Identity threat detection and response for small business buyers
Asked as “ITDR solution”, and as “identity threat detection tool”, on behalf of a small B2B company. 48 first choices recorded across the direct, paraphrase, budget and scale prompts, fourteen models each. Added to the November 2026 Edition.
Standing · first-choice share
77%
Clear leader
77Huntress Managed ITDR06Microsoft Defender for Identity02Entra ID P215others
77% of first choices, clear leader.
Since October 2026▼−7Since October 2026: 84% → 77%, −7 points. Inside the 11-point floor: within noise.Huntress Managed ITDR held the lead, −7 points on 84%, inside the 11-point floor.
By buyer segment
The same question asked on behalf of a different buyer. Each standing is computed within its segment; they sit side by side and are never added together.
Small business
Huntress Managed ITDR77%Clear leader▼−7Since October 2026: 84% → 77%, −7 points. Inside the 11-point floor: within noise.This pageMid-marketHuntress Managed ITDR42%Clear leader▼−13Since October 2026: 55% → 42%, −13 points. Past the 11-point floor: movement.Standing →EnterpriseMicrosoft Defender for Identity37%Contested▼−1Since October 2026: 38% → 37%, −1 point. Inside the 11-point floor: within noise.Standing →
Huntress Managed ITDR77%Clear leader▼−7Since October 2026: 84% → 77%, −7 points. Inside the 11-point floor: within noise.This pageMid-marketHuntress Managed ITDR42%Clear leader▼−13Since October 2026: 55% → 42%, −13 points. Past the 11-point floor: movement.Standing →EnterpriseMicrosoft Defender for Identity37%Contested▼−1Since October 2026: 38% → 37%, −1 point. Inside the 11-point floor: within noise.Standing →The standing
Share is the count of first choices across the direct, paraphrase, budget and scale prompts, over all fourteen models, for a small B2B company. Ordered by share.
ProductFirst-choice shareNegative rateLabelsQuadrantSince October 2026
01Huntress Managed ITDR77%2%63endorsed leader▼−7Since October 2026: 84% → 77%, −7 points. Inside the 11-point floor: within noise.84% → 77%
Huntress Managed ITDR77%2%63endorsed leader▼−7Since October 2026: 84% → 77%, −7 points. Inside the 11-point floor: within noise.84% → 77%02Microsoft Defender for Identity6%2%54accepted challenger▼−2Since October 2026: 8% → 6%, −2 points. Inside the 11-point floor: within noise.8% → 6%
03
Guardz ITDR2%9%11accepted challenger▲+2Since October 2026: 0% → 2%, +2 points. Inside the 11-point floor: within noise.0% → 2%
Guardz ITDR2%9%11accepted challenger▲+2Since October 2026: 0% → 2%, +2 points. Inside the 11-point floor: within noise.0% → 2%Show the three products at 0%, ordered by negative rate
06
Silverfort ITDR0%55%33criticized challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%
Silverfort ITDR0%55%33criticized challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%05
CrowdStrike Falcon Identity Protection0%53%32criticized challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%
CrowdStrike Falcon Identity Protection0%53%32criticized challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%04
SentinelOne Singularity Identity0%44%16criticized challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%
SentinelOne Singularity Identity0%44%16criticized challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%The floor is 11 points of share, measured: how far the models move a leader on their own when the same questions are asked twice with nothing changed. A larger change is movement; a smaller one can't be told apart from repeat variation, and both are shown. Each index measures its own floor from its own repeat, over its own categories, so the floor differs from one index to the next. Both editions asked the same fourteen models. How the floor is measured
Bars are the share of first choices, 0 to 100Every product with at least 10 labels here. Every product name links to its product page.
For buyers
Head to head
Huntress Managed ITDR vs Microsoft Defender for IdentityHuntress Managed ITDR vs CrowdStrike Falcon Identity ProtectionHuntress Managed ITDR vs Silverfort ITDR
Head-to-head pages are published for mid-market buyers, so these open on mid-market figures, not small business.All six head-to-head pages: the top four products, each against each
One product takes 77% of first choices here, so the chart would put five markers in one corner and one at the far edge. The two measurements it plots are columns in the standing above: share, and the negative label rate. Three products carry a negative rate above 25% in this category.
What they warned about
Nine of fourteen models held their first choice under the paraphrase. Claude Haiku 4.5, GPT-5.4 mini, Llama 4 Maverick, Kimi K2 and GPT-6 Luna changed. A high negative share on a product with few labels is a warning. A low share on a product with many labels is salience, not sentiment.
Silverfort ITDR55%
18 of 33 labels negative · 10 of 14 models · 7 hard negative
“Also received a high negative rate (57% negative feedback), with concerns about complexity, cost, and integration challenges for small businesses.” Mistral Small, negative prompt
CrowdStrike Falcon Identity Protection53%
17 of 32 labels negative · 9 of 14 models · 7 hard negative
“Criticized for high negative ratings (82% negative feedback in one index), with users reporting issues such as high resource consumption and limited effectiveness for smaller environments.” Mistral Small, negative prompt
CrowdStrike71%
5 of 7 labels negative · 5 of 14 models · 3 hard negative
“the SMB guidance is to avoid / be cautious about negotiated-pricing enterprise suites such as CrowdStrike Falcon Identity Protection, Silverfort ITDR and SentinelOne” Muse Glimmer 30B, negative prompt
SentinelOne Singularity Identity44%
7 of 16 labels negative · 5 of 14 models · 2 hard negative
“avoid the enterprise platforms (Silverfort, CrowdStrike, SentinelOne) that negotiate pricing, require dedicated security staff” Muse Glimmer 30B, negative prompt
What they cite
Fourteen of the fourteen models returned a source list in this edition: five return the pages they cited and nine the search results they consulted.
Sites the answers cite
77 of 84 answers in this category came back with a source list, from 14 of 14 models: citations where the model returns them, or the search results it consulted. 876 links across 148 sites, every framing counted. Ranked by the number of answers carrying the site or page. 39 of the 252 answers across every segment cited this index's own page for the category; the method page measures whether that reading tilts an answer.
vendor site · Huntress48 answers · 112 citations · 13 models
vendor site · CyberPress38 answers · 40 citations · 12 models
vendor site · G235 answers · 45 citations · 12 models
vendor site · Microsoft29 answers · 75 citations · 11 models
26 answers · 27 citations · 11 models
23 answers · 35 citations · 9 models
publisher (Gane)23 answers · 24 citations · 8 models
22 answers · 22 citations · 9 models
vendor site · Cynet19 answers · 19 citations · 8 models
18 answers · 26 citations · 8 models
17 answers · 17 citations · 10 models
vendor site · Guardz16 answers · 19 citations · 7 models
Pages the answers cite
The ten pages named in the most answers, by full address. A page here is one the models returned with a recommendation, not one the index endorses.
37 answers · 12 models
30 answers · 10 models
29 answers · 12 models
26 answers · 11 models
23 answers · 8 models
21 answers · 9 models
20 answers · 9 models
19 answers · 8 models
17 answers · 10 models
14 answers · 7 models
Search against answers
Each company's standing in the answers beside its site's footprint in Google search, one row a site: the products the models named on it with their shares, and the share they add up to; monthly searches on Google, and DataForSEO's estimate of AI search demand (modeled from search signals, directional, not a count of queries to any assistant), for the most-searched of the company's and its products' names (the name is in each row's hover text); estimated monthly organic visits to the site; and its best position in Google's top ten for “best itdr solution”, “itdr solution”, “itdr solutions”. US estimates from DataForSEO and Google's Ads Transparency Center. A small company's site, or a mid-sized company's site for its flagship, is marked company; a product on a large parent's site (Google, Microsoft) has no site figures. A column with no figures for this category is left out, and an empty cell means none were seen, not none exist. Two measurements side by side: neither is read as the cause of the other.
| Company and products | Share | Own site cited | Name searches, Google | AI search demand, est. | Organic visits | Paid search a month, est. | Google ads, last 30 days | Best Google position |
|---|---|---|---|---|---|---|---|---|
| Huntress huntress.com Huntress Managed ITDR 77% | 77% | 131 | 33,100 | 4,338 | 352,368 company | $15,522 | 120 | 2 |
| Microsoft parent site Microsoft Defender for Identity 6%, Microsoft Entra ID 2%, Microsoft Entra ID Protection 2%, Microsoft 365 2% and 2 more | 15% | 499 | 2,240,000 | 403,136 | ||||
| Guardz ITDR guardz.com | 2% | 13 | 5,351 | $744 | 12 | 5 | ||
| Microsoft Defender microsoft.com Microsoft Defender for Cloud 2% | 2% | 659 | 18,100 | 3,525 | 145,358,109 company | $12,455 | 103 | 2 |
| Entra ID P2 | 2% | |||||||
| Microsoft Entra ID Protection P2 | 2% | |||||||
| Sophos parent site Sophos ITDR 0% | 0% | 21 | 18,100 | 2,046 | ||||
| Okta okta.com Okta Identity Threat Protection 0% | 0% | 27 | 368,000 | 8,418 | 1,959,740 company | 118 | ||
| Defender for Identity | 0% | |||||||
| Cisco parent site Cisco Duo ITDR 0% | 0% | 10 | 165,000 | 48,352 |
Google's top ten for the three searches hold 15 sites; 3 of them are among the sites the models cited here (guardz.com, huntress.com, microsoft.com). The first result for “best itdr solution” is gartner.com.
How they answered
Six framings of the same buying question, each sent to every model in a fresh session with search on. One row per model, so a row shows whether it held its answer under rewording, what it named when cost was the constraint, and what it argued against. Computed from the raw judge labels.ShowHide
How they answered
Six framings of the same buying question, each sent to every model in a fresh session with search on. One row per model, so a row shows whether it held its answer under rewording, what it named when cost was the constraint, and what it argued against. Computed from the raw judge labels.
ShowHideModelDirect“What is the best ITDR solution for a small B2B company?”Paraphrase“Which identity threat detection tool would you recommend to a small business that sells to other businesses?”Comparative“What are the top ITDR solutions for a small team and how do they differ?”Budget-constrained“What is the best ITDR solution for a small company with a tight budget?”Scale-constrained“We are a 30 person company evaluating an ITDR solution. What should we look at?”Negative“Which ITDR solutions should a small business avoid or be cautious about?”
Claude Haiku 4.5no first choiceHuntress Managed ITDRChangedHuntress Managed ITDRHuntress Managed ITDRno first choicenothing named
Three alternatives
CrowdStrike Falcon Identity Protection, Defender for Identity, Okta Identity Threat ProtectionTwo alternatives
Microsoft Defender for Identity, Netwrix Threat ManagerThree alternatives
Microsoft Defender for Identity, Netwrix ITDR, Push SecurityGPT-5.4 miniHuntress Managed ITDRMicrosoft Defender for Identity / Microsoft Entra ID ProtectionChangedHuntress Managed ITDR, Microsoft Defender for Identity / Entra ID ProtectionMicrosoft 365, Microsoft Entra IDagainst: CrowdStrike, Silverfort ITDRno first choicenothing named
Two alternatives
Microsoft Defender for Identity, Okta Identity Threat ProtectionTwo alternatives
CrowdStrike Falcon Identity Protection, Proofpoint Identity Threat DefenseThree alternatives
CrowdStrike Falcon Identity Protection, SailPoint Response and Remediation, SentinelOne Singularity IdentityOne alternative
Huntress Managed ITDRGemini 3.5 FlashHuntress Managed ITDRHuntress Managed ITDRHeldHuntress Managed ITDR, Microsoft Defender for Identity / Entra ID ProtectionGuardz ITDR, Huntress Managed ITDRagainst: CrowdStrike Falcon Identity Protection, Semperis Directory Services Protector, Silverfort ITDREntra ID P2, Microsoft Defender for Identityagainst: CrowdStrike Falcon Identity Protection, SentinelOne Singularity Identity, Silverfort ITDRagainst: BeyondTrust Platform, CrowdStrike Falcon Identity Protection, CyberArk Identity Security Platform, Palo Alto Networks Cortex XDR Identity, Quest, Semperis Directory Services Protector
Six alternatives
CrowdStrike Falcon Identity Protection, Defender for Identity, Microsoft Entra ID Protection, Okta Identity Threat Protection, SentinelOne Singularity Identity, Silverfort ITDRThree alternatives
CrowdStrike Falcon Identity Protection, Microsoft Entra ID Protection, Silverfort ITDRFour alternatives
CrowdStrike Falcon Identity Protection, Guardz ITDR, Semperis Directory Services Protector, Silverfort Unified Identity ProtectionFour alternatives
Microsoft Entra ID, Okta Identity Threat Protection, PingCastle, Purple KnightTwo alternatives
Google Workspace, Okta Identity Threat ProtectionPerplexity SonarHuntress Managed ITDRHuntress Managed ITDRHeldHuntress Managed ITDRHuntress Managed ITDRagainst: Push Securityno first choicenothing named
Three alternatives
CrowdStrike Falcon Identity Protection, Microsoft Defender for Identity / Entra ID Protection, Silverfort ITDRTwo alternatives
Entra ID Protection, Microsoft Defender for IdentityFive alternatives
Entra ID Protection, Microsoft Defender for Identity, Push Security, Silverfort ITDR, Sophos ITDRFive alternatives
CrowdStrike, Guardz ITDR, Microsoft 365 E5, Microsoft Defender for Identity, Silverfort ITDRGrok 4.20Huntress Managed ITDRagainst: Delinea Identity Threat Protection, Grip Security, Gurucul, Obsidian Security, Silverfort ITDR, Tenable Identity Exposure, Vectra AI ITDRHuntress Managed ITDRHeldagainst: Cayosoft, CrowdStrike Falcon Identity Protection, Netwrix ITDR, Permiso, PingCastleHuntress Managed ITDRagainst: CrowdStrike Falcon Identity Protection, Grip Security, Silverfort ITDRHuntress Managed ITDRagainst: CrowdStrike Falcon Identity Protection, CyberArk Identity Security Platform, Silverfort ITDRHuntress Managed ITDRagainst: Bitdefender, CrowdStrike Falcon Identity Protection, Guardz ITDR, Gurucul, Petra Security, SentinelOne Singularity Identity, Silverfort ITDR, Vectra AI ITDR, inforcer
Three alternatives
CrowdStrike Falcon Identity Protection, Microsoft Defender for Identity, Netwrix ITDROne alternative
Microsoft Defender for Identity / Entra ID ProtectionThree alternatives
Guardz ITDR, Microsoft Defender for Identity, PetraThree alternatives
Blumira, Microsoft Defender for Identity, Netwrix ITDRFive alternatives
CrowdStrike Falcon Identity Protection, Delinea Identity Threat Protection, Microsoft Defender for Identity / Entra ID Protection, Semperis Directory Services Protector, Silverfort ITDRMistral SmallHuntress Managed ITDRHuntress Managed ITDRHeldHuntress Managed ITDR, Petraagainst: SentinelOne Singularity Identity, Varonis PlatformHuntress Managed ITDRno first choiceagainst: CrowdStrike Falcon Identity Protection, Silverfort ITDR, Sophos ITDR
Two alternatives
CrowdStrike Falcon Identity Protection, Microsoft Defender for IdentityTwo alternatives
CrowdStrike Falcon Identity Protection, Microsoft Defender for IdentityOne alternative
Microsoft Defender for IdentityOne alternative
Microsoft Defender for IdentityDeepSeek V4 FlashHuntress Managed ITDRagainst: CrowdStrike Falcon Identity Protection, Silverfort ITDRHuntress Managed ITDRHeldHuntress Managed ITDRagainst: CrowdStrike Falcon Identity Protection, SentinelOne Singularity Identity, Silverfort ITDRHuntress Managed ITDRMicrosoft Defender for Identityagainst: CrowdStrike Falcon Identity Protection, Microsoft Sentinel, SentinelOne Singularity Identity, Silverfort ITDR
One alternative
Microsoft Defender for IdentityThree alternatives
CrowdStrike Falcon, Microsoft Defender for Identity, Sophos ITDRTwo alternatives
Cynet, Microsoft Defender for IdentityTwo alternatives
Microsoft Defender for Identity, Microsoft Entra IDFour alternatives
Cynet, Exaforce, Expel, Huntress Managed ITDRLlama 4 MaverickHuntress Managed ITDRMicrosoft Defender for IdentityChangedHuntress Managed ITDRHuntress Managed ITDRno first choiceagainst: CrowdStrike, Silverfort ITDR
Two alternatives
Microsoft Defender for Identity, Silverfort ITDRTwo alternatives
Microsoft Defender for Identity, Silverfort ITDRTwo alternatives
Microsoft Defender for Identity, Netwrix ITDRQwen 3.7 FlashHuntress Managed ITDRagainst: CrowdStrike Falcon Identity ProtectionHuntress Managed ITDRHeldSentinelOne Singularity Identity, Tonal SecurityHuntress Managed ITDRno first choiceagainst: CrowdStrike, Huntress Managed ITDR, Silverfort ITDR
One alternative
Microsoft Defender for IdentityTwo alternatives
CrowdStrike Falcon Identity Protections, Microsoft Defender for IdentityFour alternatives
Avatier, Cyberhaven, Microsoft Defender for Identity, Okta Risk Based AuthThree alternatives
Defender for Identity, Microsoft Entra ID Protection, SentinelOne Singularity IdentityKimi K2Huntress Managed ITDRMicrosoft Defender for CloudChangedagainst: Okta Identity Threat ProtectionHuntress Managed ITDRagainst: Silverfort ITDRHuntress Managed ITDRagainst: Microsoft Defender for Identity / Entra ID Protectionno first choiceagainst: CrowdStrike Falcon Identity Protection, Delinea Identity Threat Protection, Grip Security, Silverfort ITDR, Vectra AI ITDR
Three alternatives
Cisco Duo ITDR, Microsoft Defender for Identity, Obsidian Ridge Managed ITDRTwo alternatives
JumpCloud, Microsoft 365Two alternatives
Cisco Duo ITDR, Microsoft Defender for IdentityGLM 4.7 FlashXHuntress Managed ITDRHuntress Managed ITDRHeldHuntress Managed ITDRagainst: CrowdStrike Falcon Identity ProtectionHuntress Managed ITDRHuntress Managed ITDRagainst: CrowdStrike Falcon Identity Protection
Two alternatives
Microsoft Defender for Identity, Sophos ITDROne alternative
Microsoft Defender for IdentityThree alternatives
Guardz ITDR, Microsoft Defender for Identity, Silverfort ITDRFive alternatives
Cisco Duo ITDR, Microsoft Defender for Identity, Obsidian Ridge Managed ITDR, Silverfort ITDR, Sophos ITDRTwo alternatives
Microsoft Defender for Identity, Silverfort ITDRMiniMax M2.5Huntress Managed ITDRHuntress Managed ITDRHeldHuntress Managed ITDRHuntress Managed ITDRagainst: Microsoft Defender for Identity, Wazuh, Zeekno first choiceagainst: CrowdStrike, CrowdStrike Falcon Identity Protection, Silverfort ITDR
Three alternatives
Cisco Duo ITDR, ManageEngine ADAudit Plus, Microsoft Defender for IdentityFour alternatives
Microsoft Defender for Identity, Microsoft Entra ID, Netwrix PingCastle, Varonis PlatformThree alternatives
CrowdStrike Falcon Identity Protection, Microsoft Defender for Identity, Netwrix PingCastleOne alternative
Push SecurityGPT-6 LunaHuntress Managed ITDRMicrosoft Entra ID ProtectionChangedMicrosoft Defender for Identityagainst: Semperis Directory Services ProtectorMicrosoft Entra ID Protection P2no first choiceagainst: Entra ID Protection
One alternative
Defender Suite for Business PremiumOne alternative
Microsoft Defender for IdentityFour alternatives
CrowdStrike Falcon Identity Protection, Microsoft Entra ID Protection, Okta Identity Threat Protection, Silverfort ITDROne alternative
Huntress Managed ITDRMuse Glimmer 30BHuntress Managed ITDRHuntress Managed ITDRHeldHuntress Managed ITDR, Microsoft Defender for Identityagainst: CrowdStrike Falcon Identity Protection, SentinelOne Singularity Identity, Silverfort ITDRHuntress Managed ITDRno first choiceagainst: CrowdStrike, SentinelOne Singularity Identity, Silverfort ITDR
One alternative
Microsoft Defender for IdentityTwo alternatives
Microsoft Defender for Identity, Silverfort ITDRThree alternatives
Guardz ITDR, Petra, Sophos ITDROne alternative
Microsoft Defender for IdentityBold is the first choiceAlternatives are counted; the count opens them.What the answer argued against
The record
One row per call: the version string exactly as returned, whether the model searched, sources cited, and latency.
Eighty-four rows: every prompt, every model, every answer.
| Prompt | Model | Version string | Time (UTC) | Searched | Sources | Latency |
|---|---|---|---|---|---|---|
| Direct recommendation | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 14:00 | no | 0 | 5 s |
| Direct recommendation | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 13:17 | yes | 3 | 5 s |
| Direct recommendation | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 12:18 | yes | 9 | 23 s |
| Direct recommendation | Perplexity Sonar | sonar | 2026-11-01 16:37 | yes | 10 | 4 s |
| Direct recommendation | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 19:24 | yes | 5 | 13 s |
| Direct recommendation | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 19:10 | yes | 5 | 4 s |
| Direct recommendation | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 17:28 | yes | 23 | 32 s |
| Direct recommendation | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 15:40 | yes | 5 | 2 s |
| Direct recommendation | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 13:01 | yes | 5 | 22 s |
| Direct recommendation | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 18:28 | yes | 9 | 17 s |
| Direct recommendation | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 10:11 | yes | 14 | 19 s |
| Direct recommendation | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 17:56 | yes | 15 | 33 s |
| Direct recommendation | GPT-6 Luna | gpt-6-luna | 2026-11-01 13:51 | yes | 3 | 18 s |
| Direct recommendation | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 16:48 | yes | 12 | 20 s |
| Paraphrase | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 12:19 | yes | 9 | 7 s |
| Paraphrase | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 13:34 | yes | 5 | 6 s |
| Paraphrase | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 13:00 | yes | 11 | 21 s |
| Paraphrase | Perplexity Sonar | sonar | 2026-11-01 10:43 | yes | 10 | 3 s |
| Paraphrase | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 15:21 | yes | 5 | 7 s |
| Paraphrase | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 17:29 | yes | 5 | 4 s |
| Paraphrase | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 10:49 | yes | 24 | 38 s |
| Paraphrase | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 18:00 | yes | 5 | 3 s |
| Paraphrase | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 18:05 | yes | 5 | 32 s |
| Paraphrase | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 18:12 | yes | 19 | 62 s |
| Paraphrase | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 14:32 | yes | 24 | 43 s |
| Paraphrase | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 12:56 | yes | 10 | 61 s |
| Paraphrase | GPT-6 Luna | gpt-6-luna | 2026-11-01 12:31 | yes | 3 | 12 s |
| Paraphrase | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 18:34 | yes | 12 | 16 s |
| Comparative | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 11:53 | yes | 16 | 11 s |
| Comparative | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 18:11 | yes | 5 | 7 s |
| Comparative | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 09:43 | yes | 8 | 27 s |
| Comparative | Perplexity Sonar | sonar | 2026-11-01 09:29 | yes | 10 | 5 s |
| Comparative | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 17:25 | yes | 14 | 17 s |
| Comparative | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 12:07 | yes | 5 | 6 s |
| Comparative | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 19:19 | yes | 23 | 53 s |
| Comparative | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 13:30 | yes | 5 | 2 s |
| Comparative | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 15:42 | no | 0 | 30 s |
| Comparative | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 18:36 | yes | 25 | 37 s |
| Comparative | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 19:30 | yes | 23 | 47 s |
| Comparative | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 11:12 | yes | 19 | 29 s |
| Comparative | GPT-6 Luna | gpt-6-luna | 2026-11-01 16:49 | yes | 6 | 20 s |
| Comparative | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 09:51 | yes | 14 | 26 s |
| Budget constrained | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 17:28 | yes | 18 | 8 s |
| Budget constrained | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 09:10 | yes | 3 | 5 s |
| Budget constrained | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 18:33 | yes | 7 | 19 s |
| Budget constrained | Perplexity Sonar | sonar | 2026-11-01 09:02 | yes | 10 | 4 s |
| Budget constrained | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 15:52 | yes | 5 | 8 s |
| Budget constrained | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 09:46 | yes | 5 | 6 s |
| Budget constrained | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 08:36 | yes | 23 | 18 s |
| Budget constrained | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 19:21 | yes | 5 | 2 s |
| Budget constrained | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 12:42 | yes | 14 | 39 s |
| Budget constrained | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 19:23 | yes | 13 | 33 s |
| Budget constrained | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 19:18 | yes | 11 | 22 s |
| Budget constrained | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 11:17 | yes | 13 | 41 s |
| Budget constrained | GPT-6 Luna | gpt-6-luna | 2026-11-01 17:56 | yes | 3 | 23 s |
| Budget constrained | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 09:05 | yes | 14 | 19 s |
| Scale constrained | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 09:40 | yes | 17 | 15 s |
| Scale constrained | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 11:05 | yes | 6 | 9 s |
| Scale constrained | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 18:12 | no | 0 | 17 s |
| Scale constrained | Perplexity Sonar | sonar | 2026-11-01 17:57 | yes | 10 | 8 s |
| Scale constrained | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 19:21 | yes | 13 | 16 s |
| Scale constrained | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 17:47 | no | 0 | 9 s |
| Scale constrained | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 13:38 | yes | 22 | 49 s |
| Scale constrained | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 08:51 | yes | 5 | 3 s |
| Scale constrained | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 09:03 | no | 0 | 31 s |
| Scale constrained | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 16:27 | yes | 9 | 34 s |
| Scale constrained | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 09:26 | yes | 14 | 30 s |
| Scale constrained | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 09:30 | no | 0 | 17 s |
| Scale constrained | GPT-6 Luna | gpt-6-luna | 2026-11-01 17:01 | yes | 5 | 25 s |
| Scale constrained | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 18:10 | yes | 15 | 18 s |
| Negative framing | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 14:35 | yes | 18 | 8 s |
| Negative framing | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 14:34 | yes | 5 | 7 s |
| Negative framing | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 11:06 | no | 0 | 18 s |
| Negative framing | Perplexity Sonar | sonar | 2026-11-01 15:20 | yes | 10 | 5 s |
| Negative framing | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 16:44 | yes | 20 | 21 s |
| Negative framing | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 10:47 | yes | 10 | 5 s |
| Negative framing | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 17:05 | yes | 24 | 28 s |
| Negative framing | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 17:54 | yes | 5 | 3 s |
| Negative framing | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 10:04 | yes | 5 | 40 s |
| Negative framing | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 13:38 | yes | 23 | 26 s |
| Negative framing | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 13:44 | yes | 24 | 59 s |
| Negative framing | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 15:40 | yes | 9 | 26 s |
| Negative framing | GPT-6 Luna | gpt-6-luna | 2026-11-01 19:32 | yes | 3 | 20 s |
| Negative framing | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 10:51 | yes | 22 | 27 s |
Normalization in this category
Every judgment call made between the raw labels and the numbers above, listed so it is visible and reversible.
ShowHide
Category-scoped readings
BeyondTrust read as BeyondTrust Platform
Blackpoint read as Blackpoint Cyber
Cisco Duo (Premier/Advantage) read as Cisco Duo ITDR
CrowdStrike Falcon Identity read as CrowdStrike Falcon Identity Protection
CrowdStrike Falcon Identity Threat Detection read as CrowdStrike Falcon Identity Protection
CrowdStrike Identity read as CrowdStrike Falcon Identity Protection
CrowdStrike Identity Threat Detection read as CrowdStrike Falcon Identity Protection
CyberArk read as CyberArk Identity Security Platform
Delinea read as Delinea Identity Threat Protection
Guardz read as Guardz ITDR
Huntress read as Huntress Managed ITDR
Huntress ITDR read as Huntress Managed ITDR
Netwrix read as Netwrix ITDR
Netwrix (with PingCastle) read as Netwrix ITDR
Okta read as Okta Identity Threat Protection
Okta (ThreatInsight & Identity Threat Protection) read as Okta Identity Threat Protection
Palo Alto read as Palo Alto Networks Cortex XSIAM
Proofpoint read as Proofpoint Identity Threat Defense
Semperis read as Semperis Directory Services Protector
Semperis (Purple Knight / Directory Services Protector) read as Semperis Directory Services Protector
SentinelOne read as SentinelOne Singularity Identity
SentinelOne (Singularity Identity) read as SentinelOne Singularity Identity
Silverfort read as Silverfort ITDR
Sophos read as Sophos ITDR
Varonis read as Varonis Platform
Vectra AI read as Vectra AI ITDR
Unresolved, counted raw
BloodHound Community Edition
CrowdStrike Falcon Identity Protections
CrowdStrike Identity Threat Protection
Defender Suite for Business Premium
Entra ID P2
LifeLock
Microsoft Entra ID Protection P2
Okta Risk Based Auth
Palo Alto Networks Cortex XDR Identity
Petra Security
Ridge Core
SailPoint Response and Remediation
Tonal Security
Varonis DatAlert
Wirespeed
Discontinued, still offered
No shut-down product was recommended here.