Non-human identity management
Asked as “non-human identity management platform”, and as “machine identity and service account security tool”, on behalf of a mid-market B2B company. 50 first choices recorded across the direct, paraphrase, budget and scale prompts, fourteen models each. Added to the November 2026 Edition.
Standing · first-choice share
22%
Contested · Akeyless Identity Security Platform 12%
22JumpCloud12Akeyless Identity Security Platform10Aembit56others
22% of first choices, contested.
Since October 2026▲+8Since October 2026: 14% → 22%, +8 points. Inside the 11-point floor: within noise.JumpCloud held the lead, +8 points on 14%, inside the 11-point floor.
By buyer segment
The same question asked on behalf of a different buyer. Each standing is computed within its segment; they sit side by side and are never added together.
Small business
JumpCloud20%Contested=heldSince October 2026: 20% → 20%, ±0 points. Inside the 11-point floor: within noise.Standing →Mid-marketJumpCloud22%Contested▲+8Since October 2026: 14% → 22%, +8 points. Inside the 11-point floor: within noise.This pageEnterprise
CyberArk Identity Security Platform20%Contested=heldSince October 2026: 20% → 20%, ±0 points. Inside the 11-point floor: within noise.Standing →
JumpCloud20%Contested=heldSince October 2026: 20% → 20%, ±0 points. Inside the 11-point floor: within noise.Standing →Mid-marketJumpCloud22%Contested▲+8Since October 2026: 14% → 22%, +8 points. Inside the 11-point floor: within noise.This pageEnterpriseCyberArk Identity Security Platform20%Contested=heldSince October 2026: 20% → 20%, ±0 points. Inside the 11-point floor: within noise.Standing →The standing
Share is the count of first choices across the direct, paraphrase, budget and scale prompts, over all fourteen models, for a mid-market B2B company. Ordered by share.
ProductFirst-choice shareNegative rateLabelsQuadrantSince October 2026
01JumpCloud22%4%24accepted challenger▲+8Since October 2026: 14% → 22%, +8 points. Inside the 11-point floor: within noise.14% → 22%
JumpCloud22%4%24accepted challenger▲+8Since October 2026: 14% → 22%, +8 points. Inside the 11-point floor: within noise.14% → 22%02Akeyless Identity Security Platform12%9%47accepted challenger▲+5Since October 2026: 7% → 12%, +5 points. Inside the 11-point floor: within noise.7% → 12%
03
Aembit10%6%35accepted challenger▲+5Since October 2026: 5% → 10%, +5 points. Inside the 11-point floor: within noise.5% → 10%
Aembit10%6%35accepted challenger▲+5Since October 2026: 5% → 10%, +5 points. Inside the 11-point floor: within noise.5% → 10%04
Oasis Security6%22%32accepted challenger▲+1Since October 2026: 5% → 6%, +1 point. Inside the 11-point floor: within noise.5% → 6%
Oasis Security6%22%32accepted challenger▲+1Since October 2026: 5% → 6%, +1 point. Inside the 11-point floor: within noise.5% → 6%05
HashiCorp Vault6%39%41criticized challenger▼−1Since October 2026: 7% → 6%, −1 point. Inside the 11-point floor: within noise.7% → 6%
HashiCorp Vault6%39%41criticized challenger▼−1Since October 2026: 7% → 6%, −1 point. Inside the 11-point floor: within noise.7% → 6%06
GitGuardian NHI Governance4%5%21accepted challenger▼−5Since October 2026: 9% → 4%, −5 points. Inside the 11-point floor: within noise.9% → 4%
GitGuardian NHI Governance4%5%21accepted challenger▼−5Since October 2026: 9% → 4%, −5 points. Inside the 11-point floor: within noise.9% → 4%07
SailPoint Machine Identity Security4%50%16criticized challenger▲+2Since October 2026: 2% → 4%, +2 points. Inside the 11-point floor: within noise.2% → 4%
SailPoint Machine Identity Security4%50%16criticized challenger▲+2Since October 2026: 2% → 4%, +2 points. Inside the 11-point floor: within noise.2% → 4%08
Token Security2%12%17accepted challenger▼−3Since October 2026: 5% → 2%, −3 points. Inside the 11-point floor: within noise.5% → 2%
Token Security2%12%17accepted challenger▼−3Since October 2026: 5% → 2%, −3 points. Inside the 11-point floor: within noise.5% → 2%09
Astrix Security2%30%37criticized challenger▲+2Since October 2026: 0% → 2%, +2 points. Inside the 11-point floor: within noise.0% → 2%
Astrix Security2%30%37criticized challenger▲+2Since October 2026: 0% → 2%, +2 points. Inside the 11-point floor: within noise.0% → 2%10
Delinea Secret Server2%18%11accepted challenger▼−5Since October 2026: 7% → 2%, −5 points. Inside the 11-point floor: within noise.7% → 2%
Delinea Secret Server2%18%11accepted challenger▼−5Since October 2026: 7% → 2%, −5 points. Inside the 11-point floor: within noise.7% → 2%Show the eight products at 0%, ordered by negative rate
18
Venafi0%45%11criticized challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%
Venafi0%45%11criticized challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%17
Okta0%40%25criticized challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%
Okta0%40%25criticized challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%15CyberArk Identity Security Platform0%32%31criticized challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%
CyberArk Identity Security Platform0%32%31criticized challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%16
Microsoft Entra ID0%25%24criticized challenger▼−2Since October 2026: 2% → 0%, −2 points. Inside the 11-point floor: within noise.2% → 0%
Microsoft Entra ID0%25%24criticized challenger▼−2Since October 2026: 2% → 0%, −2 points. Inside the 11-point floor: within noise.2% → 0%11
Entro Security0%22%37accepted challenger▼−9Since October 2026: 9% → 0%, −9 points. Inside the 11-point floor: within noise.9% → 0%
Entro Security0%22%37accepted challenger▼−9Since October 2026: 9% → 0%, −9 points. Inside the 11-point floor: within noise.9% → 0%14Defakto0%8%13accepted challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%
13
One Identity0%6%16accepted challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%
One Identity0%6%16accepted challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%12
Saviynt Identity Cloud0%6%18accepted challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%
Saviynt Identity Cloud0%6%18accepted challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%The floor is 11 points of share, measured: how far the models move a leader on their own when the same questions are asked twice with nothing changed. A larger change is movement; a smaller one can't be told apart from repeat variation, and both are shown. Each index measures its own floor from its own repeat, over its own categories, so the floor differs from one index to the next. Both editions asked the same fourteen models. How the floor is measured
Bars are the share of first choices, 0 to 100Every product with at least 10 labels here. Every product name links to its product page.
For buyers
Head to head
All twenty-eight head-to-head pages: the top eight products, each against each
JumpCloud vs HashiCorp VaultJumpCloud vs GitGuardian NHI GovernanceJumpCloud vs SailPoint Machine Identity SecurityJumpCloud vs Token SecurityAkeyless Identity Security Platform vs AembitAkeyless Identity Security Platform vs Oasis SecurityAkeyless Identity Security Platform vs HashiCorp VaultAkeyless Identity Security Platform vs GitGuardian NHI GovernanceAkeyless Identity Security Platform vs SailPoint Machine Identity SecurityAkeyless Identity Security Platform vs Token SecurityAembit vs Oasis SecurityAembit vs HashiCorp VaultAembit vs GitGuardian NHI GovernanceAembit vs SailPoint Machine Identity SecurityAembit vs Token SecurityOasis Security vs HashiCorp VaultOasis Security vs GitGuardian NHI GovernanceOasis Security vs SailPoint Machine Identity SecurityOasis Security vs Token SecurityHashiCorp Vault vs GitGuardian NHI GovernanceHashiCorp Vault vs SailPoint Machine Identity SecurityHashiCorp Vault vs Token SecurityGitGuardian NHI Governance vs SailPoint Machine Identity SecurityGitGuardian NHI Governance vs Token SecuritySailPoint Machine Identity Security vs Token Security
Recommended versus criticized
Every product with at least 10 labels here, on both axes. The 30% line names a quadrant, not the verdict above: that one needs more than 40%.
Criticized challengerCriticized default
Negative label rate →
01A02
0304050607080910111213D14
15161718Accepted challengerEndorsed leader
0%First-choice share → · lines at 30% share and 25% negative40%
Key
01JumpCloud22%
JumpCloud22%02Akeyless Identity Security Platform12%
03Aembit10%
Aembit10%04Oasis Security6%
Oasis Security6%05HashiCorp Vault6%
HashiCorp Vault6%06GitGuardian NHI Governance4%
GitGuardian NHI Governance4%07SailPoint Machine Identity Security4%
SailPoint Machine Identity Security4%08Token Security2%
Token Security2%09Astrix Security2%
Astrix Security2%10Delinea Secret Server2%
Delinea Secret Server2%11Entro Security0%
Entro Security0%12Saviynt Identity Cloud0%
Saviynt Identity Cloud0%13One Identity0%
One Identity0%14Defakto0%
15CyberArk Identity Security Platform0%
CyberArk Identity Security Platform0%16Microsoft Entra ID0%
Microsoft Entra ID0%17Okta0%
Okta0%18Venafi0%
Venafi0%What they warned about
Two of fourteen models held their first choice under the paraphrase. Claude Haiku 4.5, GPT-5.4 mini, Gemini 3.5 Flash, Perplexity Sonar, Grok 4.20, Mistral Small, Llama 4 Maverick, Qwen 3.7 Flash, Kimi K2, GLM 4.7 FlashX, MiniMax M2.5 and GPT-6 Luna changed. A high negative share on a product with few labels is a warning. A low share on a product with many labels is salience, not sentiment.
HashiCorp Vault39%
16 of 41 labels negative · 10 of 14 models · 1 hard negative
“you may want to be cautious about or avoid using HashiCorp Vault, SailPoint, Okta, and AWS Secrets Manager” Llama 4 Maverick, negative prompt
Astrix Security30%
11 of 37 labels negative · 9 of 14 models · 3 hard negative
“Avoid starting with Astrix, Oasis, Entro, or similar dedicated NHI platforms on a tight budget” Perplexity Sonar, budget prompt
Okta40%
10 of 25 labels negative · 8 of 14 models · 2 hard negative
“you may want to be cautious about or avoid using HashiCorp Vault, SailPoint, Okta, and AWS Secrets Manager” Llama 4 Maverick, negative prompt
CyberArk Identity Security Platform32%
10 of 31 labels negative · 8 of 14 models · 1 hard negative
“Avoid commercial platforms like Astrix, Oasis, Entro, CyberArk/Venafi, or Keyfactor” Kimi K2, budget prompt
What they cite
Fourteen of the fourteen models returned a source list in this edition: five return the pages they cited and nine the search results they consulted.
Sites the answers cite
77 of 84 answers in this category came back with a source list, from 14 of 14 models: citations where the model returns them, or the search results it consulted. 931 links across 245 sites, every framing counted. Ranked by the number of answers carrying the site or page. 73 of the 252 answers across every segment cited this index's own page for the category; the method page measures whether that reading tilts an answer.
36 answers · 49 citations · 11 models
vendor site · One Identity36 answers · 40 citations · 11 models
25 answers · 32 citations · 10 models
24 answers · 25 citations · 8 models
vendor site · Akeyless20 answers · 34 citations · 9 models
publisher (Gane)19 answers · 29 citations · 8 models
19 answers · 21 citations · 8 models
16 answers · 20 citations · 9 models
16 answers · 20 citations · 7 models
vendor site · SourceForge16 answers · 18 citations · 8 models
vendor site · G213 answers · 14 citations · 6 models
vendor site · Aembit12 answers · 23 citations · 8 models
Pages the answers cite
The ten pages named in the most answers, by full address. A page here is one the models returned with a recommendation, not one the index endorses.
35 answers · 11 models
25 answers · 10 models
24 answers · 8 models
20 answers · 8 models
17 answers · 8 models
12 answers · 8 models
11 answers · 8 models
11 answers · 6 models
11 answers · 9 models
10 answers · 5 models
Search against answers
Each company's standing in the answers beside its site's footprint in Google search, one row a site: the products the models named on it with their shares, and the share they add up to; monthly searches on Google, and DataForSEO's estimate of AI search demand (modeled from search signals, directional, not a count of queries to any assistant), for the most-searched of the company's and its products' names (the name is in each row's hover text); estimated monthly organic visits to the site; and its best position in Google's top ten for “best non-human identity management platform”, “non-human identity management platforms”. US estimates from DataForSEO and Google's Ads Transparency Center. A small company's site, or a mid-sized company's site for its flagship, is marked company; a product on a large parent's site (Google, Microsoft) has no site figures. A column with no figures for this category is left out, and an empty cell means none were seen, not none exist. Two measurements side by side: neither is read as the cause of the other.
| Company and products | Share | Own site cited | Name searches, Google | AI search demand, est. | Organic visits | Paid search a month, est. | Google ads, last 30 days | Best Google position |
|---|---|---|---|---|---|---|---|---|
| JumpCloud jumpcloud.com | 22% | 365 | 12,100 | 244 | 108,479 | $8,612 | 80 | |
| Akeyless Identity Security Platform akeyless.io | 12% | 126 | 3,357 | $916 | 24 | 5 | ||
| Aembit aembit.io | 10% | 94 | 590 | 4 | 3,239 | 0 | ||
| Oasis Security oasis.security | 6% | 80 | 2,400 | 53 | 4,117 | 11 | 3 | |
| Cakewalk cakewalk.security | 6% | 12 | ||||||
| HashiCorp Vault hashicorp.com | 6% | 400 | 5,400 | 317 | 173,934 | $26 | 29 | |
| GitGuardian NHI Governance gitguardian.com | 4% | 59 | 0 | 13,653 | 31 | 9 | ||
| Doppler doppler.com | 4% | 159 | 90,500 | 11,875 | 2,255 | 12 | ||
| Keycloak keycloak.org | 4% | 49 | 12,100 | 589 | 8,582 | |||
| SailPoint sailpoint.com SailPoint Machine Identity Security 4% | 4% | 61 | 22,200 | 1,049 | 58,881 company | 46 |
Google's top ten for the two searches hold 18 sites; 2 of them are among the sites the models cited here (akeyless.io, oneidentity.com). The first result for “best non-human identity management platform” is saviynt.com.
How they answered
Six framings of the same buying question, each sent to every model in a fresh session with search on. One row per model, so a row shows whether it held its answer under rewording, what it named when cost was the constraint, and what it argued against. Computed from the raw judge labels.ShowHide
How they answered
Six framings of the same buying question, each sent to every model in a fresh session with search on. One row per model, so a row shows whether it held its answer under rewording, what it named when cost was the constraint, and what it argued against. Computed from the raw judge labels.
ShowHideModelDirect“What is the best non-human identity management platform for a mid-market B2B company?”Paraphrase“Which machine identity and service account security tool would you recommend to a mid-sized B2B company?”Comparative“What are the top non-human identity management platforms and how do they differ?”Budget-constrained“What is the best non-human identity management platform for a company with a limited budget?”Scale-constrained“We are a 500 person company evaluating a non-human identity management platform. What should we look at?”Negative“Which non-human identity management platforms should I avoid or be cautious about?”
Claude Haiku 4.5JumpCloudHashiCorp VaultChangedagainst: CyberArk Identity Security Platformno first choiceHashiCorp Vaultno first choiceagainst: Microsoft Entra ID, Okta
Three alternatives
Entro Security, Natoma, Oasis SecurityOne alternative
Delinea Secret ServerFive alternatives
AD360, AWS IAM Access Analyzer, Entra ID workload identity federation, GCP service account hygiene tooling, JumpCloudGPT-5.4 miniOasis SecurityAkeyless Identity Security PlatformChangedagainst: Microsoft Entra IDno first choiceAWS-native identity controls, JumpCloudagainst: Entro Security, SailPoint Machine Identity Security, Venafino first choicenothing named
Four alternatives
Aembit, Rig, SailPoint Machine Identity Security, VezaTwo alternatives
CyberArk Identity Security Platform, Token SecurityThirteen alternatives
Akeyless Identity Security Platform, BeyondTrust, CyberArk Identity Security Platform, Cyera, Delinea Secret Server, HashiCorp Vault, Microsoft Entra ID, Okta, Oleria, One Identity, Saviynt Identity Cloud, StrongDM, TeleportOne alternative
Akeyless Identity Security PlatformGemini 3.5 FlashOasis Securityagainst: HashiCorp VaultAkeyless Vaultless PlatformChangedagainst: CyberArk Identity Security PlatformOasis SecurityInfisicalagainst: Astrix Security, Entro Security, Oasis Securityno first choiceagainst: AWS Secrets Manager, Azure Key Vault, Google Secret Manager, HashiCorp Vault
Three alternatives
Aembit, Akeyless Identity Security Platform, Entro SecurityFive alternatives
Aembit, Delinea Secret Server, GitGuardian NHI Governance, HashiCorp Vault, InfisicalSeven alternatives
Aembit, Akeyless Identity Security Platform, Astrix Security, CyberArk Identity Security Platform, Entro Security, GitGuardian NHI Governance, HashiCorp VaultThree alternatives
Bitwarden Secrets Manager, GitGuardian NHI Governance, HashiCorp VaultFour alternatives
Aembit, Astrix Security, Entro Security, Oasis SecurityPerplexity SonarJumpCloudagainst: SailPoint Machine Identity SecuritySailPoint Machine Identity SecurityChangedCyberArk Identity Security Platform, Microsoft Entra ID, Saviynt Identity CloudAembitagainst: Astrix Security, Entro Security, Oasis Securityno first choiceagainst: Akeyless Identity Security Platform, Astrix Security, CyberArk Identity Security Platform, Defakto, Entro Security, HashiCorp Vault, Microsoft, Microsoft Entra ID, Oasis Security, Okta, SailPoint Machine Identity Security, Saviynt Identity Cloud
Six alternatives
Aembit, Astrix Security, Defakto, Entro Security, Microsoft Entra ID, OktaThree alternatives
CyberArk Identity Security Platform, HashiCorp Vault, JumpCloudEight alternatives
Aembit, Akeyless Identity Security Platform, Astrix Security, Clutch, Defakto, Entro Security, GitGuardian NHI Governance, TeleportOne alternative
JumpCloudGrok 4.20AembitAkeyless Identity Security PlatformChangedagainst: CyberArk Identity Security Platform, Delinea Secret Server, HashiCorp Vaultno first choiceKeycloakagainst: Okta, Ping Identityno first choiceagainst: Astrix Security, Clutch Security, Entro Security, GitGuardian NHI Governance, HashiCorp Vault, JumpCloud, Keycard, Microsoft Entra ID, Oasis Security, Okta, SailPoint Machine Identity Security, Token Security, Venafi
Three alternatives
Astrix Security, Entro Security, Oasis SecurityThree alternatives
Entro Security, GitGuardian NHI Governance, JumpCloudThree alternatives
Authentik, Ory, ZitadelFive alternatives
Astrix Security, CyberArk Identity Security Platform, Microsoft Entra ID, One Identity, Saviynt Identity CloudMistral SmallCakewalk, JumpCloudAkeyless Identity Security PlatformChangedagainst: HashiCorp Vault, Venafino first choiceGitGuardian NHI Governance, JumpCloudagainst: Aembit, Akeyless Identity Security Platformno first choiceagainst: Astrix Security, Delinea Secret Server, HashiCorp Vault, Oasis Security, Okta, SailPoint Machine Identity Security
Two alternatives
Akeyless Identity Security Platform, DefaktoDeepSeek V4 FlashJumpCloudagainst: Astrix SecurityJumpCloudHeldagainst: HashiCorp Vaultno first choiceGitGuardian NHI GovernanceAembit, Astrix Security, Oasis Securityagainst: CyberArk Identity Security Platformagainst: Aembit, Akeyless Identity Security Platform, Astrix Security, Clutch Security, CyberArk Conjur, CyberArk Identity Security Platform, Entro Security, ForgeRock, HashiCorp Vault, Okta, OneLogin, Token Security
Four alternatives
Aembit, Akeyless Identity Security Platform, Clutch Security, NatomaThree alternatives
Akeyless Identity Security Platform, Entro Security, GitGuardian NHI GovernanceNine alternatives
Aembit, Astrix Security, CyberArk Identity Security Platform, Entro Security, Exabeam, Microsoft Entra ID, Oasis Security, Okta, Token SecurityThree alternatives
Akeyless Identity Security Platform, HashiCorp Vault, JumpCloudLlama 4 MaverickCakewalkSailPoint Machine Identity SecurityChangedCyberArk Identity Security Platform, Microsoft, Saviynt Identity Cloudno first choiceno first choiceagainst: AWS Secrets Manager, HashiCorp Vault, Okta, SailPoint Machine Identity Security
Three alternatives
Identity Confluence, JumpCloud, Saviynt Identity CloudQwen 3.7 FlashAkeyless Identity Security Platform, Cakewalkagainst: HashiCorp VaultHashiCorp VaultChangedCyera IdentityDopplerno first choiceagainst: CyberArk Identity Security Platform, Microsoft Entra ID, Okta, Ping Identity, SailPoint Machine Identity Securityagainst: AWS Secrets Manager, Azure Key Vault, CyberArk Identity Security Platform, HashiCorp Vault
Two alternatives
Astrix Security, JumpCloudThree alternatives
Akeyless Identity Security Platform, CyberArk Conjur, InfisicalSix alternatives
Aembit, Akeyless Identity Security Platform, Astrix Security, Defakto, One Identity, Token SecurityFour alternatives
Akeyless Identity Security Platform, Bitwarden, HashiCorp Vault, Microsoft Entra IDThree alternatives
Delinea Secret Server, HashiCorp Vault, PITS SolutionsKimi K2Aembitagainst: Auth0/OktaAkeyless Identity Security PlatformChangedagainst: CyberArk Conjur, SailPoint Machine Identity Security, VenafiCyberArk Identity Security PlatformNomyragainst: Astrix Security, CyberArk Identity Security Platform, Entro Security, HashiCorp Vault, Keyfactor, Oasis Security, Venafino first choiceagainst: CyberArk Conjur, HashiCorp Vault
Four alternatives
Clutch Security, Entro Security, SSOJet, WorkOSOne alternative
HashiCorp VaultFour alternatives
Akeyless Identity Security Platform, Astrix Security, BeyondTrust, Delinea Secret ServerThree alternatives
Infisical, OpenZiti, Smallstep Certificate ManagerFour alternatives
Aembit, Akeyless Identity Security Platform, CyberArk Identity Security Platform, Saviynt Identity CloudGLM 4.7 FlashXAembitZluriChangedagainst: CyberArk Identity Security PlatformOasis SecurityCasdoor, Keycloakagainst: Akeyless Identity Security Platform, Astrix Security, Okta, One Identityno first choiceagainst: Auth0, Microsoft Entra ID, Okta
Three alternatives
Defakto, One Identity, Saviynt Identity CloudOne alternative
Akeyless Identity Security PlatformEight alternatives
Aembit, Akeyless Identity Security Platform, Astrix Security, Entro Security, HashiCorp Vault, Microsoft Entra Privileged Identity Management, Natoma, One IdentitySeven alternatives
APIKeyManager, Auth0, CrowdStrike Falcon Next-Gen Identity, HashiCorp Vault CE, Infisical, ManageEngine ADSelfService Plus, UnkeyMiniMax M2.5JumpCloudno first choiceChangedno first choiceAkeyless Identity Security Platform, JumpCloudno first choiceagainst: BeyondTrust, HashiCorp Vault
Four alternatives
Cakewalk, Defakto, Entro Security, Identity ConfluenceTwo alternatives
Entro Security, Microsoft Entra IDGPT-6 LunaToken SecurityDelinea Secret ServerChangedMicrosoft Entra Workload ID, Saviynt Identity Cloudagainst: Astrix Security, HashiCorp VaultOpenBaono first choicenothing named
One alternative
AembitOne alternative
Entro SecurityFour alternatives
Aembit, Cyera Identity, Palo Alto Networks’ Idira, SailPoint with EntroTwo alternatives
AWS IAM Roles, InfisicalMuse Glimmer 30BJumpCloudJumpCloudHeldno first choiceDoppler, SPIFFE / SPIREno first choiceagainst: Astrix Security, Entro Security, Oasis Security, Permiso
Three alternatives
Cakewalk, Entro Security, GitGuardian NHI GovernanceFour alternatives
CyberArk Venafi, Entro Security, GitGuardian NHI Governance, Microsoft Entra Workload IDFour alternatives
AWS IAM Roles for Service Accounts, Azure Managed Identities, GCP Workload Identity, HashiCorp VaultBold is the first choiceAlternatives are counted; the count opens them.What the answer argued against
The record
One row per call: the version string exactly as returned, whether the model searched, sources cited, and latency.
Eighty-four rows: every prompt, every model, every answer.
| Prompt | Model | Version string | Time (UTC) | Searched | Sources | Latency |
|---|---|---|---|---|---|---|
| Direct recommendation | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 18:55 | yes | 17 | 9 s |
| Direct recommendation | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 09:52 | yes | 4 | 4 s |
| Direct recommendation | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 14:34 | yes | 6 | 21 s |
| Direct recommendation | Perplexity Sonar | sonar | 2026-11-01 15:27 | yes | 10 | 4 s |
| Direct recommendation | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 17:55 | yes | 14 | 11 s |
| Direct recommendation | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 11:24 | yes | 5 | 4 s |
| Direct recommendation | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 18:26 | yes | 22 | 46 s |
| Direct recommendation | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 09:50 | yes | 5 | 3 s |
| Direct recommendation | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 08:59 | yes | 10 | 34 s |
| Direct recommendation | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 10:37 | yes | 20 | 28 s |
| Direct recommendation | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 14:38 | yes | 25 | 19 s |
| Direct recommendation | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 10:23 | yes | 5 | 25 s |
| Direct recommendation | GPT-6 Luna | gpt-6-luna | 2026-11-01 19:13 | yes | 3 | 19 s |
| Direct recommendation | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 13:20 | yes | 13 | 25 s |
| Paraphrase | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 13:46 | no | 0 | 6 s |
| Paraphrase | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 12:00 | yes | 3 | 6 s |
| Paraphrase | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 09:16 | yes | 6 | 17 s |
| Paraphrase | Perplexity Sonar | sonar | 2026-11-01 11:53 | yes | 10 | 3 s |
| Paraphrase | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 16:37 | yes | 10 | 12 s |
| Paraphrase | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 14:17 | yes | 5 | 5 s |
| Paraphrase | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 09:00 | yes | 24 | 21 s |
| Paraphrase | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 11:36 | yes | 5 | 2 s |
| Paraphrase | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 19:24 | yes | 5 | 12 s |
| Paraphrase | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 18:26 | yes | 20 | 28 s |
| Paraphrase | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 15:38 | yes | 24 | 25 s |
| Paraphrase | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 13:06 | yes | 5 | 88 s |
| Paraphrase | GPT-6 Luna | gpt-6-luna | 2026-11-01 18:06 | yes | 3 | 14 s |
| Paraphrase | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 15:56 | yes | 15 | 20 s |
| Comparative | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 11:51 | yes | 9 | 11 s |
| Comparative | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 13:08 | yes | 5 | 10 s |
| Comparative | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 18:17 | yes | 8 | 25 s |
| Comparative | Perplexity Sonar | sonar | 2026-11-01 10:24 | yes | 10 | 7 s |
| Comparative | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 18:58 | yes | 9 | 8 s |
| Comparative | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 17:10 | yes | 10 | 12 s |
| Comparative | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 19:10 | yes | 24 | 47 s |
| Comparative | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 08:46 | yes | 5 | 2 s |
| Comparative | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 12:15 | yes | 10 | 34 s |
| Comparative | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 10:56 | yes | 15 | 21 s |
| Comparative | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 09:37 | yes | 24 | 57 s |
| Comparative | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 18:19 | yes | 5 | 28 s |
| Comparative | GPT-6 Luna | gpt-6-luna | 2026-11-01 14:15 | yes | 8 | 33 s |
| Comparative | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 18:20 | yes | 25 | 31 s |
| Budget constrained | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 16:19 | yes | 9 | 7 s |
| Budget constrained | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 19:32 | yes | 3 | 5 s |
| Budget constrained | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 08:43 | yes | 1 | 16 s |
| Budget constrained | Perplexity Sonar | sonar | 2026-11-01 15:11 | yes | 10 | 3 s |
| Budget constrained | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 19:01 | yes | 10 | 13 s |
| Budget constrained | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 11:42 | yes | 5 | 4 s |
| Budget constrained | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 15:34 | yes | 24 | 19 s |
| Budget constrained | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 16:03 | yes | 5 | 4 s |
| Budget constrained | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 10:49 | yes | 20 | 42 s |
| Budget constrained | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 14:29 | yes | 24 | 44 s |
| Budget constrained | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 18:50 | yes | 24 | 90 s |
| Budget constrained | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 14:58 | yes | 5 | 27 s |
| Budget constrained | GPT-6 Luna | gpt-6-luna | 2026-11-01 15:23 | yes | 3 | 14 s |
| Budget constrained | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 11:54 | yes | 23 | 29 s |
| Scale constrained | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 08:54 | yes | 20 | 15 s |
| Scale constrained | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 12:04 | no | 0 | 10 s |
| Scale constrained | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 15:41 | no | 0 | 19 s |
| Scale constrained | Perplexity Sonar | sonar | 2026-11-01 10:54 | yes | 10 | 8 s |
| Scale constrained | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 18:11 | yes | 5 | 12 s |
| Scale constrained | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 12:54 | no | 0 | 9 s |
| Scale constrained | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 11:35 | yes | 18 | 42 s |
| Scale constrained | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 15:49 | yes | 5 | 3 s |
| Scale constrained | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 19:35 | no | 0 | 34 s |
| Scale constrained | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 16:30 | yes | 20 | 50 s |
| Scale constrained | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 13:51 | yes | 23 | 81 s |
| Scale constrained | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 15:26 | no | 0 | 16 s |
| Scale constrained | GPT-6 Luna | gpt-6-luna | 2026-11-01 17:11 | yes | 5 | 19 s |
| Scale constrained | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 14:46 | yes | 14 | 22 s |
| Negative framing | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 17:56 | yes | 20 | 8 s |
| Negative framing | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 11:00 | yes | 3 | 6 s |
| Negative framing | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 13:24 | yes | 8 | 26 s |
| Negative framing | Perplexity Sonar | sonar | 2026-11-01 15:00 | yes | 10 | 6 s |
| Negative framing | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 18:55 | yes | 14 | 16 s |
| Negative framing | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 13:15 | yes | 5 | 5 s |
| Negative framing | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 16:11 | yes | 25 | 79 s |
| Negative framing | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 12:10 | yes | 5 | 3 s |
| Negative framing | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 19:16 | no | 0 | 30 s |
| Negative framing | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 11:36 | yes | 25 | 38 s |
| Negative framing | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 14:57 | yes | 23 | 25 s |
| Negative framing | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 12:23 | yes | 25 | 40 s |
| Negative framing | GPT-6 Luna | gpt-6-luna | 2026-11-01 11:27 | yes | 1 | 18 s |
| Negative framing | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 18:27 | yes | 20 | 24 s |
Normalization in this category
Every judgment call made between the raw labels and the numbers above, listed so it is visible and reversible.
ShowHide
Category-scoped readings
Akeyless read as Akeyless Identity Security Platform
Astrix read as Astrix Security
Astrix (Cisco) read as Astrix Security
CyberArk read as CyberArk Identity Security Platform
CyberArk (including Conjur or Venafi elements) read as CyberArk Identity Security Platform
CyberArk (now Idira Secrets Manager / Conjur) read as CyberArk Identity Security Platform
CyberArk (now Idira by Palo Alto Networks) read as CyberArk Identity Security Platform
Delinea read as Delinea Secret Server
Delinea (Secret Server) read as Delinea Secret Server
Entro read as Entro Security
GitGuardian read as GitGuardian NHI Governance
GitGuardian (with NHI Governance) read as GitGuardian NHI Governance
HashiCorp read as HashiCorp Vault
Microsoft Entra read as Microsoft Entra ID
Oasis read as Oasis Security
Ping read as Ping Identity
SailPoint read as SailPoint Machine Identity Security
Saviynt read as Saviynt Identity Cloud
ServiceNow read as ServiceNow NHIM
Unresolved, counted raw
AD360
APIKeyManager
AWS IAM Roles for Service Accounts
AWS-native identity controls
BeyondTrust Endpoint Privilege Management
Casdoor
CyberArk Privileged Access Management
Entra ID workload identity federation
HashiCorp Vault CE
Keycard
NHI Security
Nomyr
PITS Solutions
PagerDuty's Rundeck
Palo Alto Networks’ Idira (formerly CyberArk)
Rig
SPIFFE / SPIRE
SailPoint with Entro
Secrets Manager SOPS
Discontinued, still offered
No shut-down product was recommended here.