Research policy

Sources

Lindstead uses public sources only: official registers, published reports, company filings, press releases, the organisations' own websites and public DNS records. Each study names its sources, the date they were opened and the method, and links every figure to the script that produced it.

What Lindstead does not do

• Lindstead does not log in to, probe, scan or test any organisation's systems.
• It follows each website's robots.txt and crawl delay, and does not use pages or interfaces that a site excludes.
• It does not buy, request or use leaked or non-public data.
• It does not collect personal data for its studies. Datasets describe organisations, products and registrations.
• It does not accept payment from vendors to appear in, or to influence, its research.

Security findings

Where a study touches on security, such as protection against spoofed email, Lindstead publishes totals only. It does not name organisations with a weakness, and such fields are left out of the downloadable data. Organisations can ask for their own result at contact@lindstead.com.

Organisations that are named

Lindstead names organisations when the fact comes from a public source, such as a register entry, a published record or the organisation's own website. It states what a record shows and what it does not show. A DNS record or a register entry is a configuration or a statement by the organisation, not proof of how a service is used.

Corrections and reactions

Organisations named in a study can send a correction or a reaction to contact@lindstead.com. Lindstead replies within one working day. A confirmed error is corrected on the page, in the data and in the chart, with the date of the change. A reaction can be added to the page at the organisation's request.

Reuse

Lindstead's analysis and charts are published under CC BY 4.0: anyone may reuse them with credit and a link to the page. The terms of the original sources apply to their own data.