Look, I provided you with the guidance straight off the FFIEC website.
Look at the requirements and tell me how sfor would pass a "vendor review" to be able to be utilized in a "live" environment in any FFIEC regulated financial institution.
I like sfor, but i'm not gonna let people post misleading information.