Application security posture management for enterprise buyers
Asked as “ASPM platform”, and as “application security posture management tool”, on behalf of an enterprise B2B company. 50 first choices recorded across the direct, paraphrase, budget and scale prompts, fourteen models each. Added to the October 2026 Edition on October 4, 2026.
Standing · first-choice share
24%
Contested · ArmorCode 20%
24Checkmarx One ASPM20ArmorCode12Apiiro44others
24% of first choices, contested.
By buyer segment
The same question asked on behalf of a different buyer. Each standing is computed within its segment; they sit side by side and are never added together.
The standing
Share is the count of first choices across the direct, paraphrase, budget and scale prompts, over all fourteen models, for an enterprise B2B company. Ordered by share.
ProductFirst-choice shareNegative rateLabelsQuadrant
Show the one product at 0%, ordered by negative rate
Bars are the share of first choices, 0 to 100Every product with at least 10 labels here. Every product name links to its product page.
Head to headHead-to-head pages are published for mid-market buyers, so these open on mid-market figures, not enterprise.
All twenty-one head-to-head pages: the top seven products, each against each
Aikido Security vs JitAikido Security vs ArmorCodeAikido Security vs WizSnyk vs DefectDojoSnyk vs Cycode ASPMSnyk vs JitSnyk vs ArmorCodeSnyk vs WizDefectDojo vs Cycode ASPMDefectDojo vs JitDefectDojo vs ArmorCodeDefectDojo vs WizCycode ASPM vs JitCycode ASPM vs ArmorCodeCycode ASPM vs WizJit vs ArmorCodeJit vs WizArmorCode vs Wiz
Recommended versus criticized
Every product with at least 10 labels here, on both axes. The 30% line names a quadrant, not the verdict above: that one needs more than 40%.
Criticized challengerCriticized default
Negative label rate →
01
02
03
04
05
06
07
08
09
10
11
12
13Accepted challengerEndorsed leader
0%First-choice share → · lines at 30% share and 25% negative40%
Key
01Checkmarx One ASPM24%
Checkmarx One ASPM24%02ArmorCode20%
ArmorCode20%03Apiiro12%
Apiiro12%04Cycode ASPM6%
Cycode ASPM6%05DefectDojo6%
DefectDojo6%06Wiz4%
Wiz4%07Snyk4%
Snyk4%08OX Security2%
OX Security2%09Jit2%
Jit2%10Legit Security2%
Legit Security2%11Veracode Risk Manager2%
Veracode Risk Manager2%12Snyk AppRisk2%
Snyk AppRisk2%13Invicti ASPM0%
Invicti ASPM0%What they warned about
Six of fourteen models held their first choice under the paraphrase. Claude Haiku 4.5, Perplexity Sonar, Mistral Small, Llama 4 Maverick, Qwen 3.7 Flash, Kimi K2, GLM 4.7 FlashX and MiniMax M2.5 changed. A high negative share on a product with few labels is a warning. A low share on a product with many labels is salience, not sentiment.
ArmorCode18%
8 of 45 labels negative · 6 of 14 models · 2 hard negative
“Avoid platforms that claim to be ASPM but lack native code, API, or infrastructure scanning capabilities.” GLM 4.7 FlashX, negative prompt
Checkmarx One ASPM12%
6 of 49 labels negative · 6 of 14 models · 1 hard negative
“Avoid using legacy SAST tools as your sole "source of truth" for application posture.” GLM 4.7 FlashX, negative prompt
Snyk44%
8 of 18 labels negative · 5 of 14 models · 1 hard negative
“Platforms to Avoid for Predictable Costs: Snyk | Per contributing developer” Kimi K2, budget prompt
Wiz25%
5 of 20 labels negative · 4 of 14 models
“strong in features but often use pricing models that scale with the number of applications, developers, or scans, which can lead to less predictable costs” Mistral Small, budget prompt
What they cite
Fourteen of the fourteen models returned a source list in this edition: five return the pages they cited and nine the search results they consulted.
Sites the answers cite
80 of 84 answers in this category came back with a source list, from 14 of 14 models: citations where the model returns them, or the search results it consulted. 1140 links across 175 sites, every framing counted. Ranked by the number of answers carrying the site or page. None of the 252 answers across every segment cited this index's own page for the category.
vendor site · Checkmarx52 answers · 103 citations · 14 models
vendor site · OX49 answers · 55 citations · 12 models
vendor site · Cycode37 answers · 53 citations · 14 models
36 answers · 43 citations · 11 models
vendor site · Invicti34 answers · 53 citations · 13 models
34 answers · 42 citations · 13 models
vendor site · Guideflow30 answers · 30 citations · 11 models
vendor site · Orca27 answers · 33 citations · 9 models
24 answers · 30 citations · 10 models
24 answers · 24 citations · 10 models
vendor site · DefectDojo23 answers · 27 citations · 11 models
vendor site · Palo Alto Networks21 answers · 33 citations · 10 models
Pages the answers cite
The ten pages named in the most answers, by full address. A page here is one the models returned with a recommendation, not one the index endorses.
48 answers · 12 models
35 answers · 10 models
32 answers · 12 models
31 answers · 13 models
29 answers · 11 models
28 answers · 11 models
26 answers · 9 models
24 answers · 10 models
21 answers · 10 models
19 answers · 10 models
Search against answers
Each company's standing in the answers beside its site's footprint in Google search, one row a site: the products the models named on it with their shares, and the share they add up to; monthly searches on Google, and DataForSEO's estimate of AI search demand (modeled from search signals, directional, not a count of queries to any assistant), for the most-searched of the company's and its products' names (the name is in each row's hover text); estimated monthly organic visits to the site; and its best position in Google's top ten for “aspm platform”, “aspm platforms”, “best aspm platform”. US estimates from DataForSEO and Google's Ads Transparency Center. A small company's site, or a mid-sized company's site for its flagship, is marked company; a product on a large parent's site (Google, Microsoft) has no site figures. A column with no figures for this category is left out, and an empty cell means none were seen, not none exist. Two measurements side by side: neither is read as the cause of the other.
| Company and products | Share | Own site cited | Name searches, Google | AI search demand, est. | Organic visits | Paid search a month, est. | Google ads, last 30 days | Best Google position |
|---|---|---|---|---|---|---|---|---|
| Checkmarx checkmarx.com Checkmarx One ASPM 24% | 24% | 80 | 54,982 company | 61 | 4 | |||
| ArmorCode armorcode.com | 20% | 135 | 1,300 | 15 | 11,106 | 9 | ||
| Apiiro apiiro.com | 12% | 95 | 880 | 10 | 9,388 | 0 | ||
| Cycode ASPM cycode.com | 6% | 120 | 20 | 0 | 17,954 | 4 | 5 | |
| DefectDojo defectdojo.com | 6% | 78 | 880 | 9 | 603 | 1 | ||
| Snyk snyk.io Snyk 4%, Snyk AppRisk 2%, Snyk ASPM 0% | 6% | 150 | 12,100 | 581 | 61,651 | 60 | 6 | |
| Wiz wiz.io | 4% | 764 | 40,500 | 16,751 | 102,573 | $6,856 | 120 | 4 |
| Aikido aikido.dev Aikido Security 4% | 4% | 326 | 2,400 | 51 | 6,442 company | $936 | 120 | |
| OX Security ox.security | 2% | 79 | 2,400 | 72 | 5,625 | $447 | 14 | |
| Jit jit.io | 2% | 66 | 33,100 | 6,450 | 5,093 |
Google's top ten for the three searches hold 23 sites; 7 of them are among the sites the models cited here (checkmarx.com, cycode.com, expertinsights.com, gartner.com, invicti.com, orca.security, paloaltonetworks.com). The first result for “aspm platform” is gartner.com.
How they answered
Six framings of the same buying question, each sent to every model in a fresh session with search on. One row per model, so a row shows whether it held its answer under rewording, what it named when cost was the constraint, and what it argued against. Computed from the raw judge labels.ShowHide
How they answered
Six framings of the same buying question, each sent to every model in a fresh session with search on. One row per model, so a row shows whether it held its answer under rewording, what it named when cost was the constraint, and what it argued against. Computed from the raw judge labels.
ShowHideModelDirect“What is the best ASPM platform for an enterprise B2B company?”Paraphrase“Which application security posture management tool would you recommend to a large B2B company with thousands of employees?”Comparative“What are the top enterprise-grade ASPM platforms and how do they differ?”Budget-constrained“What is the best ASPM platform for a large company that needs predictable total cost across thousands of users?”Scale-constrained“We are a 5,000 person company with SSO, SOC 2 and procurement review requirements evaluating a ASPM platform. What should we look at?”Negative“Which ASPM platforms should a large enterprise avoid or be cautious about?”
Claude Haiku 4.5WizApiiro, ArmorCodeChangedno first choiceCycode ASPMno first choicenothing named
Nine alternatives
Apiiro, ArmorCode, Checkmarx One ASPM, CrowdStrike Falcon ASPM, Cycode ASPM, OX Security, Palo Alto Networks Cortex Cloud Application Security, Snyk ASPM, Veracode Risk ManagerTwo alternatives
Checkmarx One ASPM, Snyk AppRiskFive alternatives
Apiiro, ArmorCode, OX Security, Snyk, Wiz CodeTwo alternatives
Apiiro, Invicti ASPMGPT-5.4 miniCheckmarx One ASPMCheckmarx One ASPMHeldCheckmarx One ASPMOpen-ASPM projectno first choicenothing named
Three alternatives
ArmorCode, CrowdStrike Falcon ASPM, Cycode ASPMOne alternative
Palo Alto Networks Cortex Cloud ASPMFive alternatives
ArmorCode, Cycode ASPM, Invicti ASPM, Legit Security ASPM, Wiz ASPMGemini 3.5 FlashArmorCodeArmorCodeHeldArmorCodeArmorCodeagainst: Apiiro, Cycode ASPM, Legit Securityno first choiceagainst: ArmorCode, CrowdStrike Falcon Cloud Security, DefectDojo, Jit, Prisma Cloud, Snyk, Tromzo, Wiz Code
Four alternatives
Apiiro, Cycode ASPM, Legit Security, Snyk AppRiskTwo alternatives
Apiiro, Cycode ASPMFive alternatives
Apiiro, Cycode ASPM, Legit Security, OX Security, Snyk AppRiskTwo alternatives
Aikido Security, DefectDojoPerplexity SonarArmorCode, JitCheckmarx One ASPMChangedCheckmarx One ASPM, WizArmorCodeagainst: Wizno first choicenothing named
Three alternatives
Apiiro, Checkmarx One ASPM, Cycode ASPMFour alternatives
Invicti ASPM, Snyk, Veracode Risk Manager, WizFive alternatives
Apiiro, ArmorCode, Cycode ASPM, Invicti ASPM, SnykTwo alternatives
Checkmarx One ASPM, Cycode ASPMGrok 4.20Checkmarx One ASPMCheckmarx One ASPMHeldagainst: Cycode ASPM, Snykno first choiceagainst: Prisma Cloud, WizSnykagainst: Aikido Security, ArmorCode, Checkmarx One ASPM, Conviso Platform, Invicti ASPM, OX Security, Wizno first choiceagainst: ArmorCode, Backslash, Kondukto, Legit Security, Snyk
Three alternatives
ArmorCode, OX Security, Veracode Risk ManagerTwo alternatives
Veracode Risk Manager, WizThree alternatives
Cycode ASPM, Legit Security, Xygeni ASPMMistral SmallCheckmarx One ASPM, Veracode Risk ManagerCheckmarx One ASPMChangedArmorCode ASPM PlatformDefectDojoagainst: Checkmarx One ASPM, Veracode Risk Manager, Wizno first choiceagainst: Jit, OX Security
Three alternatives
Jit, Kondukto, Legit SecurityTwo alternatives
Invicti ASPM, JitFour alternatives
Apiiro ASPM Platform, Checkmarx One ASPM, DefectDojo, Invicti ASPMDeepSeek V4 FlashApiiroApiiroHeldApiiroDefectDojo, OX Securityagainst: ArmorCode, Legit Security, Phoenix Securityno first choiceagainst: Aikido Security, Checkmarx One ASPM, DefectDojo
Two alternatives
ArmorCode, OX SecurityThree alternatives
Checkmarx One ASPM, CrowdStrike Falcon ASPM, Veracode Risk ManagerSix alternatives
ArmorCode, CrowdStrike Falcon ASPM, Legit Security, OX Security, Palo Alto Networks, Phoenix SecurityOne alternative
Cycode ASPMLlama 4 Maverickno first choiceCheckmarx One ASPMChangedno first choiceno first choiceno first choicenothing named
Three alternatives
Invicti ASPM, OX Security, OpenText ASPMQwen 3.7 FlashCheckmarx One ASPM, SnykCheckmarx One ASPMChangedno first choiceWiz, Zscaleragainst: Palo Alto Networksno first choicenothing named
Three alternatives
Cycode ASPM, Rapid7 AppSec Platform, Tenable Vulnerability ManagementTwo alternatives
Jit, Veracode Risk ManagerFive alternatives
Mend, Qualys, Snyk, Sonatype, TenableKimi K2Checkmarx One ASPM, Cycode ASPMApiiroChangedCheckmarx One ASPMAikido Securityagainst: Apiiro, ArmorCode, SnykArmorCodeagainst: Snykagainst: Checkmarx One ASPM, Snyk, Veracode Risk Manager
Three alternatives
Legit Security, OX Security, Veracode Risk ManagerTwo alternatives
Checkmarx One ASPM, Cycode ASPMFive alternatives
Apiiro, ArmorCode, Cycode ASPM, Legit Security, OX SecurityOne alternative
StrobesFour alternatives
Apiiro, Cycode ASPM, OX Security, Prisma CloudGLM 4.7 FlashXCycode ASPMArmorCodeChangedApiiro, Orca SecuritySnyk AppRiskagainst: Apiiro, ArmorCodeno first choiceagainst: ArmorCode, Checkmarx One ASPM, Palo Alto Networks, Veracode Risk Manager
Three alternatives
Apiiro, ArmorCode, JitFive alternatives
Checkmarx One ASPM, Cycode ASPM, Jit, Legit Security, OX SecuritySix alternatives
ArmorCode, Checkmarx One ASPM, Cycode ASPM, Invicti ASPM, Plexicus ASPM, Snyk AppRiskTwo alternatives
Aikido Security, Checkmarx One ASPMMiniMax M2.5Legit SecurityCheckmarx One ASPMChangedno first choiceAikido Security, Strobes ASPMagainst: Checkmarx One ASPM, Invicti ASPM, Snykno first choicenothing named
Three alternatives
Checkmarx One ASPM, Jit, OpenTextTwo alternatives
Apiiro, OX SecurityOne alternative
DefectDojoGPT-6 LunaArmorCodeagainst: Falcon ASPMArmorCodeHeldArmorCodeCrowdStrike Falcon ASPMno first choiceagainst: ArmorCode, Ivanti Neurons for ASPM, Veracode VRM, Wiz
Two alternatives
Checkmarx One ASPM, Cycode ASPMTwo alternatives
Apiiro, Cycode ASPMSix alternatives
Apiiro, Checkmarx One ASPM, CrowdStrike Falcon ASPM, Cycode ASPM, Legit Security, Snyk AppRiskOne alternative
Checkmarx One ASPMMuse Glimmer 30BApiiroApiiroHeldno first choiceDefectDojo, Orca Securityagainst: Snykno first choiceagainst: Snyk AppRisk
Five alternatives
ArmorCode, Checkmarx One ASPM, Jit, Snyk AppRisk, WizThree alternatives
Checkmarx One ASPM, Jit, OpenTextOne alternative
WizBold is the first choiceAlternatives are counted; the count opens them.What the answer argued against
The record
One row per call: the version string exactly as returned, whether the model searched, sources cited, and latency.
Eighty-four rows: every prompt, every model, every answer.
| Prompt | Model | Version string | Time (UTC) | Searched | Sources | Latency |
|---|---|---|---|---|---|---|
| Direct recommendation | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-10-05 01:29 | yes | 19 | 9 s |
| Direct recommendation | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-10-05 01:53 | yes | 2 | 5 s |
| Direct recommendation | Gemini 3.5 Flash | gemini-3.5-flash | 2026-10-05 01:36 | yes | 12 | 28 s |
| Direct recommendation | Perplexity Sonar | sonar | 2026-10-05 00:32 | yes | 21 | 4 s |
| Direct recommendation | Grok 4.20 | spacexai/grok-4.1-fast-non-reasoning via vertex (asked for grok-4.20-non-reasoning; the API answered as this version) | 2026-10-05 00:45 | yes | 21 | 9 s |
| Direct recommendation | Mistral Small | mistral/mistral-small via mistral | 2026-10-05 01:47 | yes | 10 | 6 s |
| Direct recommendation | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-10-05 01:22 | yes | 20 | 31 s |
| Direct recommendation | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-10-04 22:43 | yes | 5 | 3 s |
| Direct recommendation | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-10-04 22:40 | yes | 5 | 12 s |
| Direct recommendation | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-10-05 00:37 | yes | 10 | 15 s |
| Direct recommendation | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-10-05 01:26 | yes | 24 | 43 s |
| Direct recommendation | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-10-04 23:06 | yes | 5 | 16 s |
| Direct recommendation | GPT-6 Luna | gpt-6-luna | 2026-10-05 01:38 | yes | 4 | 14 s |
| Direct recommendation | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-10-05 00:28 | yes | 23 | 27 s |
| Paraphrase | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-10-05 01:29 | yes | 16 | 10 s |
| Paraphrase | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-10-05 01:18 | yes | 3 | 6 s |
| Paraphrase | Gemini 3.5 Flash | gemini-3.5-flash | 2026-10-05 00:26 | yes | 26 | 28 s |
| Paraphrase | Perplexity Sonar | sonar | 2026-10-05 01:03 | yes | 17 | 3 s |
| Paraphrase | Grok 4.20 | spacexai/grok-4.1-fast-non-reasoning via vertex (asked for grok-4.20-non-reasoning; the API answered as this version) | 2026-10-05 00:46 | yes | 21 | 11 s |
| Paraphrase | Mistral Small | mistral/mistral-small via mistral | 2026-10-05 01:47 | yes | 5 | 5 s |
| Paraphrase | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-10-05 00:56 | yes | 23 | 47 s |
| Paraphrase | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-10-05 01:48 | yes | 5 | 3 s |
| Paraphrase | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-10-04 22:19 | yes | 24 | 100 s |
| Paraphrase | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-10-05 01:40 | yes | 23 | 53 s |
| Paraphrase | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-10-05 01:33 | yes | 10 | 35 s |
| Paraphrase | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-10-05 01:18 | yes | 7 | 21 s |
| Paraphrase | GPT-6 Luna | gpt-6-luna | 2026-10-05 01:16 | yes | 3 | 22 s |
| Paraphrase | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-10-05 01:45 | yes | 14 | 29 s |
| Comparative | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-10-04 23:03 | yes | 14 | 11 s |
| Comparative | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-10-05 01:25 | yes | 8 | 10 s |
| Comparative | Gemini 3.5 Flash | gemini-3.5-flash | 2026-10-04 22:19 | yes | 11 | 34 s |
| Comparative | Perplexity Sonar | sonar | 2026-10-05 00:55 | yes | 20 | 4 s |
| Comparative | Grok 4.20 | spacexai/grok-4.1-fast-non-reasoning via vertex (asked for grok-4.20-non-reasoning; the API answered as this version) | 2026-10-05 00:33 | yes | 21 | 14 s |
| Comparative | Mistral Small | mistral/mistral-small via mistral | 2026-10-04 23:25 | yes | 25 | 13 s |
| Comparative | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-10-05 01:50 | yes | 20 | 52 s |
| Comparative | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-10-05 00:52 | yes | 5 | 3 s |
| Comparative | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-10-05 01:34 | no | 0 | 30 s |
| Comparative | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-10-05 00:56 | yes | 23 | 29 s |
| Comparative | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-10-05 00:01 | yes | 21 | 20 s |
| Comparative | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-10-05 01:14 | yes | 13 | 24 s |
| Comparative | GPT-6 Luna | gpt-6-luna | 2026-10-05 01:19 | yes | 8 | 31 s |
| Comparative | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-10-05 01:22 | yes | 22 | 38 s |
| Budget constrained | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-10-05 01:05 | yes | 10 | 9 s |
| Budget constrained | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-10-05 01:28 | yes | 1 | 7 s |
| Budget constrained | Gemini 3.5 Flash | gemini-3.5-flash | 2026-10-05 00:20 | yes | 23 | 27 s |
| Budget constrained | Perplexity Sonar | sonar | 2026-10-04 23:44 | yes | 17 | 3 s |
| Budget constrained | Grok 4.20 | spacexai/grok-4.1-fast-non-reasoning via vertex (asked for grok-4.20-non-reasoning; the API answered as this version) | 2026-10-04 23:16 | yes | 14 | 13 s |
| Budget constrained | Mistral Small | mistral/mistral-small via mistral | 2026-10-05 00:44 | yes | 10 | 5 s |
| Budget constrained | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-10-04 22:43 | yes | 24 | 29 s |
| Budget constrained | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-10-04 23:19 | yes | 5 | 2 s |
| Budget constrained | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-10-05 00:54 | yes | 15 | 70 s |
| Budget constrained | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-10-05 00:26 | yes | 23 | 27 s |
| Budget constrained | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-10-05 01:20 | yes | 22 | 43 s |
| Budget constrained | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-10-05 01:43 | yes | 17 | 38 s |
| Budget constrained | GPT-6 Luna | gpt-6-luna | 2026-10-04 22:11 | yes | 4 | 15 s |
| Budget constrained | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-10-05 01:50 | yes | 23 | 35 s |
| Scale constrained | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-10-05 01:26 | yes | 19 | 15 s |
| Scale constrained | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-10-05 01:01 | yes | 6 | 8 s |
| Scale constrained | Gemini 3.5 Flash | gemini-3.5-flash | 2026-10-04 22:27 | no | 0 | 17 s |
| Scale constrained | Perplexity Sonar | sonar | 2026-10-05 00:17 | yes | 11 | 7 s |
| Scale constrained | Grok 4.20 | spacexai/grok-4.1-fast-non-reasoning via vertex (asked for grok-4.20-non-reasoning; the API answered as this version) | 2026-10-05 00:07 | yes | 18 | 11 s |
| Scale constrained | Mistral Small | mistral/mistral-small via mistral | 2026-10-05 01:19 | no | 0 | 9 s |
| Scale constrained | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-10-05 01:19 | yes | 20 | 56 s |
| Scale constrained | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-10-04 22:12 | yes | 5 | 3 s |
| Scale constrained | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-10-05 01:46 | no | 0 | 30 s |
| Scale constrained | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-10-04 23:37 | yes | 23 | 34 s |
| Scale constrained | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-10-05 01:46 | yes | 12 | 30 s |
| Scale constrained | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-10-04 23:40 | yes | 14 | 23 s |
| Scale constrained | GPT-6 Luna | gpt-6-luna | 2026-10-04 23:48 | yes | 3 | 22 s |
| Scale constrained | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-10-04 23:57 | yes | 14 | 19 s |
| Negative framing | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-10-05 01:55 | yes | 14 | 9 s |
| Negative framing | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-10-04 22:41 | yes | 5 | 8 s |
| Negative framing | Gemini 3.5 Flash | gemini-3.5-flash | 2026-10-05 00:06 | yes | 13 | 38 s |
| Negative framing | Perplexity Sonar | sonar | 2026-10-05 00:42 | yes | 19 | 3 s |
| Negative framing | Grok 4.20 | spacexai/grok-4.1-fast-non-reasoning via vertex (asked for grok-4.20-non-reasoning; the API answered as this version) | 2026-10-05 01:27 | yes | 20 | 11 s |
| Negative framing | Mistral Small | mistral/mistral-small via mistral | 2026-10-04 23:22 | yes | 14 | 10 s |
| Negative framing | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-10-05 00:55 | yes | 24 | 61 s |
| Negative framing | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-10-05 01:52 | yes | 5 | 2 s |
| Negative framing | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-10-04 23:36 | yes | 13 | 28 s |
| Negative framing | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-10-05 01:29 | yes | 18 | 42 s |
| Negative framing | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-10-04 23:12 | yes | 18 | 93 s |
| Negative framing | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-10-05 00:38 | yes | 13 | 25 s |
| Negative framing | GPT-6 Luna | gpt-6-luna | 2026-10-05 01:21 | yes | 2 | 20 s |
| Negative framing | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-10-05 00:59 | yes | 20 | 28 s |
Normalization in this category
Every judgment call made between the raw labels and the numbers above, listed so it is visible and reversible.
ShowHide
Category-scoped readings
Aikido read as Aikido Security
Checkmarx read as Checkmarx One ASPM
Checkmarx (Checkmarx One) read as Checkmarx One ASPM
Checkmarx ASPM read as Checkmarx One ASPM
Checkmarx One read as Checkmarx One ASPM
CrowdStrike Falcon read as CrowdStrike Falcon Cloud Security
Cycode read as Cycode ASPM
Cycode Complete ASPM read as Cycode ASPM
Invicti read as Invicti ASPM
Invicti (formerly Netsparker) read as Invicti ASPM
Jit.io read as Jit
Veracode read as Veracode Risk Manager
Xygeni read as Xygeni ASPM
Unresolved, counted raw
Apiiro ASPM Platform
ArmorCode ASPM Platform
Falcon ASPM
Open-ASPM project
OpenText ASPM
Palo Alto Networks Cortex Cloud ASPM
Palo Alto Networks Cortex Cloud Application Security
Palo Alto Networks Prisma Cloud ASPM
Palo Alto Prisma Cloud ASPM
Snyk Enso
Synopsys' Software Risk Manager
Veracode VRM
Discontinued, still offered
No shut-down product was recommended here.