Two of fourteen models named Okta Verify first on the direct prompt; zero named Authy. Okta Verify was named by fourteen of the fourteen models and Authy by eight and Okta Verify carries 53 labels and Authy 13, so the shares are not directly comparable.
Named in two categories this edition.
Named in one category this edition.
Share is the count of first choices across the direct, paraphrase, budget and scale prompts over all fourteen models, for a mid-market B2B company; rank is within the category; every quote names the model and the prompt it came from. Both figures come from the multi-factor authentication page.
| Model | Direct | Paraphrase | Comparative | Budget-constrained | Scale-constrained | Negative |
|---|---|---|---|---|---|---|
| Claude Haiku 4.5 | ||||||
| GPT-5.4 mini | ||||||
| Gemini 3.5 Flash | ||||||
| Perplexity Sonar | ||||||
| Grok 4.20 | ||||||
| Mistral Small | ||||||
| DeepSeek V4 Flash | ||||||
| Llama 4 Maverick | ||||||
| Qwen 3.7 Flash | ||||||
| Kimi K2 | ||||||
| GLM 4.7 FlashX | ||||||
| MiniMax M2.5 | ||||||
| GPT-6 Luna | ||||||
| Muse Glimmer 30B |
Bold names in an answer are the products the judge labeled a first choice; a model naming several gives each of them that label. The full answer text for every row is in the record.
Every negative label with a quote, up to three, then the highest-weighted positives, up to three. Six of eight in this category shown.
“Avoid premium-heavy tools like Okta (can get expensive)” Grok 4.20 · budget prompt · hard negative
“Okta Verify without advanced features... These can still fall to AiTM phishing, session token theft, or prompt bombing.” Grok 4.20 · negative prompt · soft negative
“Push-based MFA (e.g., Microsoft Authenticator without number matching, Duo Push, Okta Verify) is vulnerable to” DeepSeek V4 Flash · negative prompt · soft negative
“For enterprises with broad app portfolios: Okta Adaptive MFA, OneLogin, and Microsoft Entra ID offer the most comprehensive IAM + MFA capabilities.” GLM 4.7 FlashX · comparative prompt · first choice
“the best overall approach is Microsoft Entra ID or Okta, configured to use passkeys/FIDO2 security keys as the default MFA method” GPT-5.4 mini · direct prompt · first choice
“The Best All-Rounder: Okta Identity Cloud ... Okta is generally the industry leader.” Qwen 3.7 Flash · direct prompt · first choice
Every negative label with a quote, up to three, then the highest-weighted positives, up to three. Six of eight in this category shown.
“TOTP authenticator apps – e.g., Google Authenticator, Authy. They are stronger than SMS/email, but the 6-digit codes can be phished in real time” Muse Glimmer 30B · negative prompt · soft negative
“Examples: Google Authenticator, Authy, 1Password, Microsoft Authenticator ... Key Risk: Phishing via Adversary-in-the-Middle (AitM)” Gemini 3.5 Flash · negative prompt · soft negative
“Apps like Google Authenticator, Microsoft Authenticator (in TOTP mode), or Authy generate 6-digit codes ... not phishing-resistant” DeepSeek V4 Flash · negative prompt · soft negative
“The most cost-effective option is authenticator apps like: Google Authenticator, Microsoft Authenticator, Authy” Claude Haiku 4.5 · budget prompt · first choice
“TOTP Apps: Authy, Google Authenticator, Microsoft Authenticator. Better than SMS, but lacks the phishing resistance of hardware keys.” Qwen 3.7 Flash · negative prompt · alternative
“Very good: Authenticator apps (e.g., Microsoft Authenticator, Authy, or Google Authenticator) with number matching” Grok 4.20 · negative prompt · alternative
Comparisons are drawn for the top eight products in each category, each against each. The output is the models' output; nothing here is a recommendation by the index.