I mentioned this in another comment, but I just wanted to note that even as a very small company, we tend to avoid solutions that won't readily integrate with our existing LDAP users and group-based access control, backup system, single-sign-on, etc.

Not using web services has less to do with being bridled corporate restrictions and more to do with preferring to use our nice, fully automated infrastructure. Hosting another small java servlet isn't going to make us break a sweat -- it'll be less work than trying to maintain user accounts and access controls across another web service.

For this reason, we solely use products that drop right into our standing infrastructure. I don't think we're too unusual in this, although we may be amongst the HN sample set.