In brief. Section 43(a)(1)(B) of the Lanham Act, 15 U.S.C. § 1125(a)(1)(B), gives a competitor — not a consumer — a federal cause of action against false or misleading advertising. That private remedy has made it the primary engine of business-to-business advertising disputes, and nowhere more than in technology markets, where claims are quantitative, technically dense, and competitively decisive. This article works through the five elements, the standing test the Supreme Court built in Lexmark v. Static Control, the pivotal literal-versus-implied-falsity divide, the "necessary implication" doctrine, establishment claims, the real (and contested) limits of puffery, materiality, the full remedies menu under Section 35, and why POM Wonderful lets a rival sue over a label a federal agency already polices. It surveys the recurring technology battlegrounds — cybersecurity, benchmarks, "AI-powered," and greenwashing — and compares litigation with the NAD self-regulatory track. It is educational, not legal advice.


A claim that costs more than it earns

Picture the slide. A cybersecurity startup's sales team is three weeks from the end of the quarter, the deck is on a 60-inch screen in a prospect's conference room, and the headline reads: "Blocks 100% of ransomware." The room nods. The deal closes. And somewhere across town, a product marketer at a competitor screenshots that slide off a webinar replay, drops it into a Slack channel called #competitive, and types: "Can they actually prove this?"

That screenshot is how Lanham Act false-advertising cases begin. Not with a regulator, not with an angry consumer, but with a rival who reads the same superlatives the customers read — and who, unlike the customers, has standing to sue, the technical sophistication to test the claim, and a powerful commercial motive to do something about it.

Technology marketing runs on confident numbers. Software promises "99.999% uptime." Storage is "unlimited." Encryption is "military-grade." A model is "the most accurate in the industry." These phrases sell because they are crisp and absolute. They also sit on a spectrum that runs from harmless sales enthusiasm — what the law calls puffery — to a literally false factual assertion that a court can enjoin in a matter of weeks. Knowing where any given claim falls on that spectrum is the whole game, and it is a game that the technology sector loses more often than it should, precisely because its products are so measurable. A claim about a "world-class culture" is hard to falsify. A claim that a database "processes one million requests per second" is a lab test away from being proven false.

To keep the doctrine concrete, this article follows a running hypothetical (clearly labeled as such). Bastion Security Systems is a fictional cybersecurity vendor whose marketing leans hard on three phrases: "blocks 100% of ransomware," "military-grade encryption," and "the industry's most accurate threat detection." Its rival, Verge, believes all three are overstated and is weighing a challenge. Bastion's dilemma — how to be aggressive enough to win deals without saying things it cannot defend — runs through every doctrine below. By the end, you should be able to predict, with some precision, which of Bastion's three claims gets it sued, which gets it a quick loss, and which it can probably keep.

The statute: two prongs, one of which is ours

Section 43(a) of the Lanham Act, 15 U.S.C. § 1125(a), is a workhorse with two distinct jobs. Section 43(a)(1)(A) — the "infringement prong" — reaches false designations of origin and unregistered trademark and trade-dress claims: uses of a mark or get-up that cause confusion about who made a product. That prong is the subject of our companion pieces on navigating the maze of trademark confusion and brand protection online. Section 43(a)(1)(B) — the "false advertising prong," and our subject here — reaches commercial representations that misrepresent "the nature, characteristics, qualities, or geographic origin" of goods, services, or commercial activities. It covers claims about your own product (superiority claims) and claims about a competitor's product (comparative advertising and disparagement). It applies only to statements made in "commercial advertising or promotion," not to a stray remark in a sales email. And it extends a remedy to "any person who believes that he or she is likely to be damaged" — which, after a half-century of construction, means competitors, not consumers.

That last point is the doctrine's defining feature, and it is worth dwelling on. The Federal Trade Commission Act, 15 U.S.C. § 45, prohibits "unfair or deceptive acts or practices," but it creates no private right of action — only the FTC enforces it. State consumer-protection statutes give consumers a remedy but center on consumer harm. The Lanham Act occupies the gap in the middle: it is the federal statute under which one business can directly sue another for lying in its advertising. Courts reached that result by reading Section 43(a)'s sweeping "any person" language together with Section 45's statement that the Act exists "to protect persons engaged in [interstate] commerce against unfair competition," 15 U.S.C. § 1127, and concluding that individual consumers lack standing even though preventing consumer confusion is a principal aim of the Act (Made in the USA Found. v. Phillips Foods, Inc., 365 F.3d 278 (4th Cir. 2004)). A consumer who feels misled looks to the FTC or to state law; a competitor reaches for Section 43(a).

For the broader landscape of advertising rules every business should know — from the FTC's deception standard to endorsement disclosures and pricing claims — start with our advertising FAQs: a guide for small business. For the special rules governing commercial email, which carry their own false-and-misleading-header prohibitions, see the CAN-SPAM Act.

The five elements

Courts distill Section 43(a)(1)(B) into five elements. The precise phrasing wanders a bit from circuit to circuit, but the substance is stable:

  1. A false or misleading statement of fact in commercial advertising about the defendant's own product or the plaintiff's product;
  2. Deception — the statement actually deceived, or has a tendency to deceive, a substantial segment of its audience;
  3. Materiality — the deception is likely to influence purchasing decisions;
  4. Interstate commerce — the statement entered interstate commerce; and
  5. Injury — the plaintiff has been or is likely to be injured as a result.
Element Legal standard Typical evidence
False or misleading statement Literally false, or literally true/ambiguous but misleading Ads, web copy, sales decks, packaging, datasheets, trade-show panels
Deception Actual deception, or a tendency to deceive a substantial audience segment Consumer/buyer surveys, expert testimony, evidence of actual confusion
Materiality Deception likely to influence purchasing Survey evidence, testimony on purchasing drivers, the claim's prominence
Interstate commerce The statement was disseminated across state lines Distribution records, web analytics, media-placement data
Injury Commercial harm to the plaintiff, proximately caused Lost sales, market-share analysis, diverted deals, reputational harm

The architecture of this list is what makes false-advertising litigation strategic rather than mechanical. As we will see, proving that a statement is literally false collapses elements two and three: deception and materiality are presumed, so the plaintiff skips the expensive surveys. Proving that a statement is merely misleading requires carrying the full evidentiary load. Almost every contested case turns on which side of that line the statement falls — and a great deal of careful drafting is devoted to keeping claims on the safe side of it.

Standing after Lexmark: who actually gets to sue

The injury element is not a formality. It is governed by the Supreme Court's unanimous decision in Lexmark International, Inc. v. Static Control Components, Inc., 572 U.S. 118 (2014) — the controlling authority on who may bring a Section 43(a) false-advertising claim. Before Lexmark, the circuits ran a confused patchwork: some applied a multifactor "antitrust standing" test borrowed from Associated General Contractors, others a "reasonable interest" test, others a categorical rule limiting suits to direct competitors. Justice Scalia, writing for the Court, swept all of it away and replaced it with a two-part inquiry rooted in the statute itself.

First, the plaintiff must fall within the zone of interests the Lanham Act protects. Because the Act's stated purpose is to protect against unfair competition and the resulting commercial injury, a plaintiff must allege an injury to "a commercial interest in reputation or sales." A consumer hoodwinked into buying a bad product is outside the zone; a business whose sales or goodwill suffered is inside it.

Second, the plaintiff must show that its injury was proximately caused by the defendant's misrepresentations. Ordinarily that means "economic or reputational injury flowing directly from the deception wrought by the defendant's advertising" — which occurs "when deception of consumers causes them to withhold trade from the plaintiff." A plaintiff cannot sue over harm that is merely a remote downstream ripple of the deception.

The case's most quoted holding is what Lexmark did not require: the plaintiff need not be a direct competitor of the defendant. Static Control did not sell printers in competition with Lexmark; it sold microchips to the companies that refurbished Lexmark cartridges, and Lexmark's advertising told those refurbishers (falsely, Static Control alleged) that using Static Control's chips was illegal. The Court held that Static Control had standing anyway, because the alleged lies were aimed squarely at destroying the market for its product. The practical upshot: suppliers, licensors, and businesses one step removed from a defendant can sue, so long as they can trace the line from the false claim to their own lost sales or reputation.

For Bastion's rival, Lexmark is the threshold lens. Verge cannot simply allege that Bastion's "100%" claim is false in the abstract; it must articulate how that claim diverted specific sales or damaged Verge's standing with buyers who were comparing the two. The good news for Verge is that it is a head-to-head competitor, so proximate cause is easy to plead. The discipline Lexmark imposes matters more in asymmetric cases — where, say, a small component vendor wants to challenge a platform giant's marketing.

POM Wonderful: why a regulator's beat does not block your suit

There is a companion 2014 decision that the original version of this discussion missed, and it is essential. In POM Wonderful LLC v. Coca-Cola Co., 573 U.S. 102 (2014), POM sued Coca-Cola under Section 43(a), alleging that the name and label of a Minute Maid "Pomegranate Blueberry" juice were misleading because the product was overwhelmingly apple and grape juice with only a whisper of pomegranate. Coca-Cola's defense was jurisdictional: the Food, Drug, and Cosmetic Act and FDA labeling regulations comprehensively govern juice labels, it argued, so a Lanham Act claim attacking a compliant label should be barred.

The Supreme Court, again unanimous (Justice Breyer recused), rejected that argument. The two statutes are complementary, not mutually exclusive: the FDCA polices labeling through agency enforcement to protect public health, while the Lanham Act empowers competitors to police marketplace deception to protect commercial interests. "Competitors, in their own interest, may bring Lanham Act claims" that the FDA "does not have the time, money, or technical expertise" to pursue, the Court reasoned, and nothing in either statute showed a congressional intent to foreclose the private remedy. Compliance with a regulator's rules is therefore not a safe harbor against a competitor's false-advertising suit.

The lesson generalizes well beyond juice. A technology vendor cannot wave away a Lanham Act claim by pointing to a certification it holds or a regulatory regime it satisfies. A cloud provider's "HIPAA-compliant" claim might satisfy a regulator and still be actionable if a competitor can show it conveys a misleading message about scope; a device maker's compliance with FCC energy rules does not immunize a "greenest in its class" claim. POM Wonderful keeps the competitor's courthouse door open even when an agency is standing in the same hallway. (The decision does not displace genuine field preemption or an express statutory bar — but those are narrow, and "a regulator already covers this" is not one of them.)

Literally false versus impliedly false: the distinction that decides cases

If you remember one thing from this article, remember this fork in the road. Courts sort every challenged statement into one of two buckets — literally false or impliedly false (misleading) — and the bucket determines who has to prove what.

A statement is literally false when, on its face, it makes an explicit factual assertion that is demonstrably untrue. If Bastion advertises that its product "blocks 100% of ransomware" but independent testing shows it stops 85%, the claim is literally false, full stop. The consequence is enormous: when a plaintiff establishes literal falsity, courts presume both deception and materiality. No survey required. The Second Circuit explained why in the canonical Coca-Cola Co. v. Tropicana Products, Inc., 690 F.2d 312 (2d Cir. 1982) — the "fresh-squeezed" orange juice case — reasoning that demanding consumer-deception proof for a statement that is false on its face would erect a nearly insurmountable barrier and defeat the statute's purpose. When the words themselves lie, the law does not make you prove that anyone believed them.

A statement is impliedly false when it is literally true or ambiguous but conveys a false impression in context. A cloud provider that advertises "unlimited storage" while burying aggressive throttling in its terms of service may have made a misleading claim even though "unlimited," parsed in isolation, is defensible. For implied falsity, the plaintiff carries the heavier load: it must prove not only that the statement is misleading but that the audience actually received the misleading message — and the standard proof is a consumer-perception survey. (Under FTC practice, a message is generally treated as an implied claim when 15% or more of reasonable consumers take it away from the ad, and the agency has gone as low as 10–14% — a useful benchmark for what "substantial segment" means even outside the FTC's own enforcement.)

This is where good lawyering — and good marketing — lives. The same competitive boast can be drafted to sit on either side of the line:

  • "Achieved the highest score in the independent [Named] benchmark." If a rival in fact scored higher, this is literally false: Verge proves it by producing the benchmark table, and deception and materiality come for free.
  • "Industry-leading performance." This makes no verifiable factual assertion on its face. To win, Verge must commission a survey showing that the target audience reads "industry-leading" as a measurable superiority claim — survey work that routinely runs well into six figures and can be picked apart by the other side's expert.

Sophisticated advertisers therefore draft toward the implied-falsity side even while making aggressive claims; experienced plaintiffs frame their challenges to pull the statement back toward literal falsity. Much of false-advertising litigation is, quite literally, a fight over a category.

The "necessary implication" doctrine: false without saying so

There is a doctrine that bridges the two buckets and that technology defendants underestimate constantly. A statement can be treated as literally false by necessary implication — earning the plaintiff the no-survey presumption — even though it never states the false proposition in so many words. The rule: where the audience, considering the advertisement in full context, "would recognize the claim as readily as if it had been explicitly stated," and the advertisement can reasonably be read in only one way, courts will find literal falsity by necessary implication. (See, e.g., Time Warner Cable, Inc. v. DIRECTV, Inc., 497 F.3d 144 (2d Cir. 2007), articulating the test; Novartis Consumer Health, Inc. v. Johnson & Johnson-Merck Consumer Pharm. Co., 290 F.3d 578 (3d Cir. 2002), applying it.)

The catch — and it is a real limit — is that necessary implication requires unambiguity. If the ad is open to more than one reasonable reading, the claim is merely implied, and the plaintiff is back to commissioning surveys. So when Bastion runs a comparison chart with green checkmarks next to its product and red X's next to "Competitor A" across a row labeled "Stops Ransomware," and Competitor A in fact stops ransomware, the chart may be literally false by necessary implication: there is no other plausible way to read a red X in that cell. The doctrine is the plaintiff's friend precisely in the visual, chart-heavy comparative formats that dominate enterprise technology marketing.

Establishment versus non-establishment claims

Within the realm of provable claims, courts draw a further line that controls the plaintiff's burden — and it is tailor-made for technology disputes.

An establishment claim represents, expressly or by implication, that the assertion rests on testing, studies, or objective proof. "Clinical studies prove…," "lab-tested to…," or a chart captioned as showing comparative data all carry an embedded representation that evidence exists. A non-establishment claim asserts superiority without representing that it has been proven. The distinction matters because of what the plaintiff must do:

  • To defeat an establishment claim, the plaintiff need not run its own tests at all. It can prove falsity simply by showing that the defendant's cited tests do not exist, were not conducted properly, or do not actually support the conclusion drawn. The Ninth Circuit said so squarely in Southland Sod Farms v. Stover Seed Co., 108 F.3d 1134 (9th Cir. 1997): a plaintiff may establish falsity by demonstrating that the defendant's tests "are not sufficiently reliable to permit one to conclude with reasonable certainty that they established the proposition for which they were cited." This is a gift to challengers — you attack the foundation, not the conclusion.
  • To defeat a non-establishment claim, the plaintiff must affirmatively disprove the assertion, typically with its own testing or survey evidence. That is a heavier and more expensive burden.

Technology marketing is dense with establishment claims because technical products invite — almost demand — quantitative proof. A specific number ("processes one million requests per second") carries an implicit representation that someone measured it. A security certification ("SOC 2 Type II," "FedRAMP Authorized," "ISO 27001 certified") represents that the product passed defined criteria administered by a third party. An analyst citation ("named a Leader by a leading research firm") represents an external endorsement that either happened or did not. When challenging such claims, plaintiffs argue that the tests do not exist, that the methodology was flawed (unrealistic benchmark conditions, a deliberately misconfigured comparison product), that the results do not support the stated conclusion (a 3% edge dressed up as "dramatically faster"), or that the data is stale.

Claim type Example Classification Plaintiff's challenge route
Specific numerical claim "99.99% uptime guaranteed" Establishment (implied) Show actual measured uptime falls short
Cited benchmark "Fastest in [named] benchmark testing" Establishment (explicit) Attack test validity, configuration, or accuracy
Unsubstantiated superlative "Industry-leading security" Non-establishment (often puffery) Survey showing a misleading factual message
Third-party endorsement "Named a Leader by [analyst]" Establishment (explicit) Verify the citation is accurate and in scope
Comparative claim with data "2× faster than Product X" Establishment (implied) Conduct independent head-to-head testing

For comparative claims that turn on third-party benchmarks, the substantiation question often eclipses the falsity question: under both FTC practice and NAD precedent, an advertiser must possess a reasonable basis for an objective claim at the time it is disseminated — and a claim that specifies its own support ("a clinical study showed…") demands exactly that level of support, no less (Pfizer, Inc., 81 F.T.C. 23 (1972), articulating the reasonable-basis factors). A vendor that cites a benchmark it never ran, or ran under conditions it would be embarrassed to disclose, has a substantiation problem before it ever reaches a courtroom.

Puffery: the safe harbor that is narrower than you think

Not every exaggeration is actionable, and the law is candid about why: consumers expect sellers to gush, and they discount the gushing. Puffery is "exaggerated advertising, blustering, and boasting upon which no reasonable buyer is likely to rely" — a general claim of superiority so vague or subjective that it reads as opinion, not fact. "The best," "amazing," "world-class," "incredible": these are typically puffery. The canonical statement is Pizza Hut, Inc. v. Papa John's International, Inc., 227 F.3d 489 (5th Cir. 2000), which held the slogan "Better Ingredients. Better Pizza." non-actionable as a general, unquantifiable claim incapable of being proven true or false — even after a jury had found for Pizza Hut, because the slogan, standing alone, simply was not the kind of statement the Act reaches.

But puffery is a doorway, not a fortress, and technology companies keep walking into its frame. Four recurring moves push a "safe" boast back into actionable territory:

Specificity converts puffery into fact. "Excellent security" is puffery; "256-bit AES encryption" is a verifiable assertion. When an advertiser bolsters a vague superlative with specific factual detail, the specifics are not protected. The Third Circuit made the point in Castrol Inc. v. Pennzoil Co., 987 F.2d 939 (3d Cir. 1993): Pennzoil's "outperforms any leading motor oil" was tethered to specific testable claims about engine protection, and the specifics carried the whole statement into actionable territory.

Context can sharpen a vague word into a factual one. In Clorox Co. Puerto Rico v. Procter & Gamble Commercial Co., 228 F.3d 24 (1st Cir. 2000), the word "unsurpassed," which might be puffery in isolation, became a measurable comparative claim when deployed in a head-to-head campaign against a named competitor. Naming the rival changes the math.

Quantitative modifiers kill puffery outright. "Twice as fast," "50% more secure," "uses 30% less energy" — anything with a number attached is, by definition, testable, and therefore not puffery.

Audience matters, and technical audiences read literally. A claim of "complete protection" might be harmless bluster to a retail shopper but a precise representation to an enterprise security team running a structured evaluation. NAD and the courts assess the "net impression" from the perspective of the target audience, and in enterprise technology the target is sophisticated, comparison-shopping, and inclined to take quantitative language at face value. This cuts directly against Bastion, whose buyers are exactly the kind of professionals least likely to shrug off a "100%."

Technology marketing also generates its own puffery puzzles that have no clean answer yet:

  • "Military-grade encryption" has no fixed technical meaning. Some courts may treat it as puffery; others may find it implies a specific standard (AES-256, FIPS 140 validation) and thus becomes a testable — and falsifiable — claim. Of Bastion's three slogans, this is the genuinely uncertain one. Drafted alone, it is probably defensible bluster; bolstered with a specific standard it does not meet, it becomes a Castrol problem.
  • "AI-powered" has been slapped on products with wildly varying actual capability. Whether it is puffery or a factual claim turns on consumer expectations and the underlying technology — and regulators have independently warned that hollow "AI" claims are a deception risk in their own right, which means a competitor's Lanham Act theory may travel alongside an FTC enforcement risk. For where AI marketing intersects with IP exposure, see our analysis of copyright infringement claims against generative AI.
  • "Enterprise-ready," "next-generation," "bank-grade," "zero trust" all hover between mood-setting adjectives and implied capability claims, and their treatment will turn on whether the surrounding copy supplies testable specifics.

Where does Bastion land? "The industry's most accurate threat detection" is the closest call after "military-grade" — "most accurate" sounds quantitative, and a security audience may read it as an establishment claim resting on detection-rate testing. "Blocks 100% of ransomware" is no call at all: a numeric absolute, addressed to professionals, in a measurable domain. It is the textbook literally-false-if-untrue claim, and Verge will reach for it first.

Materiality: the element that quietly screens out the trivial

Even a demonstrably false statement is not actionable unless it is material — likely to influence the target audience's purchasing decisions. Materiality is the gatekeeper that keeps the Act from punishing harmless inaccuracies. Courts ask whether the misrepresentation concerns an inherent quality or characteristic of the product. The First Circuit framed it in Cashmere & Camel Hair Manufacturers Institute v. Saks Fifth Avenue, 284 F.3d 302 (1st Cir. 2002): materiality requires a misrepresentation about "an inherent quality or characteristic of the product," and false statements about peripheral matters — the color of the box, the city of the headquarters — usually are not material even when literally false.

For technology products, the materiality question is really a question about purchasing criteria. Does the claim go to something the buyer actually weighs? Several signals help: whether the claim appears prominently in the marketing (advertisers tend to feature what they think sells); industry evidence about what drives the purchase; and competitive differentiation (a claim about the one feature distinguishing two finalists is more likely material than a claim about table stakes). Enterprise buyers weigh security posture, compliance certifications, integration, uptime, and support terms heavily — so in B2B technology, claims in those categories are presumptively the material ones.

And here is the move that ties the section back to literal falsity: when a plaintiff proves literal falsity, materiality is presumed. That presumption is a large part of why plaintiffs strain so hard to characterize a statement as literally false rather than merely misleading. Win the falsity characterization and you win deception and materiality with it.

Remedies: injunctions first, money second

False-advertising remedies live in Section 35 of the Lanham Act, 15 U.S.C. § 1117, plus the injunctive authority of Section 34, 15 U.S.C. § 1116. In technology cases the priority order is almost always the same: stop the campaign now, sort out the money later.

Injunctive relief is usually the prize. Competitive position erodes fast; a false campaign left running for the duration of a lawsuit can do damage no damages award fully repairs. A preliminary injunction halts the campaign while the case proceeds; a permanent injunction locks the result in. The standard, from Winter v. Natural Resources Defense Council, 555 U.S. 7 (2008), requires likely success on the merits, likely irreparable harm, a favorable balance of hardships, and that an injunction serve the public interest. Two wrinkles matter for our context. First, courts once presumed irreparable harm from a strong literal-falsity showing; that presumption was thrown into doubt after eBay Inc. v. MercExchange, L.L.C., 547 U.S. 388 (2006), though the Trademark Modernization Act of 2020 restored a rebuttable presumption of irreparable harm for Lanham Act violations once a likelihood of success (or actual success) is shown — a meaningful boost for plaintiffs. Second, enterprise sales cycles are long and multi-touch, which makes it hard to trace a lost deal to one false slide; courts respond by recognizing that lost goodwill and reputational injury are themselves irreparable, which is often the cleaner path to an injunction.

Monetary relief under Section 1117(a) includes (1) the defendant's profits, a disgorgement remedy where the plaintiff proves the defendant's gross sales and the defendant bears the burden of proving deductible costs; (2) the plaintiff's actual damages (lost sales, price erosion, and the cost of countering the false ad); (3) the costs of corrective advertising; (4) enhanced damages up to three times actual damages where the violation is willful (the statute forbids a penalty, so trebling must compensate, not punish); and (5) attorney's fees in "exceptional cases," a standard the Supreme Court loosened in the patent context in Octane Fitness, LLC v. ICON Health & Fitness, Inc., 572 U.S. 545 (2014), and which courts now import into Lanham Act fee disputes. Note one open circuit split worth flagging: after Romag Fasteners, Inc. v. Fossil, Inc., 590 U.S. 212 (2020), willfulness is no longer an absolute precondition to a profits award in trademark cases, and courts have been working out how that reasoning maps onto false-advertising profits claims.

In practice, monetary proof is hard. Enterprise purchasing has too many inputs to isolate the marginal effect of one claim without sophisticated economic testimony, so many plaintiffs treat damages as a secondary goal and put their chips on the injunction.

Remedy Basis Proof required Typical use
Preliminary injunction § 1116 / equity Likely success, irreparable harm, balance, public interest Halt an ongoing campaign
Permanent injunction § 1116 Success on the merits Bar future false claims
Defendant's profits § 1117(a) Plaintiff proves gross sales; defendant proves costs Disgorgement
Plaintiff's damages § 1117(a) Causation between the ad and the loss Lost sales, price erosion
Corrective advertising § 1117(a) Cost of counter-messaging Repair of marketplace impression
Enhanced damages (up to 3×) § 1117(a) Willfulness; compensatory, not punitive Egregious cases
Attorney's fees § 1117(a) "Exceptional case" (Octane standard) Fee-shifting in the worst cases

Recurring battlegrounds in technology marketing

Cybersecurity claims. Security marketing has matured into one of the most litigated corners of the field, and the recurring difficulty is ground truth: what does "100% malware detection" even mean when the threat landscape mutates daily and every testing house uses a different corpus? The most instructive case is Enigma Software Group USA, LLC v. Malwarebytes, Inc., 946 F.3d 1040 (9th Cir. 2019), where Malwarebytes flagged Enigma's products as "potentially unwanted programs" and Enigma alleged the classification was an anticompetitive misrepresentation. The Ninth Circuit held that Section 230 of the Communications Decency Act did not immunize a blocking decision allegedly made for anticompetitive reasons — declining to let a content-moderation immunity launder a competitive attack (cert. denied, 2020). For the broader stakes of Section 230 in platform disputes, see Section 230 reform and platform liability for user-generated IP infringement. Bastion's "blocks 100% of ransomware" is precisely the absolute, measurable, professional-audience claim this body of law was built to catch.

Performance benchmarks. Benchmark disputes are usually fights over methodology, not outright fabrication. As industry-standard benchmarks proliferate across databases, machine learning, and networking, vendors gain both shared yardsticks and fresh grounds to argue about relevance and fair configuration. Courts evaluating benchmark claims ask whether the benchmark is industry-recognized, whether the test conditions were fair, whether the comparison product was properly optimized (or quietly hobbled), and whether the results reproduce. The classic foul is cherry-picking — citing the one benchmark or configuration where you win while ignoring the rest. Even arithmetically accurate numbers can convey a misleading net impression, which is exactly where the establishment-claim attack from Southland Sod bites: a plaintiff discredits the cited tests without running its own.

"AI-powered" and capability claims. The newest battleground overlays the puffery analysis above with a regulatory dimension. Whether "AI-powered," "autonomous," or "self-learning" is bluster or a factual capability claim turns on the audience and the underlying technology, and a competitor's Lanham Act theory may now ride alongside FTC scrutiny of unsubstantiated AI marketing. The safest posture is to treat a capability claim as an establishment claim and keep the substantiation on file.

Sustainability and "greenwashing." Environmental claims — carbon neutrality, renewable-energy sourcing, recyclability, "e-waste-free" — have become a real category as ESG factors enter enterprise procurement. They draw fire from two directions: competitors under the Lanham Act, and the FTC under its Green Guides, 16 C.F.R. Part 260, which describe how the agency applies the FTC Act to environmental marketing. A currency note: the Green Guides were last revised in 2012. The FTC opened a review in December 2022 and took extensive comment in 2023, but as of mid-2026 no updated Guides have been finalized, so the 2012 version remains operative. Their core principles still govern both regulators and competitor challenges: a broad, unqualified environmental benefit claim requires broad substantiation; specific claims must be accurately and narrowly supported; and reasonable-consumer interpretation controls implied claims. Expect technology-specific disputes over data-center energy efficiency, device-recycling programs, and carbon-offset accounting to grow.

The NAD alternative: faster, cheaper, and burden-flipped

Litigation is not the only road, and for many advertising disputes it is not even the best one. The National Advertising Division (NAD) of BBB National Programs offers a self-regulatory forum whose decisions are not legally binding and whose participation is voluntary — but which is faster, cheaper, and, crucially, flips the burden of proof.

The differences from litigation are structural and they favor a well-prepared challenger:

  • Burden. In court, the challenger bears the burden of proving falsity. At NAD, the advertiser bears the burden of proving its claims are truthful and substantiated. For a challenger who would struggle to disprove a claim affirmatively, this reversal is the whole ballgame.
  • Process. NAD runs on written submissions — no discovery, no depositions — which keeps cost and time down.
  • Speed. NAD attorneys typically issue decisions in roughly three to six months on the Standard Track, and far faster on the streamlined track.
  • Tracks and fees. NAD offers a Standard Track; a Fast-Track SWIFT process for a single straightforward issue (resolved in about 20 business days); and a complex track for technically involved matters. Filing fees scale with the challenger's revenue and BBB National Programs membership. To put real numbers on it: on the Standard Track, National Partners pay roughly $8,000, $28,000, or $36,000 depending on revenue tier, and non-partners pay roughly $10,000, $35,000, or $45,000 — with expert work, surveys, and appeals adding cost. That is a fraction of contested Lanham Act litigation, which routinely runs into the high six figures or beyond.
  • Teeth. NAD cannot award damages, issue a binding injunction, or grant interim relief, and its decisions are not legal precedent. But advertisers comply with NAD recommendations at a strikingly high rate, decisions are published and shape industry norms, and non-compliance can be referred to the FTC — a referral most advertisers would rather avoid. Appeals go to the National Advertising Review Board (NARB).

The choice is a tradeoff, and many companies run parallel tracks: an NAD challenge for a fast, cheap pull-down of the offending claim, with litigation held in reserve for damages or a binding injunction. If Verge mainly wants Bastion's "100%" claim gone, NAD is the sharper first move — it puts the substantiation burden on Bastion, who must produce testing it likely cannot. If Verge needs money or a court order, it must litigate. Two further informal routes are worth knowing: a takedown request to the media outlet or platform carrying the ad (which can act like a fast, free TRO, though the outlet's decision is often final and unappealable), and a plain demand letter opening a negotiation. For the mechanics of the latter, our guide to writing a demand letter is a useful companion.

A pre-publication review framework

The cheapest false-advertising case is the one a marketing-review process kills before launch. Teams can dramatically cut exposure by classifying every claim before it ships:

  • Superlatives and comparatives ("best," "leading," "fastest," or any named-competitor comparison): ask whether the claim is puffery or a testable assertion, whether substantiation already exists, and whether the comparison is fair, current, and apples-to-apples.
  • Quantitative claims ("99.9% uptime," "50% faster"): treat as factual claims requiring a documented, reproducible source and clearly defined, representative measurement conditions. If you cannot point to the test, do not ship the number.
  • Third-party endorsements (analyst rankings, certifications, testimonials): verify the citation is accurate, current, correctly scoped, and properly permissioned. "Named a Leader" must mean this report, this year, this category.
  • Certification and compliance claims (SOC 2, FedRAMP, ISO, HIPAA): confirm the company currently holds the certification and that the copy describes its scope precisely. A lapsed or over-scoped certification claim is an establishment claim that collapses on contact.
  • Performance benchmarks: document the recognized benchmark, the fair test conditions, and reproducible, current results — and resist the cherry-pick.

Then document systematically. For each material claim, preserve the exact wording, its classification, the substantiation (test data, survey, third-party source), the date of substantiation, the record of legal/technical review, and where and when it was published. That "substantiation file" is both marketing discipline and, if a challenge lands, the fastest possible defense.

Certain features should trigger heightened scrutiny and a documented sign-off before publication:

  • Claims that name a competitor
  • Claims using specific numbers or percentages
  • Claims of exclusivity ("only," "first," "unique")
  • Claims about security, privacy, or data protection
  • Claims about regulatory compliance or certification status
  • Claims defended only as "what everyone in the category says"
  • Claims the technical team cannot clearly explain or reproduce
  • Claims resting on testing more than twelve months old
  • Claims an internal stakeholder has already flagged

When one of these appears, the prudent move is the same: pause, route to legal and engineering, document the resolution, and only then proceed.

The state-law overlays: California and New York

The Lanham Act is the headline act, but two state regimes appear in nearly every multistate dispute and occasionally offer remedies the federal statute does not.

California. The False Advertising Law (FAL), Cal. Bus. & Prof. Code §§ 17500–17606, bars untrue or misleading statements about property or services. Two features distinguish it. First, FAL violations carry criminal penalties — they are misdemeanors — though enforcement is overwhelmingly civil, through injunctions, restitution, and civil penalties. Second, the FAL reaches statements the advertiser knew, or should have known with reasonable care, were untrue or misleading — supplying a modest cushion for good-faith error that the strict-liability Lanham Act does not. Private plaintiffs need injury in fact plus lost money or property to sue; the Attorney General and local prosecutors may also act. And because an FAL violation is automatically an "unlawful" business act under California's broader Unfair Competition Law (UCL), § 17200, the two statutes interlock to widen exposure.

New York. General Business Law § 350 prohibits false advertising in the conduct of business in the state, and courts read it broadly. A claim requires (1) consumer-oriented conduct, (2) materially misleading conduct, and (3) injury. The consumer-orientation requirement is the catch for technology disputes: a purely B2B quarrel can fall outside § 350's scope, though some decisions extend it to business purchasers. Section 350 requires no intent — negligent misrepresentation suffices — and its remedies include injunctive relief, the greater of actual damages or $500, and enhanced damages up to three times actual damages, capped at $10,000, for a willful or knowing violation.

Feature Lanham Act California FAL New York GBL § 350
Standing Zone of interests + proximate cause (Lexmark) Private parties with injury; AG/prosecutors Private parties with injury; AG
Knowledge requirement None (strict) Knew or should have known None (negligence suffices)
Consumer-orientation needed No No Yes — may exclude pure B2B
Criminal exposure No Yes (misdemeanor) No
Damages Lost profits, defendant's profits, up to 3× Restitution, civil penalties Actual or $500; up to 3× ($10,000 cap)
Geographic hook Interstate commerce California-connected activity New York-connected activity

Building a culture that can defend its claims

The hard truth is that no single team can both write a compelling claim and confirm it is defensible. Marketing knows what sells; engineering knows what is true; legal knows what is provable; product knows what is shipping. Risk lives in the gaps between them. Organizations that handle this well build structured touchpoints: legal and engineering join during campaign development, not after the deck is final; technical claims get an engineering sign-off; competitor claims have a named approver and a substantiation requirement; teams train on real industry examples; and someone monitors the market for competitor responses, NAD filings, and demand letters.

When a challenge does arrive — by demand letter, NAD complaint, or suit — respond systematically. Put a litigation hold in place immediately. Assess the challenge honestly: sometimes the competitor is right, and a quiet modification beats an expensive, losing fight. Review the challenger's own advertising for counterclaim leverage (the firm complaining about your "fastest" claim may have a "most secure" problem of its own). Choose the forum deliberately — NAD versus court — and align the legal response with the business strategy, remembering that pulling or softening a claim is frequently the cheapest resolution available. For protecting the confidential test data and competitive intelligence that surface in these disputes, see our discussion of trade secrets in the age of remote work and cloud computing.

Frequently asked questions

Can a competitor sue me even though it never bought my product? Yes. The plaintiff in a Section 43(a) case is suing over commercial injury — diverted sales, lost goodwill — not over a purchase it made. Under Lexmark, it need not even be a direct competitor, so long as it is within the Act's zone of interests and can show its injury was proximately caused by your false claim.

My claim is literally true. Am I safe? Not necessarily. A literally true statement is actionable if it conveys a false impression in context (implied falsity) or if its necessary implication is false. "Unlimited storage" can mislead despite being true on its face, and a comparison chart's red X can be literally false by necessary implication even though no sentence says the false thing outright.

Is "the best" or "world-class" always safe puffery? Usually, but not always. Standing alone, vague superlatives read as opinion. But specificity, quantitative modifiers, a named-competitor context, or a sophisticated technical audience can each convert a "safe" boast into a factual claim that requires substantiation (Castrol, Clorox).

We hold the certification we advertise — can we still be sued? Possibly. Compliance with a regulatory regime is not a safe harbor against a competitor's Lanham Act claim (POM Wonderful). The question is whether your claim conveys a misleading message about scope or currency — for example, advertising a certification that has lapsed or that covers only part of your product.

NAD or court — which should we use? NAD if you want a fast, inexpensive order to pull a claim and you would benefit from shifting the substantiation burden onto the advertiser. Court if you need damages, a binding injunction, or interim relief. Many companies run both, using NAD for speed and reserving litigation for leverage.

How false does a number have to be? There is no de minimis cushion for literal falsity — a number is either accurate or it is not — but the materiality element still screens out trivial inaccuracies that would not move a buyer. A "99.99%" claim that is actually 99.97% may be literally false yet immaterial; a "100%" claim that is actually 85% is both false and squarely material.

Conclusion: discipline, not timidity

Technology marketing rewards bold claims — and the law does not forbid bold claims, only indefensible ones. The governing principles are not mysterious. Specific factual claims need substantiation; vague quality assertions may be protected puffery; establishment claims fall when you discredit the proof behind them; comparative claims about named competitors draw the heaviest scrutiny and the Southland Sod attack; materiality limits liability to claims that actually move buyers; and standing, under Lexmark, runs to anyone whose commercial interests the Act protects and whose injury the deception proximately caused — with POM Wonderful keeping the courthouse door open even where a regulator is already on the beat.

The cost of getting it wrong is not just legal fees. Customers who discover that a claim was inflated stop trusting the brand, and a competitor who wins a falsity ruling gets to repeat it in every sales call for years. The objective is not caution for its own sake; it is discipline — making the claims you can defend, and documenting the proof before anyone asks for it.

For Bastion, the math is now clear. "Military-grade encryption," kept vague, probably survives. "The industry's most accurate threat detection" is a real risk that depends on whether it holds detection-rate testing it can stand behind. And "blocks 100% of ransomware" should be retired today — traded for a defensible, substantiated formulation — before Verge, the NAD, or a regulator makes that choice for it.


This article is for informational purposes only and does not constitute legal advice. Readers should consult qualified advertising and litigation counsel about their specific circumstances. To discuss a matter with our team, visit our Intellectual Property and Technology practice page.


Selected authorities

Statutes and guides: Lanham Act § 43(a), 15 U.S.C. § 1125(a); § 35, 15 U.S.C. § 1117(a); § 34, 15 U.S.C. § 1116; § 45, 15 U.S.C. § 1127; FTC Act § 5, 15 U.S.C. § 45; Trademark Modernization Act of 2020 (rebuttable presumption of irreparable harm); FTC Green Guides, 16 C.F.R. Part 260 (last revised 2012; review pending since December 2022, not finalized as of mid-2026); Cal. Bus. & Prof. Code §§ 17500–17606 and § 17200; N.Y. Gen. Bus. Law § 350.

Cases: Lexmark Int'l, Inc. v. Static Control Components, Inc., 572 U.S. 118 (2014) (standing); POM Wonderful LLC v. Coca-Cola Co., 573 U.S. 102 (2014) (no FDCA preclusion of competitor Lanham Act claims); Coca-Cola Co. v. Tropicana Products, Inc., 690 F.2d 312 (2d Cir. 1982) (literal falsity presumption); Time Warner Cable, Inc. v. DIRECTV, Inc., 497 F.3d 144 (2d Cir. 2007) (necessary implication); Novartis Consumer Health, Inc. v. Johnson & Johnson-Merck Consumer Pharm. Co., 290 F.3d 578 (3d Cir. 2002); Southland Sod Farms v. Stover Seed Co., 108 F.3d 1134 (9th Cir. 1997) (establishment claims); Pizza Hut, Inc. v. Papa John's Int'l, Inc., 227 F.3d 489 (5th Cir. 2000) (puffery); Castrol Inc. v. Pennzoil Co., 987 F.2d 939 (3d Cir. 1993); Clorox Co. Puerto Rico v. Procter & Gamble Commercial Co., 228 F.3d 24 (1st Cir. 2000); Cashmere & Camel Hair Mfrs. Inst. v. Saks Fifth Avenue, 284 F.3d 302 (1st Cir. 2002) (materiality); Winter v. NRDC, 555 U.S. 7 (2008); eBay Inc. v. MercExchange, L.L.C., 547 U.S. 388 (2006); Octane Fitness, LLC v. ICON Health & Fitness, Inc., 572 U.S. 545 (2014) (exceptional case); Romag Fasteners, Inc. v. Fossil, Inc., 590 U.S. 212 (2020) (willfulness and profits); Enigma Software Group USA, LLC v. Malwarebytes, Inc., 946 F.3d 1040 (9th Cir. 2019), cert. denied (2020); Made in the USA Found. v. Phillips Foods, Inc., 365 F.3d 278 (4th Cir. 2004); Pfizer, Inc., 81 F.T.C. 23 (1972) (reasonable-basis substantiation).

Self-regulation: National Advertising Division (NAD) and National Advertising Review Board (NARB), BBB National Programs. Filing fees current as of recent NAD fee schedules; verify current tracks, fees, and authorities before relying on them.

Related articles