The zero

Nobody publishes all nine.

There are nine things a buyer can check about a software vendor from the outside. No access, no questionnaire, no NDA. We ran all nine across 147 dealership software brands.

Zero of the 124 companies we could assess publish all nine.

That is not an accusation, and it should not be read as one. The study measures what a customer can look up unaided — not how secure anyone is. A vendor that publishes nothing may run an excellent program.

But a dealer doing vendor due diligence has to start somewhere. Right now, for most of this market, there is nowhere to start.

The full study publishes in October 2026.