My org is looking at dispel.io

I think it is more about paying someone else for “security” than whatever the product actually is and does.