-radius criterion (20), and lift deployment and data handling to 8. A wrong containment action costs more here than a slow one, and a reviewer reads the record after the fact. The site makes no claim that any regulator accepts any vendor's records; it scores what each vendor documents. The scale is the published rubric, reweighted as proposed in rubric.json and recomputed in code, and neighbouring totals no more than 0.25 apart form a band, not a ladder. Bands chain: a new band starts only where the gap to the total above exceeds 0.25, so a band can be wider than 0.25 and the order inside it is not an order.

100points in total

Weights against the base rubric

Criterion	Base weight	Regulated financial weight
Native containment coverage	25	20
Published time-to-contain evidence with method	15	10
Approval, rollback and blast-radius controls documented	15	20
Explanation and audit trail	15	25
Integration depth documented	10	8
Detection-to-response coupling	8	5
Pricing transparency	6	4
Deployment and data handling	6	8
Total	100	100

The scores are the same as on the home table. Only the weights move. How scores are set.