I suppose the concern I have is that I'm starting a B2C security company. This means I have to (or at least feel like I have to) balance the requirements of having a short, trustworthy domain and making it accessible to less-technical users by making it a .com. I may well be overthinking this particular problem though.