← blog/Jun 30, 2026· containersecurity.com editorial

How we source every cell in the matrix

Our methodology for collecting, verifying, and dating each data point in the vendor comparison — plus the confidence flag system that tells you what to trust.

Every value in our matrix falls into one of three confidence buckets:

  • high — quoted from a first-party page with a URL and a date.
  • medium — corroborated by two independent secondary sources.
  • verify — placeholder, awaiting a citable source.

The pipeline

Once a week, a scraper walks each vendor's homepage, pricing page, and documentation index using Firecrawl. Extracted markdown goes to google/gemini-2.5-flash with a strict per-attribute prompt. Any diff lands in a review queue — we never overwrite live cells from a scrape run.

Human review

A human reviews every proposed change, verifies the source quote is present on the linked page, and either approves or edits before it goes live. Changelog entries record who approved what and when.

What we don't do

  • No sponsored placement. Vendors cannot pay to move a cell.
  • No benchmarks we can't reproduce.
  • No "our tests show" claims. If we can't link it, it doesn't ship.

Corrections go to data@containersecurity.com. We fix inside 48 hours if you send a source URL.