Zero of fourteen models named Falco first on the direct prompt; one named Aqua Security. Both were named by all fourteen models and Falco carries 43 labels and Aqua Security 49, so the shares are not directly comparable.
Named in two categories this edition.
Named in six categories this edition.
Share is the count of first choices across the direct, paraphrase, budget and scale prompts over all fourteen models, for a mid-market B2B company; rank is within the category; every quote names the model and the prompt it came from. Both figures come from the container and kubernetes security page.
Across every category in the November 2026 Edition, Falco and Aqua Security were named in the same answer eighty-two times, of the 132 answers naming Falco and the 244 naming Aqua Security. In those answers Aqua Security took the first choice five times and Falco twenty-two.
| Model | Direct | Paraphrase | Comparative | Budget-constrained | Scale-constrained | Negative |
|---|---|---|---|---|---|---|
| Claude Haiku 4.5 | ||||||
| GPT-5.4 mini | ||||||
| Gemini 3.5 Flash | ||||||
| Perplexity Sonar | ||||||
| Grok 4.20 | ||||||
| Mistral Small | ||||||
| DeepSeek V4 Flash | ||||||
| Llama 4 Maverick | ||||||
| Qwen 3.7 Flash | ||||||
| Kimi K2 | ||||||
| GLM 4.7 FlashX | ||||||
| MiniMax M2.5 | ||||||
| GPT-6 Luna | ||||||
| Muse Glimmer 30B |
Bold names in an answer are the products the judge labeled a first choice; a model naming several gives each of them that label. The full answer text for every row is in the record.
Every negative label with a quote, up to three, then the highest-weighted positives, up to three. Four of five in this category shown.
“Falco-like detection can identify suspicious behavior, but rules need tuning and alerts still require response automation” Perplexity Sonar · negative prompt · soft negative
“I'd recommend Falco (runtime security) paired with Trivy (container image scanning) as a strong combination” GLM 4.7 FlashX · paraphrase prompt · first choice
“Trivy + Kubescape + Falco (all free, open-source) is the best container security "platform."” DeepSeek V4 Flash · budget prompt · first choice
“Open source with strong backing: Falco (CNCF), Trivy (Aqua but widely adopted)” Kimi K2 · negative prompt · first choice
Every negative label with a quote, up to three, then the highest-weighted positives, up to three. Four of five in this category shown.
“Avoid starting with Prisma Cloud, Aqua, or Sysdig” Perplexity Sonar · budget prompt · hard negative
“Aqua is a pioneer in container security, covering every layer from developer CI/CD scanning ... to real-time runtime prevention using eBPF sensors.” Gemini 3.5 Flash · comparative prompt · first choice
“two container-first platforms that are repeatedly called out as the best-fit size for mid-market: Aqua Security” Muse Glimmer 30B · direct prompt · first choice
“I'd short-list Sysdig and Aqua if you run significant K8s and need runtime protection” DeepSeek V4 Flash · scale prompt · first choice
Comparisons are drawn for the top eight products in each category, each against each. The output is the models' output; nothing here is a recommendation by the index.