First, no one that in anyone in cybersecurity world with maybe the exception of Rafael and a few others have heard of VLDI. That is why Rafael suggested that they attend the RSA cyber security conference. That is also probably why VLDI could not even make 500 on the list. If VLDI is so great there is no reason they should not be included somewhere on the list, but how could they be since after over 18+ years they still can not commercialize a product.
The top five companies for 2018 are Herjavec Group, KnowBe4, CyberArk, Raytheon Cyber, and Cisco. You tell me were any of these companies in charge of security for those firms that resulted in numerous breaches! Time for a little DD.
The funny thing is if VLDI is so great why is no one in the industry talking about them (Excluding Rafael) or trying to become clients.
BTW there is absolutely no market proof that VP would have stop any of those breaches you are talking about and until they become clients no one will ever know. One should not assume that what appears to work in the lab will work in the real world situation. VLDI may never know since no one is biting to become clients a year after Rafael recommendation.