Non-human identity management
Asked as “non-human identity management platform”, and as “machine identity and service account security tool”, on behalf of a mid-market B2B company. 44 first choices recorded across the direct, paraphrase, budget and scale prompts, fourteen models each. Added to the October 2026 Edition on October 4, 2026.
Standing · first-choice share
14%
Contested · Entro Security 9%
14JumpCloud09Entro Security09GitGuardian NHI Governance68others
14% of first choices, contested.
By buyer segment
The same question asked on behalf of a different buyer. Each standing is computed within its segment; they sit side by side and are never added together.
The standing
Share is the count of first choices across the direct, paraphrase, budget and scale prompts, over all fourteen models, for a mid-market B2B company. Ordered by share.
ProductFirst-choice shareNegative rateLabelsQuadrantSince September 2026
03
GitGuardian NHI Governance9%8%13accepted challengernewNew since September 2026: not ranked then, 9% now.
GitGuardian NHI Governance9%8%13accepted challengernewNew since September 2026: not ranked then, 9% now.04Akeyless Identity Security Platform7%7%29accepted challengernewNew since September 2026: not ranked then, 7% now.
06
Delinea Secret Server7%0%12accepted challengernewNew since September 2026: not ranked then, 7% now.
Delinea Secret Server7%0%12accepted challengernewNew since September 2026: not ranked then, 7% now.11
SailPoint Machine Identity Security2%21%14accepted challengernewNew since September 2026: not ranked then, 2% now.
SailPoint Machine Identity Security2%21%14accepted challengernewNew since September 2026: not ranked then, 2% now.Show the six products at 0%, ordered by negative rate
16
CyberArk Identity Security Platform0%45%29criticized challengernewNew since September 2026: not ranked then, 0% now.
CyberArk Identity Security Platform0%45%29criticized challengernewNew since September 2026: not ranked then, 0% now.15
Saviynt Identity Cloud0%27%11criticized challengernewNew since September 2026: not ranked then, 0% now.
Saviynt Identity Cloud0%27%11criticized challengernewNew since September 2026: not ranked then, 0% now.The floor is 11 points of share, measured: how far the models move a leader on their own when the same questions are asked twice with nothing changed. A larger change is movement; a smaller one can't be told apart from repeat variation, and both are shown. Each index measures its own floor from its own repeat, over its own categories, so the floor differs from one index to the next. Movement is read over the twelve models both editions asked; GPT-6 Luna, Muse Glimmer 30B joined this edition and are in the standing but not yet in the comparison. How the floor is measured
Bars are the share of first choices, 0 to 100Every product with at least 10 labels here. Every product name links to its product page.
Head to head
All twenty-eight head-to-head pages: the top eight products, each against each
JumpCloud vs HashiCorp VaultJumpCloud vs Delinea Secret ServerJumpCloud vs Oasis SecurityJumpCloud vs AembitEntro Security vs GitGuardian NHI GovernanceEntro Security vs Akeyless Identity Security PlatformEntro Security vs HashiCorp VaultEntro Security vs Delinea Secret ServerEntro Security vs Oasis SecurityEntro Security vs AembitGitGuardian NHI Governance vs Akeyless Identity Security PlatformGitGuardian NHI Governance vs HashiCorp VaultGitGuardian NHI Governance vs Delinea Secret ServerGitGuardian NHI Governance vs Oasis SecurityGitGuardian NHI Governance vs AembitAkeyless Identity Security Platform vs HashiCorp VaultAkeyless Identity Security Platform vs Delinea Secret ServerAkeyless Identity Security Platform vs Oasis SecurityAkeyless Identity Security Platform vs AembitHashiCorp Vault vs Delinea Secret ServerHashiCorp Vault vs Oasis SecurityHashiCorp Vault vs AembitDelinea Secret Server vs Oasis SecurityDelinea Secret Server vs AembitOasis Security vs Aembit
Recommended versus criticized
Every product with at least 10 labels here, on both axes. The 30% line names a quadrant, not the verdict above: that one needs more than 40%.
Criticized challengerCriticized default
Negative label rate →
01
0203A04
0506
07
08
09
1011
12
13
141516
17Accepted challengerEndorsed leader
0%First-choice share → · lines at 30% share and 25% negative30%
Key
01JumpCloud14%
JumpCloud14%02Entro Security9%
Entro Security9%03GitGuardian NHI Governance9%
GitGuardian NHI Governance9%04Akeyless Identity Security Platform7%
05HashiCorp Vault7%
HashiCorp Vault7%06Delinea Secret Server7%
Delinea Secret Server7%07Oasis Security5%
Oasis Security5%08Aembit5%
Aembit5%09Teleport5%
Teleport5%10Token Security5%
Token Security5%11SailPoint Machine Identity Security2%
SailPoint Machine Identity Security2%12Astrix Security0%
Astrix Security0%13One Identity0%
One Identity0%14Venafi0%
Venafi0%15Saviynt Identity Cloud0%
Saviynt Identity Cloud0%16CyberArk Identity Security Platform0%
CyberArk Identity Security Platform0%17Okta0%
Okta0%What they warned about
Zero of fourteen models held their first choice under the paraphrase. Claude Haiku 4.5, GPT-5.4 mini, Gemini 3.5 Flash, Perplexity Sonar, Grok 4.20, Mistral Small, DeepSeek V4 Flash, Llama 4 Maverick, Qwen 3.7 Flash, Kimi K2, GLM 4.7 FlashX, MiniMax M2.5, GPT-6 Luna and Muse Glimmer 30B changed. A high negative share on a product with few labels is a warning. A low share on a product with many labels is salience, not sentiment.
HashiCorp Vault30%
12 of 40 labels negative · 8 of 14 models · 2 hard negative
“Pure secrets managers (HashiCorp Vault alone): Don't solve the full NHI governance problem” Kimi K2, direct prompt
CyberArk Identity Security Platform45%
13 of 29 labels negative · 7 of 14 models · 4 hard negative
“What to Avoid (for Mid-Market) - CyberArk, SailPoint, Saviynt (enterprise IGA suites)” DeepSeek V4 Flash, direct prompt
Oasis Security18%
5 of 28 labels negative · 4 of 14 models
“Astrix, Oasis, and Token describe discovery/governance and remediation capabilities; that isn't, by itself, proof they can replace your existing credential infrastructure.” GPT-6 Luna, negative prompt
Okta45%
5 of 11 labels negative · 4 of 14 models
“The established vendors (CyberArk, Microsoft, Saviynt) offer broader integration with your existing IAM stack but may be less purpose-built for the NHI challenge.” DeepSeek V4 Flash, scale prompt
What they cite
Fourteen of the fourteen models returned a source list in this edition: five return the pages they cited and nine the search results they consulted.
Sites the answers cite
79 of 84 answers in this category came back with a source list, from 14 of 14 models: citations where the model returns them, or the search results it consulted. 1199 links across 253 sites, every framing counted. Ranked by the number of answers carrying the site or page. None of the 252 answers across every segment cited this index's own page for the category.
40 answers · 41 citations · 12 models
38 answers · 42 citations · 12 models
30 answers · 36 citations · 10 models
29 answers · 30 citations · 9 models
vendor site · One Identity26 answers · 28 citations · 9 models
23 answers · 43 citations · 12 models
22 answers · 22 citations · 7 models
vendor site · Akeyless21 answers · 34 citations · 9 models
21 answers · 27 citations · 11 models
vendor site · CyberPress20 answers · 33 citations · 8 models
19 answers · 20 citations · 11 models
vendor site · Guideflow16 answers · 16 citations · 6 models
Pages the answers cite
The ten pages named in the most answers, by full address. A page here is one the models returned with a recommendation, not one the index endorses.
39 answers · 12 models
36 answers · 12 models
29 answers · 9 models
23 answers · 8 models
22 answers · 7 models
18 answers · 11 models
16 answers · 7 models
15 answers · 9 models
14 answers · 8 models
14 answers · 6 models
Search against answers
Each company's standing in the answers beside its site's footprint in Google search, one row a site: the products the models named on it with their shares, and the share they add up to; monthly searches on Google, and DataForSEO's estimate of AI search demand (modeled from search signals, directional, not a count of queries to any assistant), for the most-searched of the company's and its products' names (the name is in each row's hover text); estimated monthly organic visits to the site; and its best position in Google's top ten for “best non-human identity management platform”, “non-human identity management platforms”. US estimates from DataForSEO and Google's Ads Transparency Center. A small company's site, or a mid-sized company's site for its flagship, is marked company; a product on a large parent's site (Google, Microsoft) has no site figures. A column with no figures for this category is left out, and an empty cell means none were seen, not none exist. Two measurements side by side: neither is read as the cause of the other.
| Company and products | Share | Own site cited | Name searches, Google | AI search demand, est. | Organic visits | Paid search a month, est. | Google ads, last 30 days | Best Google position |
|---|---|---|---|---|---|---|---|---|
| JumpCloud jumpcloud.com | 14% | 365 | 12,100 | 244 | 108,479 | $8,612 | 80 | |
| Entro Security entro.security | 9% | 80 | 480 | 2 | 15,281 | 0 | ||
| GitGuardian NHI Governance gitguardian.com | 9% | 59 | 0 | 13,653 | 31 | 9 | ||
| Akeyless Identity Security Platform akeyless.io | 7% | 126 | 3,357 | $916 | 24 | 5 | ||
| HashiCorp Vault hashicorp.com | 7% | 400 | 5,400 | 317 | 173,934 | $26 | 29 | |
| Delinea delinea.com Delinea Secret Server 7% | 7% | 197 | 6,600 | 218 | 85,859 company | $78 | 91 | |
| Oasis Security oasis.security | 5% | 80 | 2,400 | 53 | 4,117 | 11 | 3 | |
| Aembit aembit.io | 5% | 94 | 590 | 4 | 3,239 | 0 | ||
| Teleport goteleport.com | 5% | 82 | 60,500 | 18,942 | 199,418 | $157 | 11 | |
| Token Security token.security | 5% | 35 | 1,600 | 481 | 1,661 | 14 |
Google's top ten for the two searches hold 18 sites; 3 of them are among the sites the models cited here (akeyless.io, nhimg.org, oneidentity.com). The first result for “best non-human identity management platform” is saviynt.com.
How they answered
Six framings of the same buying question, each sent to every model in a fresh session with search on. One row per model, so a row shows whether it held its answer under rewording, what it named when cost was the constraint, and what it argued against. Computed from the raw judge labels.ShowHide
How they answered
Six framings of the same buying question, each sent to every model in a fresh session with search on. One row per model, so a row shows whether it held its answer under rewording, what it named when cost was the constraint, and what it argued against. Computed from the raw judge labels.
ShowHideModelDirect“What is the best non-human identity management platform for a mid-market B2B company?”Paraphrase“Which machine identity and service account security tool would you recommend to a mid-sized B2B company?”Comparative“What are the top non-human identity management platforms and how do they differ?”Budget-constrained“What is the best non-human identity management platform for a company with a limited budget?”Scale-constrained“We are a 500 person company evaluating a non-human identity management platform. What should we look at?”Negative“Which non-human identity management platforms should I avoid or be cautious about?”
Claude Haiku 4.5JumpCloudno first choiceChangedOasis SecurityGitGuardian NHI Governanceagainst: HashiCorp Vaultno first choiceagainst: JumpCloud, Okta, One Identity, Oracle, Saviynt Identity Cloud
Four alternatives
Delinea Secret Server, HashiCorp Vault, Natoma, Oasis SecurityThree alternatives
Akeyless Identity Security Platform, JumpCloud, ManageEngine PAM360Two alternatives
Akeyless Identity Security Platform, JumpCloudGPT-5.4 miniEntro SecurityAkeyless Identity Security PlatformChangedHashiCorp VaultBeyond Identityagainst: IBM-style suites, Venafino first choicenothing named
Two alternatives
Akeyless Identity Security Platform, One Identity ManagerFour alternatives
CyberArk Identity Security Platform, ManageEngine PAM360, Microsoft Entra ID, One IdentityThree alternatives
CyberArk Secure Workload Access / CyberArk Identity Security Platform, SPIFFE / SPIRE ecosystem, VenafiOne alternative
OpenIAMGemini 3.5 FlashEntro Securityagainst: HashiCorp VaultOasis SecurityChangedagainst: Astrix Security, CyberArk PAM, HashiCorp VaultOasis SecurityInfisicalagainst: CyberArk Identity Security Platform, HashiCorp Vaultno first choicenothing named
Three alternatives
Aembit, Akeyless Identity Security Platform, Oasis SecurityThree alternatives
Akeyless Identity Security Platform, Entro Security, SilverfortFive alternatives
Akeyless Identity Security Platform, Astrix Security, Entro Security, Silverfort, Token SecuritySix alternatives
AWS Secrets Manager, Akeyless Identity Security Platform, Azure Key Vault, Bitwarden Secrets Manager, Doppler, Google Secret ManagerPerplexity SonarFronteggDelinea Secret ServerChangedAkeyless Identity Security PlatformGitGuardian NHI Governanceagainst: Entro Starter Pack, Oasis Security, Oasis Starter Packno first choicenothing named
Four alternatives
Descope, OneLogin, Stytch, WorkOSThree alternatives
CyberArk Identity Security Platform, Keyfactor, SailPoint Machine Identity SecurityNine alternatives
Astrix Security, Clutch Security, CyberArk Identity Security Platform, Entro Security, GitGuardian NHI Governance, HashiCorp Vault, Microsoft Entra ID, Natoma, One Identity Active Roles / SafeguardTwo alternatives
Doppler, JumpCloudGrok 4.20JumpCloudOne Identity SafeguardChangedagainst: CyberArk Identity Security Platform, SailPoint Machine Identity Securityno first choiceHashiCorp Vaultagainst: AWS Secrets Manager, CyberArk Identity Security Platform, Entro Security, SailPoint Machine Identity Securityno first choiceagainst: CyberArk Identity Security Platform, Entro Security, Microsoft Entra ID, Oktaagainst: HashiCorp Vault
Four alternatives
Aembit, Akeyless Identity Security Platform, Astrix Security, One IdentityTwo alternatives
ManageEngine PAM360, StrongDMOne alternative
SPIREMistral SmallAembitNexoraChangedOne IdentityKeycloakagainst: GitGuardian NHI Governance, Infisicalno first choicenothing named
Two alternatives
Entro Security, Oasis SecurityTwo alternatives
Opti’s Access Governance Solutions, SailPoint Machine Identity SecurityThree alternatives
Akeyless Identity Security Platform, Astrix Security, OktaOne alternative
Auth0DeepSeek V4 FlashToken Securityagainst: CyberArk Identity Security Platform, HashiCorp Vault, Oasis Security, SailPoint Machine Identity Security, Saviynt Identity Cloud, VenafiAkeyless Identity Security PlatformChangedagainst: Entro SecurityOasis Securityagainst: ConductorOneGitGuardian NHI Governanceagainst: CyberArk Identity Security Platform, Entro Security, ServiceNow NHIM, Token Securityno first choiceagainst: CyberArk Identity Security Platform, Microsoft, Okta, Saviynt Identity Cloudagainst: Akeyless Identity Security Platform, Apono, Astrix Security, ConductorOne, Entro Security, Fabrix, Natoma, Oasis Security, Okta, Permiso, SGNL
Two alternatives
Astrix Security, Entro SecurityFour alternatives
CyberArk Conjur, Delinea Secret Server, HashiCorp Vault, StrongDMNine alternatives
CyberArk Identity Security Platform, Defakto, Entro Security, HashiCorp Vault, Keyfactor, Microsoft Entra Workload Identities, SailPoint Machine Identity Security, Saviynt Identity Cloud, Token SecurityTwo alternatives
Akeyless Identity Security Platform, JumpCloudLlama 4 Maverickno first choiceSailPoint Machine Identity SecurityChangedno first choiceno first choiceno first choicenothing named
One alternative
One IdentityTwo alternatives
Astrix Security, TeleportQwen 3.7 FlashJumpCloudNetwrix Privilege SecureChangedagainst: CyberArk Identity Security PlatformOasis SecurityTeleportno first choiceagainst: AWS Secrets Manager, CyberArk Identity Security Platform, HashiCorp Vault, IAM Roles, Workload Identities
Three alternatives
Aembit, Akeyless Identity Security Platform, One IdentityFour alternatives
Akeyless Identity Security Platform, Delinea Secret Server, HashiCorp Vault, VenafiSeven alternatives
Astrix Security, CyberArk Identity Security Platform, Doppler, HashiCorp Vault, Microsoft Entra Workload Identities, SailPoint Technologies, Saviynt Identity CloudFour alternatives
AIM, HashiCorp Vault, Infisical, KeycloakKimi K2JumpCloudagainst: CyberArk Identity Security Platform, Entro Security, HashiCorp Vault, Oasis Security, VenafiAkeyless Identity Security Platform, Delinea Secret ServerChangedagainst: CyberArk Identity Security Platform, VenafiCyberArk Identity Security Platformagainst: BeyondTrustInfisical, OpenBaono first choiceagainst: CyberArk Conjur, HashiCorp Vault, Okta
Two alternatives
Aembit, P0 SecurityOne alternative
HashiCorp VaultSix alternatives
Akeyless Identity Security Platform, Astrix Security, Entro Security, Oasis Security, Silverfort, VenafiThree alternatives
1Password, Akeyless Identity Security Platform, DopplerGLM 4.7 FlashXMicrosoft Entra IDDelinea Secret ServerChangedagainst: CyberArk Identity Security PlatformAstrix Security, CyberArk Identity Security Platform, Saviynt Identity Cloudagainst: AembitHashiCorp Vault, OpenBaono first choiceagainst: Cisco Astrix, Cyera
Three alternatives
KeeperPAM, Oasis Security, One IdentityOne alternative
SailPoint Machine Identity SecuritySeven alternatives
Active Roles, Entro Security, GitGuardian NHI Governance, HashiCorp Vault, Microsoft Entra Workload ID, Safeguard, TeleportFour alternatives
AWS Secrets Manager, Agent Identity Management, Ory, miniOrangeMiniMax M2.5JumpCloudHashiCorp VaultChangedCyberArk Identity Security PlatformGitGuardian NHI Governance, JumpCloudno first choicenothing named
Three alternatives
Oasis Security, One Identity, Saviynt Identity CloudThree alternatives
CyberArk Conjur, SailPoint Machine Identity Security, VenafiFive alternatives
Clutch Security, HashiCorp Vault, Oasis Security, Token Security, VenafiThree alternatives
Aembit, Doppler, HashiCorp VaultGPT-6 LunaToken SecurityEntro SecurityChangedagainst: Astrix SecurityAstrix Security, Cyera Identity, Entro Security, Veza NHI SecurityAembitno first choiceagainst: Astrix Security, HashiCorp Vault, Oasis Security, Token Security
Seven alternatives
Aembit, Astrix Security, Cisco, Cyera, Entro Security, Oasis Security, SailPoint Machine Identity SecurityOne alternative
AembitThree alternatives
Aembit, HashiCorp Vault, IdiraTwo alternatives
OpenBao, SPIREMuse Glimmer 30BEntro Security, Oasis SecurityTeleportChangedagainst: CyberArk Identity Security Platform, SPIFFE/SPIRECyberArk Identity Security PlatformSPIFFE / SPIRE + cert-manageragainst: HashiCorp Vaultno first choiceagainst: Akeyless Identity Security Platform, Teleport
Eight alternatives
Aembit, AppViewX CERT+, CyberArk Identity Security Platform, Defakto, HashiCorp Vault, JumpCloud, Keyfactor, VenafiFive alternatives
Delinea Secret Server, HashiCorp Boundary, HashiCorp Vault, ManageEngine PAM360, StrongDMTwelve alternatives
Aembit, Akeyless Identity Security Platform, AppViewX CERT+, Delinea Secret Server, DigiCert ONE, HashiCorp Vault, Keyfactor, Oasis Security, Saviynt Identity Cloud, Smallstep Certificate Manager, Teleport, VenafiFour alternatives
AIM - Agent Identity Management, opena2a.org, Infisical, OpenBao, Sectigo Certificate ManagerBold is the first choiceAlternatives are counted; the count opens them.What the answer argued against
The record
One row per call: the version string exactly as returned, whether the model searched, sources cited, and latency.
Eighty-four rows: every prompt, every model, every answer.
| Prompt | Model | Version string | Time (UTC) | Searched | Sources | Latency |
|---|---|---|---|---|---|---|
| Direct recommendation | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-10-04 21:36 | yes | 9 | 8 s |
| Direct recommendation | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-10-04 21:41 | yes | 4 | 5 s |
| Direct recommendation | Gemini 3.5 Flash | gemini-3.5-flash | 2026-10-04 21:24 | yes | 16 | 28 s |
| Direct recommendation | Perplexity Sonar | sonar | 2026-10-04 21:27 | yes | 22 | 3 s |
| Direct recommendation | Grok 4.20 | spacexai/grok-4.1-fast-non-reasoning via vertex (asked for grok-4.20-non-reasoning; the API answered as this version) | 2026-10-04 21:25 | yes | 19 | 9 s |
| Direct recommendation | Mistral Small | mistral/mistral-small via mistral | 2026-10-04 21:26 | yes | 19 | 9 s |
| Direct recommendation | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-10-04 21:30 | yes | 19 | 34 s |
| Direct recommendation | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-10-04 21:41 | yes | 5 | 2 s |
| Direct recommendation | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-10-04 21:30 | yes | 7 | 41 s |
| Direct recommendation | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-10-04 21:28 | yes | 22 | 25 s |
| Direct recommendation | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-10-04 21:22 | yes | 22 | 24 s |
| Direct recommendation | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-10-04 21:40 | yes | 19 | 40 s |
| Direct recommendation | GPT-6 Luna | gpt-6-luna | 2026-10-04 21:41 | yes | 3 | 25 s |
| Direct recommendation | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-10-04 21:20 | yes | 13 | 15 s |
| Paraphrase | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-10-04 21:36 | no | 0 | 4 s |
| Paraphrase | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-10-04 21:23 | yes | 5 | 6 s |
| Paraphrase | Gemini 3.5 Flash | gemini-3.5-flash | 2026-10-04 21:19 | yes | 12 | 23 s |
| Paraphrase | Perplexity Sonar | sonar | 2026-10-04 21:34 | yes | 29 | 2 s |
| Paraphrase | Grok 4.20 | spacexai/grok-4.1-fast-non-reasoning via vertex (asked for grok-4.20-non-reasoning; the API answered as this version) | 2026-10-04 21:19 | yes | 25 | 9 s |
| Paraphrase | Mistral Small | mistral/mistral-small via mistral | 2026-10-04 21:28 | yes | 5 | 5 s |
| Paraphrase | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-10-04 21:29 | yes | 24 | 25 s |
| Paraphrase | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-10-04 21:37 | yes | 5 | 2 s |
| Paraphrase | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-10-04 21:32 | yes | 10 | 29 s |
| Paraphrase | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-10-04 21:28 | yes | 24 | 61 s |
| Paraphrase | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-10-04 21:26 | yes | 25 | 41 s |
| Paraphrase | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-10-04 21:43 | yes | 10 | 57 s |
| Paraphrase | GPT-6 Luna | gpt-6-luna | 2026-10-04 21:20 | yes | 3 | 23 s |
| Paraphrase | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-10-04 21:27 | yes | 21 | 33 s |
| Comparative | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-10-04 21:36 | yes | 9 | 11 s |
| Comparative | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-10-04 21:23 | yes | 5 | 12 s |
| Comparative | Gemini 3.5 Flash | gemini-3.5-flash | 2026-10-04 21:18 | yes | 26 | 32 s |
| Comparative | Perplexity Sonar | sonar | 2026-10-04 21:26 | yes | 21 | 6 s |
| Comparative | Grok 4.20 | spacexai/grok-4.1-fast-non-reasoning via vertex (asked for grok-4.20-non-reasoning; the API answered as this version) | 2026-10-04 21:41 | yes | 20 | 11 s |
| Comparative | Mistral Small | mistral/mistral-small via mistral | 2026-10-04 21:27 | yes | 24 | 12 s |
| Comparative | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-10-04 21:40 | yes | 24 | 36 s |
| Comparative | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-10-04 21:17 | yes | 5 | 2 s |
| Comparative | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-10-04 21:29 | yes | 10 | 48 s |
| Comparative | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-10-04 21:42 | yes | 23 | 27 s |
| Comparative | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-10-04 21:30 | yes | 23 | 26 s |
| Comparative | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-10-04 21:19 | yes | 12 | 34 s |
| Comparative | GPT-6 Luna | gpt-6-luna | 2026-10-04 21:20 | yes | 7 | 30 s |
| Comparative | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-10-04 21:40 | yes | 23 | 36 s |
| Budget constrained | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-10-04 21:28 | yes | 9 | 7 s |
| Budget constrained | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-10-04 21:18 | yes | 3 | 6 s |
| Budget constrained | Gemini 3.5 Flash | gemini-3.5-flash | 2026-10-04 21:25 | yes | 22 | 27 s |
| Budget constrained | Perplexity Sonar | sonar | 2026-10-04 21:35 | yes | 21 | 3 s |
| Budget constrained | Grok 4.20 | spacexai/grok-4.1-fast-non-reasoning via vertex (asked for grok-4.20-non-reasoning; the API answered as this version) | 2026-10-04 21:36 | yes | 25 | 9 s |
| Budget constrained | Mistral Small | mistral/mistral-small via mistral | 2026-10-04 21:19 | yes | 14 | 27 s |
| Budget constrained | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-10-04 21:32 | yes | 22 | 25 s |
| Budget constrained | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-10-04 21:26 | yes | 5 | 2 s |
| Budget constrained | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-10-04 21:26 | yes | 23 | 88 s |
| Budget constrained | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-10-04 21:25 | yes | 19 | 24 s |
| Budget constrained | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-10-04 21:35 | yes | 23 | 21 s |
| Budget constrained | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-10-04 21:33 | yes | 13 | 38 s |
| Budget constrained | GPT-6 Luna | gpt-6-luna | 2026-10-04 21:34 | yes | 2 | 16 s |
| Budget constrained | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-10-04 21:36 | yes | 15 | 17 s |
| Scale constrained | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-10-04 21:21 | no | 0 | 5 s |
| Scale constrained | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-10-04 21:40 | no | 0 | 6 s |
| Scale constrained | Gemini 3.5 Flash | gemini-3.5-flash | 2026-10-04 21:27 | yes | 17 | 23 s |
| Scale constrained | Perplexity Sonar | sonar | 2026-10-04 21:31 | yes | 29 | 3 s |
| Scale constrained | Grok 4.20 | spacexai/grok-4.1-fast-non-reasoning via vertex (asked for grok-4.20-non-reasoning; the API answered as this version) | 2026-10-04 21:42 | yes | 13 | 9 s |
| Scale constrained | Mistral Small | mistral/mistral-small via mistral | 2026-10-04 21:18 | no | 0 | 9 s |
| Scale constrained | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-10-04 21:39 | yes | 21 | 46 s |
| Scale constrained | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-10-04 21:36 | yes | 5 | 4 s |
| Scale constrained | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-10-04 21:23 | no | 0 | 28 s |
| Scale constrained | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-10-04 21:35 | yes | 20 | 58 s |
| Scale constrained | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-10-04 21:18 | yes | 16 | 16 s |
| Scale constrained | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-10-04 21:26 | yes | 5 | 12 s |
| Scale constrained | GPT-6 Luna | gpt-6-luna | 2026-10-04 21:18 | yes | 2 | 18 s |
| Scale constrained | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-10-04 21:28 | yes | 15 | 21 s |
| Negative framing | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-10-04 21:32 | yes | 18 | 9 s |
| Negative framing | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-10-04 21:19 | yes | 4 | 8 s |
| Negative framing | Gemini 3.5 Flash | gemini-3.5-flash | 2026-10-04 21:17 | yes | 16 | 26 s |
| Negative framing | Perplexity Sonar | sonar | 2026-10-04 21:40 | yes | 21 | 4 s |
| Negative framing | Grok 4.20 | spacexai/grok-4.1-fast-non-reasoning via vertex (asked for grok-4.20-non-reasoning; the API answered as this version) | 2026-10-04 21:18 | yes | 19 | 7 s |
| Negative framing | Mistral Small | mistral/mistral-small via mistral | 2026-10-04 21:41 | yes | 5 | 5 s |
| Negative framing | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-10-04 21:31 | yes | 22 | 30 s |
| Negative framing | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-10-04 21:29 | yes | 5 | 3 s |
| Negative framing | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-10-04 21:40 | yes | 10 | 44 s |
| Negative framing | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-10-04 21:38 | yes | 24 | 26 s |
| Negative framing | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-10-04 21:20 | yes | 21 | 19 s |
| Negative framing | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-10-04 21:35 | yes | 18 | 39 s |
| Negative framing | GPT-6 Luna | gpt-6-luna | 2026-10-04 21:30 | yes | 4 | 23 s |
| Negative framing | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-10-04 21:42 | yes | 24 | 29 s |
Normalization in this category
Every judgment call made between the raw labels and the numbers above, listed so it is visible and reversible.
ShowHide
Category-scoped readings
Akeyless read as Akeyless Identity Security Platform
AppViewX read as AppViewX CERT+
Astrix read as Astrix Security
CyberArk read as CyberArk Identity Security Platform
CyberArk (now Idira by Palo Alto Networks) read as CyberArk Identity Security Platform
CyberArk (via Venafi acquisition) read as CyberArk Identity Security Platform
CyberArk (with Venafi) read as CyberArk Identity Security Platform
Delinea read as Delinea Secret Server
Delinea (formerly Thycotic) read as Delinea Secret Server
Entro read as Entro Security
GitGuardian read as GitGuardian NHI Governance
GitGuardian Platform read as GitGuardian NHI Governance
HashiCorp read as HashiCorp Vault
HashiCorp (VMware/IBM) read as HashiCorp Vault
Microsoft Entra read as Microsoft Entra ID
Oasis read as Oasis Security
Ping read as Ping Identity
SailPoint read as SailPoint Machine Identity Security
SailPoint’s Machine Identity Security read as SailPoint Machine Identity Security
Saviynt read as Saviynt Identity Cloud
Sectigo read as Sectigo Certificate Manager
ServiceNow read as ServiceNow NHIM
Smallstep read as Smallstep Certificate Manager
Token read as Token Security
delinea read as Delinea Secret Server
Unresolved, counted raw
AIM (Agent Identity Management)
AIM - Agent Identity Management, opena2a.org
Agent Identity Management (AIM)
Athenz
Cisco Astrix
CyberArk PAM
CyberArk Privileged Access Management (PAM)
CyberArk Secure Workload Access / CyberArk Identity Security Platform
Entra workload identity products
Fabrix
Google Certificate Manager
IAM Roles
IBM-style suites
Infiscale
Keylime
One Identity Active Roles / Safeguard
Opti’s Access Governance Solutions
Permit.io
SGNL
SPIFFE / SPIRE + cert-manager
SPIFFE / SPIRE ecosystem
SPIFFE/SPIRE-based tools
SailPoint NHI solutions
SailPoint Technologies
Teleport Machine ID
Veza NHI Security
Workload Identities
Discontinued, still offered
No shut-down product was recommended here.