We evaluated Nessus and Rapid7 Nexpose. But we chose Tripwire due to its low rate of false positives and its prioritization abilities.

I did not make any evaluation on what products to use.

I do constant research into solutions available on the market. I've got my own battle sheets which I know the ins and outs of each product available on the market. It's different from what Gartner says because Gartner runs around with Fortune 500 and large organizations, where it's different in South Africa, in a much smaller market.

I evaluated similar products from BeyondTrust and Qualys.

The company probably chose this solution because they thought that they would be getting the best bang for their buck.