Vendor lineage
Barracuda Networks - security for the estates nobody writes about
Built a business where the budget is small, the staff is one person, and the threat is identical.
Barracuda sells email, network and application security into the mid-market: organisations with the same attackers as a bank and a fraction of the staff. That positioning is a genuine engineering constraint rather than a marketing segment, because a product for an estate with no dedicated security team has to work correctly on its defaults.
Most security tooling assumes somebody will tune it. The mid-market's defining condition is that nobody will - the person responsible also runs the servers, the backups and the helpdesk - so a control that requires attention to be effective will drift into being decorative.
That is the part of the market where the gap between a product working and a product being operated is widest, and it is under-documented precisely because the people living it do not write conference talks.