BUYER'S GUIDE
The vendor selection process, step by step
A repeatable process for choosing a security or technology vendor — how to frame the decision, set hard gates, score fairly, and end with a recommendation you can defend.
THE SEVEN STEPS
What a disciplined selection looks like
- 01
Frame the decision, not the product category
Write down the outcome you need and the deadline driving it — a contract renewal, an audit, a new deployment. A decision framed as 'we need to prove exposure is being reduced before the next assessment' produces sharper requirements than 'we need a tool in category X'.
- Name the business trigger and the date it lands.
- Identify who signs, who operates, and who must be consulted.
- State what happens if you do nothing — your real baseline.
- 02
Separate hard gates from weighted preferences
Most selections stall because everything is treated as equally important. Split your list in two: hard gates that eliminate a vendor outright, and preferences that get a weight.
- Hard gates: data residency, headquarters or ownership constraints, required certifications, deployment model, integration with a system you cannot replace.
- Preferences: usability, breadth of coverage, reporting depth, roadmap, services.
- If a 'gate' has an acceptable workaround, it is a preference — move it.
- 03
Build the scoring model before you see demos
Agree on criteria and weights while you are still objective. Weights should add to 100 and reflect the decision you framed in step one, not the features the first vendor showed you.
- Five to eight weighted criteria is usually enough.
- Define what a high and a low score look like for each criterion, in writing.
- Record the model somewhere the whole committee can see it.
- 04
Build the long list from current market intelligence
Vendor landscapes change faster than most published research refreshes. Acquisitions, pivots, and pricing changes routinely invalidate a shortlist assembled from last year's material.
- Include challengers, not just the names you already know.
- Check what changed in the last 12 months: funding, ownership, leadership, product direction.
- Discard vendors that fail a hard gate immediately, and note why.
- 05
Score the shortlist and demand evidence
Run the same agenda with every shortlisted vendor so scores stay comparable. Ask each one to prove the claims that carry the most weight rather than describing them.
- Use one scripted scenario drawn from your own environment.
- Ask for reference customers of similar size and regulatory profile.
- Log the evidence behind each score so the decision survives review.
- 06
Stress-test the leading option
Before you commit, argue against your own choice. The goal is to surface the conditions under which the recommendation would be wrong — while you can still change course.
- What has to be true for this to work, and how confident are you?
- What is the exit cost if you switch in two years?
- Who is the runner-up, and what single change would promote it?
- 07
Document the recommendation and the trade-offs
A selection is only defensible if someone who was not in the room can follow it. Capture the ranked shortlist, the scores, the gates applied, the honest read on the winner, and the next actions.
- Ranked shortlist with fit scores and the reason for each rank.
- Requirements mapped to obligations you must satisfy.
- Clear next steps for procurement, security review, and pilot scope.
WHERE SELECTIONS GO WRONG
Four common failure modes
Requirements written after the first demo
Once a vendor has shaped your criteria, the process is scoring their strengths rather than your needs.
Stale market research
A shortlist built on point-in-time research can miss ownership changes, discontinued products, and new entrants.
Consensus scoring with no evidence trail
Averaged opinions feel objective but cannot be re-examined later when the decision is challenged.
No runner-up
Without a documented second choice you have no leverage in negotiation and no plan if the pilot fails.
THE SHORTCUT
Periscope runs this process for you
Give Periscope your requirements and constraints, and it matches them against current Lionfish market intelligence to return a ranked shortlist, fit scores, and the reasoning behind the recommendation — in minutes.