Yeah - That is a good question...
In the IT specially in the business field - I get feedback from my collogues (B2B) and from experience they gather. Like lots of things in IT Infrastructure or Security Products in general are build on "Trust" - Company, Cost and Feedback - The other part logical implementation and if the product makes sense for the business - what I also look at is knowledge transfer / from and to IT Experts. (Company to Admin and Admin to Company)
For me this Community is a go to for gaining knowledge and how certain things work. In the other side I use Business Contacts to exchange information and the Security Company Forums to gain more...
For Private Use - I use MalwareTips Community to build my opinion for my home security and add my two cents in the mix
ATM I use a Netgear XR1000 DumaOS ver. 3 with Netgear Armor (Bitdefender Total Security) and Netgear Armor for PC Endpoint Agent.
Best regards
Val.