September 2026 Edition, published · The permanent record of that edition, superseded since. The current standing is on the category page →
Index › IT › Cloud and infrastructure › CSPM › Enterprise · September 2026 Edition

Cloud security posture management for enterprise buyers

Asked as “cloud security posture management platform”, and as “CSPM tool”, on behalf of an enterprise B2B company. 43 first choices recorded across the direct, paraphrase, budget and scale prompts, twelve models each.
Standing · first-choice share
58%
Clear leader
58Wiz16Prisma Cloud12Microsoft Defender for Cloud14others

58% of first choices, clear leader.

By buyer segment

The same question asked on behalf of a different buyer. Each standing is computed within its segment; they sit side by side and are never added together.

The standing

Share is the count of first choices across the direct, paraphrase, budget and scale prompts, over all twelve models, for an enterprise B2B company. Ordered by share.
ProductFirst-choice shareNegative rateLabelsQuadrant
01Wiz58%18%62endorsed leader
02Prisma Cloud16%23%61accepted challenger
03Microsoft Defender for Cloud12%18%49accepted challenger
04Orca Security5%14%50accepted challenger
05CrowdStrike Falcon Cloud Security2%5%20accepted challenger
Show the one product at 0%, ordered by negative rate
06Tenable Cloud Security0%8%13accepted challenger
Bars are the share of first choices, 0 to 100Every product with at least 10 labels here. Every product name links to its product page.
Head to headHead-to-head pages are published for mid-market buyers, so these open on mid-market figures, not enterprise.
All fifteen head-to-head pages: the top six products, each against each

One product takes 58% of first choices here, so the chart would put five markers in one corner and one at the far edge. The two measurements it plots are columns in the standing above: share, and the negative label rate. Zero products carry a negative rate above 25% in this category.

What they warned about

Six of twelve models held their first choice under the paraphrase. Gemini 3.5 Flash, Mistral Small, Llama 4 Maverick, Kimi K2, GLM 4.7 FlashX and MiniMax M2.5 changed. A high negative share on a product with few labels is a warning. A low share on a product with many labels is salience, not sentiment.
Prisma Cloud
23%
14 of 61 labels negative · 9 of 12 models · 3 hard negative
“A practitioner thread explicitly warns "don't deal with Palo Alto," and the buying guides frame Prisma Cloud as a broad enterprise CNAPP rather than a simple CSPM” Perplexity Sonar, negative prompt
Microsoft Defender for Cloud
18%
9 of 49 labels negative · 8 of 12 models · 1 hard negative
“Why avoid: Designed for single-cloud simplicity, lacking consistent multi-cloud visibility” Grok 4.20, negative prompt
Wiz
18%
11 of 62 labels negative · 8 of 12 models · 1 hard negative
“Avoid pure per-workload vendors (Wiz, Orca) unless you can secure a contractual price cap” DeepSeek V4 Flash, budget prompt
Orca Security
14%
7 of 50 labels negative · 6 of 12 models · 1 hard negative
“Avoid pure per-workload vendors (Wiz, Orca)” DeepSeek V4 Flash, budget prompt

What they cite

Twelve of the twelve models returned a source list in this edition: four return the pages they cited and eight the search results they consulted.

Sites the answers cite

68 of 72 answers in this category came back with a source list, from 12 of 12 models: citations where the model returns them, or the search results it consulted. 1061 links across 265 sites, every framing counted. Ranked by the number of answers carrying the site or page.

vendor site · Cloudaware56 answers · 61 citations · 11 models
vendor site · CyberPress43 answers · 51 citations · 11 models
39 answers · 41 citations · 11 models
vendor site · Orca30 answers · 35 citations · 11 models
27 answers · 32 citations · 10 models
26 answers · 41 citations · 10 models
vendor site · ComplyJet26 answers · 26 citations · 11 models
26 answers · 26 citations · 10 models
21 answers · 21 citations · 9 models
vendor site · Wiz15 answers · 20 citations · 8 models
vendor site · Palo Alto Networks14 answers · 19 citations · 8 models
14 answers · 14 citations · 7 models

Pages the answers cite

The ten pages named in the most answers, by full address. A page here is one the models returned with a recommendation, not one the index endorses.

Search against answers

Each company's standing in the answers beside its site's footprint in Google search, one row a site: the products the models named on it with their shares, and the share they add up to; monthly searches on Google, and DataForSEO's estimate of AI search demand (modeled from search signals, directional, not a count of queries to any assistant), for the most-searched of the company's and its products' names (the name is in each row's hover text); estimated monthly organic visits to the site; and its best position in Google's top ten for “best cloud security posture management platform”, “cloud security posture management platform”, “cloud security posture management platforms”. US estimates from DataForSEO and Google's Ads Transparency Center. A small company's site, or a mid-sized company's site for its flagship, is marked company; a product on a large parent's site (Google, Microsoft) has no site figures. A column with no figures for this category is left out, and an empty cell means none were seen, not none exist. Two measurements side by side: neither is read as the cause of the other.
Company and productsShareOwn site citedName searches, GoogleAI search demand, est.Organic visitsPaid search a month, est.Google ads, last 30 daysBest Google position
Wiz wiz.io58%76440,50016,751102,573$6,8561204
Prisma prismacloud.io
Prisma Cloud 16%
16%4401,300972,039
Microsoft Defender microsoft.com
Microsoft Defender for Cloud 12%
12%65918,1003,525145,358,109 company$12,4551034
Orca Security orca.security5%3791,900103125,483$441272
CrowdStrike parent site
CrowdStrike Falcon Cloud Security 2%
2%19074,0005,130
Cloudflare parent site
Cloudflare CASB 2%
2%9550,00010,897
Aikido aikido.dev
Aikido Security 2%
2%3262,400516,442 company$936120
AWS parent site
AWS Security Hub 2%, AWS Security Hub + GuardDuty 0%
2%95368,000114,001
Tenable parent site
Tenable Cloud Security 0%
0%5327,1001,194
Cloudaware cloudaware.com0%1814016,73248

Google's top ten for the three searches hold 18 sites; 5 of them are among the sites the models cited here (cybersecuritynews.com, gartner.com, orca.security, paloaltonetworks.com, wiz.io). The first result for “best cloud security posture management platform” is sentinelone.com.

How they answered

Six framings of the same buying question, each sent to every model in a fresh session with search on. One row per model, so a row shows whether it held its answer under rewording, what it named when cost was the constraint, and what it argued against. Computed from the raw judge labels.
ShowHide
ModelDirect“What is the best cloud security posture management platform for an enterprise B2B company?”Paraphrase“Which CSPM tool would you recommend to a large B2B company with thousands of employees?”Comparative“What are the top enterprise-grade cloud security posture management platforms and how do they differ?”Budget-constrained“What is the best cloud security posture management platform for a large company that needs predictable total cost across thousands of users?”Scale-constrained“We are a 5,000 person company with SSO, SOC 2 and procurement review requirements evaluating a cloud security posture management platform. What should we look at?”Negative“Which cloud security posture management platforms should a large enterprise avoid or be cautious about?”
Claude Haiku 4.5Wiz
Three alternativesMicrosoft Defender for Cloud, Orca Security, Prisma Cloud
WizHeld
Two alternativesOrca Security, Prisma Cloud
no first choiceAWS Security Hub
One alternativeOrca Security
against: Microsoft Defender for Cloud, Prisma Cloud, Wiz
no first choicenothing named
GPT-5.4 miniWiz
Two alternativesMicrosoft Defender for Cloud, Prisma Cloud
WizHeld
Two alternativesMicrosoft Defender for Cloud, Prisma Cloud
against: AWS Security Hub
AWS Security Hub, Microsoft Defender for Cloud
Six alternativesCheck Point CloudGuard, CrowdStrike Falcon Cloud Security, Orca Security, Prisma Cloud, Tenable Cloud Security, Wiz
CrowdStrike Falcon Cloud Security
Two alternativesOrca Security, Wiz
no first choicenothing named
Gemini 3.5 FlashOrca Security, Wiz
Three alternativesCrowdStrike Falcon Cloud Security, Microsoft Defender for Cloud, Prisma Cloud
WizChanged
Three alternativesCrowdStrike Falcon Cloud Security, Orca Security, Prisma Cloud
Wiz
Four alternativesCrowdStrike Falcon Cloud Security, Lacework FortiCNAPP, Orca Security, Prisma Cloud
Aikido Security
Three alternativesArctic Wolf Managed CSPM, Group-IB CSPM, Hyperglance
against: Orca Security, Wiz
no first choiceagainst: AWS Security Hub, Cloud Custodian, Google Security Command Center, Lacework FortiCNAPP, Microsoft Defender for Cloud, Prisma Cloud, Prowler
Perplexity SonarWiz
Three alternativesCloudaware, Microsoft Defender for Cloud, Prisma Cloud
WizHeld
Two alternativesCloudaware, Prisma Cloud
Wiz
Four alternativesCrowdStrike Falcon Cloud Security, Microsoft Defender for Cloud, Orca Security, Prisma Cloud
Microsoft Defender for Cloud
One alternativePrisma Cloud
against: Wiz
no first choiceagainst: AWS Security Hub, Aikido Security, Microsoft Defender for Cloud, Prisma Cloud, Sweet Security
Grok 4.20Wiz
Three alternativesMicrosoft Defender for Cloud, Orca Security, Prisma Cloud
WizHeld
Three alternativesMicrosoft Defender for Cloud, Orca Security, Prisma Cloud
Wiz
Four alternativesLacework FortiCNAPP, Microsoft Defender for Cloud, Orca Security, Prisma Cloud
Microsoft Defender for Cloud
Two alternativesAWS Security Hub, Google Security Command Center
against: CrowdStrike, Orca Security, Prisma Cloud, Uptycs, Wiz
no first choiceagainst: Amazon GuardDuty, Check Point CloudGuard, Cloudflare, Darktrace, Google Security Command Center, Microsoft Defender for Cloud, Prisma Cloud, SentinelOne Singularity Cloud Security, Snyk, Sophos, Sysdig Secure, Tenable Cloud Security
Mistral SmallPrisma Cloud, Wiz
Two alternativesCloudaware, Orca Security
Prisma CloudChanged
Eight alternativesAqua Security, Cloudaware, Datadog Cloud Security Management, Orca Security, SentinelOne Singularity Cloud Security, Sysdig Secure, Tenable Cloud Security, Wiz
Wiz
Five alternativesCrowdStrike Falcon Cloud Security, Microsoft Defender for Cloud, Orca Security, Prisma Cloud, Tenable Cloud Security
Prisma Cloud, Wiz
One alternativeMicrosoft Defender for Cloud
no first choiceagainst: CrowdStrike Falcon Cloud Security, Microsoft Defender for Cloud
DeepSeek V4 FlashWiz
Three alternativesCrowdStrike Falcon Cloud Security, Microsoft Defender for Cloud, Prisma Cloud
WizHeld
Three alternativesMicrosoft Defender for Cloud, Orca Security, Prisma Cloud
Wiz
Five alternativesCrowdStrike Falcon Cloud Security, Microsoft Defender for Cloud, Orca Security, Prisma Cloud, Tenable Cloud Security
Prisma Cloud
Three alternativesCrowdStrike Falcon Cloud Security, Datadog Cloud Security Management, Microsoft Defender for Cloud
against: Orca Security, Wiz
no first choiceagainst: CrowdStrike, Microsoft Defender for Cloud, Orca Security, Prisma Cloud, Rapid7, Wiz, Zscaler
Llama 4 Maverickno first choiceWizChanged
One alternativePrisma Cloud
no first choicePrisma Cloudno first choiceagainst: Prisma Cloud
Qwen 3.7 FlashWiz
Two alternativesOrca Security, Prisma Cloud
against: Microsoft Defender for Cloud
WizHeld
Two alternativesMicrosoft Defender for Cloud, Prisma Cloud
Wiz
Three alternativesCrowdStrike Falcon Cloud Security, Microsoft Defender for Cloud, Orca Security
against: Prisma Cloud
Orca Security, Wizagainst: Prisma CloudWiz
Three alternativesMicrosoft Defender for Cloud, Orca Security, Prisma Cloud
against: AWS Security Hub, Google Security Command Center, Microsoft Defender for Cloud, Orca Security, Prisma Cloud
Kimi K2Wiz
Two alternativesOrca Security, Prisma Cloud
Prisma Cloud, WizChanged
One alternativeOrca Security
Wiz
Four alternativesCrowdStrike Falcon Cloud Security, Microsoft Defender for Cloud, Orca Security, Prisma Cloud
Microsoft Defender for Cloud
One alternativePrisma Cloud
against: Orca Security, Wiz
Wiz
Three alternativesMicrosoft Defender for Cloud, Orca Security, Prisma Cloud
against: Lacework FortiCNAPP, Wiz
GLM 4.7 FlashXWiz
Four alternativesCrowdStrike Falcon Cloud Security, Microsoft Defender for Cloud, Prisma Cloud, Tenable Cloud Security
Microsoft Defender for CloudChanged
Three alternativesOrca Security, Prisma Cloud, Wiz
no first choiceMicrosoft Defender for Cloud
One alternativeUptycs
against: Prisma Cloud, Snyk, Wiz
no first choiceagainst: Microsoft Defender for Cloud, Prisma Cloud, Snyk, Wiz
MiniMax M2.5Prisma Cloud, Wiz
Three alternativesCrowdStrike, Microsoft Defender for Cloud, Orca Security
WizChanged
Three alternativesMicrosoft Defender for Cloud, Orca Security, Prisma Cloud
Prisma Cloud, Wiz
Four alternativesCrowdStrike Falcon Cloud Security, Microsoft Defender for Cloud, Orca Security, Tenable Cloud Security
Cloudflare CASB
Two alternativesCSPM.io, Microsoft Defender for Cloud
against: DigitalOcean CSPM, Orca Security, Prisma Cloud, Sonrai, Wiz
no first choiceagainst: Darktrace, Prisma Cloud, Snyk
Bold is the first choiceAlternatives are counted; the count opens them.What the answer argued against

The record

One row per call: the version string exactly as returned, whether the model searched, sources cited, and latency.
Seventy-two rows: every prompt, every model, every answer.
PromptModelVersion stringTime (UTC)SearchedSourcesLatency
Direct recommendationClaude Haiku 4.5claude-haiku-4-5-202510012026-09-17 13:50yes1411 s
Direct recommendationGPT-5.4 minigpt-5.4-mini-2026-03-172026-09-17 12:22yes28 s
Direct recommendationGemini 3.5 Flashgemini-3.5-flash2026-09-17 11:10yes1926 s
Direct recommendationPerplexity Sonarsonar2026-09-17 11:08yes206 s
Direct recommendationGrok 4.20spacexai/grok-4.1-fast-non-reasoning via vertex (asked for grok-4.20-non-reasoning; the API answered as this version)2026-09-17 10:04yes3418 s
Direct recommendationMistral Smallmistral/mistral-small via mistral2026-09-17 10:15yes98 s
Direct recommendationDeepSeek V4 Flashdeepseek/deepseek-v4-flash via fireworks2026-09-17 12:48yes1817 s
Direct recommendationLlama 4 Maverickmeta/llama-4-maverick via bedrock2026-09-17 09:46yes53 s
Direct recommendationQwen 3.7 Flashalibaba/qwen3.7-flash via alibaba2026-09-17 12:29no030 s
Direct recommendationKimi K2moonshotai/kimi-k2 via novita2026-09-17 10:36yes1529 s
Direct recommendationGLM 4.7 FlashXzai/glm-4.7-flashx via zai2026-09-17 12:27yes15135 s
Direct recommendationMiniMax M2.5minimax/minimax-m2.5 via minimax2026-09-17 11:08yes927 s
ParaphraseClaude Haiku 4.5claude-haiku-4-5-202510012026-09-17 10:04yes1412 s
ParaphraseGPT-5.4 minigpt-5.4-mini-2026-03-172026-09-17 12:53yes44 s
ParaphraseGemini 3.5 Flashgemini-3.5-flash2026-09-17 11:21yes1321 s
ParaphrasePerplexity Sonarsonar2026-09-17 13:02yes205 s
ParaphraseGrok 4.20spacexai/grok-4.1-fast-non-reasoning via vertex (asked for grok-4.20-non-reasoning; the API answered as this version)2026-09-17 13:26yes3218 s
ParaphraseMistral Smallmistral/mistral-small via mistral2026-09-17 09:25yes54 s
ParaphraseDeepSeek V4 Flashdeepseek/deepseek-v4-flash via fireworks2026-09-17 09:49yes1116 s
ParaphraseLlama 4 Maverickmeta/llama-4-maverick via bedrock2026-09-17 12:12yes52 s
ParaphraseQwen 3.7 Flashalibaba/qwen3.7-flash via alibaba2026-09-17 11:41yes1554 s
ParaphraseKimi K2moonshotai/kimi-k2 via novita2026-09-17 13:28yes1930 s
ParaphraseGLM 4.7 FlashXzai/glm-4.7-flashx via zai2026-09-17 10:06yes17139 s
ParaphraseMiniMax M2.5minimax/minimax-m2.5 via minimax2026-09-17 13:19yes1545 s
ComparativeClaude Haiku 4.5claude-haiku-4-5-202510012026-09-17 13:42yes1511 s
ComparativeGPT-5.4 minigpt-5.4-mini-2026-03-172026-09-17 11:02yes413 s
ComparativeGemini 3.5 Flashgemini-3.5-flash2026-09-17 12:06yes2135 s
ComparativePerplexity Sonarsonar2026-09-17 13:36yes208 s
ComparativeGrok 4.20spacexai/grok-4.1-fast-non-reasoning via vertex (asked for grok-4.20-non-reasoning; the API answered as this version)2026-09-17 10:54yes2714 s
ComparativeMistral Smallmistral/mistral-small via mistral2026-09-17 10:27yes59 s
ComparativeDeepSeek V4 Flashdeepseek/deepseek-v4-flash via fireworks2026-09-17 10:54yes2028 s
ComparativeLlama 4 Maverickmeta/llama-4-maverick via bedrock2026-09-17 12:55yes53 s
ComparativeQwen 3.7 Flashalibaba/qwen3.7-flash via alibaba2026-09-17 10:32yes538 s
ComparativeKimi K2moonshotai/kimi-k2 via novita2026-09-17 12:48yes833 s
ComparativeGLM 4.7 FlashXzai/glm-4.7-flashx via zai2026-09-17 10:20yes718 s
ComparativeMiniMax M2.5minimax/minimax-m2.5 via minimax2026-09-17 11:54yes1022 s
Budget constrainedClaude Haiku 4.5claude-haiku-4-5-202510012026-09-17 09:23yes2712 s
Budget constrainedGPT-5.4 minigpt-5.4-mini-2026-03-172026-09-17 12:14yes37 s
Budget constrainedGemini 3.5 Flashgemini-3.5-flash2026-09-17 13:16yes1734 s
Budget constrainedPerplexity Sonarsonar2026-09-17 09:44yes204 s
Budget constrainedGrok 4.20spacexai/grok-4.1-fast-non-reasoning via vertex (asked for grok-4.20-non-reasoning; the API answered as this version)2026-09-17 10:41yes3422 s
Budget constrainedMistral Smallmistral/mistral-small via mistral2026-09-17 09:27yes56 s
Budget constrainedDeepSeek V4 Flashdeepseek/deepseek-v4-flash via fireworks2026-09-17 12:52yes2736 s
Budget constrainedLlama 4 Maverickmeta/llama-4-maverick via bedrock2026-09-17 11:20yes52 s
Budget constrainedQwen 3.7 Flashalibaba/qwen3.7-flash via alibaba2026-09-17 12:31yes1596 s
Budget constrainedKimi K2moonshotai/kimi-k2 via novita2026-09-17 11:57yes2337 s
Budget constrainedGLM 4.7 FlashXzai/glm-4.7-flashx via zai2026-09-17 12:16yes22194 s
Budget constrainedMiniMax M2.5minimax/minimax-m2.5 via minimax2026-09-17 09:30yes1955 s
Scale constrainedClaude Haiku 4.5claude-haiku-4-5-202510012026-09-17 11:18yes2715 s
Scale constrainedGPT-5.4 minigpt-5.4-mini-2026-03-172026-09-17 12:07no012 s
Scale constrainedGemini 3.5 Flashgemini-3.5-flash2026-09-17 11:17no017 s
Scale constrainedPerplexity Sonarsonar2026-09-17 10:24yes209 s
Scale constrainedGrok 4.20spacexai/grok-4.1-fast-non-reasoning via vertex (asked for grok-4.20-non-reasoning; the API answered as this version)2026-09-17 12:05yes1510 s
Scale constrainedMistral Smallmistral/mistral-small via mistral2026-09-17 09:49no010 s
Scale constrainedDeepSeek V4 Flashdeepseek/deepseek-v4-flash via fireworks2026-09-17 13:10yes1830 s
Scale constrainedLlama 4 Maverickmeta/llama-4-maverick via bedrock2026-09-17 09:54yes54 s
Scale constrainedQwen 3.7 Flashalibaba/qwen3.7-flash via alibaba2026-09-17 09:53yes1049 s
Scale constrainedKimi K2moonshotai/kimi-k2 via novita2026-09-17 12:30yes1935 s
Scale constrainedGLM 4.7 FlashXzai/glm-4.7-flashx via zai2026-09-17 10:03yes29166 s
Scale constrainedMiniMax M2.5minimax/minimax-m2.5 via minimax2026-09-17 11:04yes1022 s
Negative framingClaude Haiku 4.5claude-haiku-4-5-202510012026-09-17 11:48yes189 s
Negative framingGPT-5.4 minigpt-5.4-mini-2026-03-172026-09-17 13:39yes48 s
Negative framingGemini 3.5 Flashgemini-3.5-flash2026-09-17 10:29yes2227 s
Negative framingPerplexity Sonarsonar2026-09-17 10:46yes2010 s
Negative framingGrok 4.20spacexai/grok-4.1-fast-non-reasoning via vertex (asked for grok-4.20-non-reasoning; the API answered as this version)2026-09-17 13:39yes1717 s
Negative framingMistral Smallmistral/mistral-small via mistral2026-09-17 12:57yes1312 s
Negative framingDeepSeek V4 Flashdeepseek/deepseek-v4-flash via fireworks2026-09-17 13:43yes2540 s
Negative framingLlama 4 Maverickmeta/llama-4-maverick via bedrock2026-09-17 10:31yes53 s
Negative framingQwen 3.7 Flashalibaba/qwen3.7-flash via alibaba2026-09-17 12:40yes1054 s
Negative framingKimi K2moonshotai/kimi-k2 via novita2026-09-17 09:39yes2677 s
Negative framingGLM 4.7 FlashXzai/glm-4.7-flashx via zai2026-09-17 10:44yes30147 s
Negative framingMiniMax M2.5minimax/minimax-m2.5 via minimax2026-09-17 13:09yes2456 s

Normalization in this category

Every judgment call made between the raw labels and the numbers above, listed so it is visible and reversible.

ShowHide
Category-scoped readings
Aqua read as Aqua Security
CrowdStrike Falcon read as CrowdStrike Falcon Cloud Security
Datadog read as Datadog Cloud Security Management
FortiCNAPP read as Lacework FortiCNAPP
Fortinet (Lacework FortiCNAPP) read as Lacework FortiCNAPP
Fortinet (Lacework) read as Lacework FortiCNAPP
Lacework read as Lacework FortiCNAPP
Lacework (Now Fortinet) read as Lacework FortiCNAPP
Lacework (now FortiCNAPP) read as Lacework FortiCNAPP
Microsoft Defender read as Microsoft Defender for Cloud
Orca read as Orca Security
Palo Alto read as Prisma Cloud
Palo Alto (Prisma Cloud) read as Prisma Cloud
Palo Alto Networks (Prisma Cloud / Cortex Cloud) read as Prisma Cloud
Palo Alto Networks (Prisma Cloud) read as Prisma Cloud
SentinelOne read as SentinelOne Singularity Cloud Security
Sysdig read as Sysdig Secure
Tenable read as Tenable Cloud Security
Unresolved, counted raw
Arctic Wolf Managed CSPM
CloudNative
Group-IB CSPM (Unified Risk Platform)
Sonrai
Discontinued, still offered
No shut-down product was recommended here.
← Cloud hostingCNAPP →