Non-human identity management for enterprise buyers
Asked as “non-human identity management platform”, and as “machine identity and service account security tool”, on behalf of an enterprise B2B company. 49 first choices recorded across the direct, paraphrase, budget and scale prompts, fourteen models each. Added to the November 2026 Edition.
Standing · first-choice share
20%
Contested · Oasis Security 12%
20CyberArk Identity Security Platform12Oasis Security10SailPoint Machine Identity Security57others
20% of first choices, contested.
Since October 2026=heldSince October 2026: 20% → 20%, ±0 points. Inside the 11-point floor: within noise.CyberArk Identity Security Platform held the lead, ±0 points on 20%, inside the 11-point floor.
By buyer segment
The same question asked on behalf of a different buyer. Each standing is computed within its segment; they sit side by side and are never added together.
Small business
JumpCloud20%Contested=heldSince October 2026: 20% → 20%, ±0 points. Inside the 11-point floor: within noise.Standing →Mid-marketJumpCloud22%Contested▲+8Since October 2026: 14% → 22%, +8 points. Inside the 11-point floor: within noise.Standing →Enterprise
CyberArk Identity Security Platform20%Contested=heldSince October 2026: 20% → 20%, ±0 points. Inside the 11-point floor: within noise.This page
JumpCloud20%Contested=heldSince October 2026: 20% → 20%, ±0 points. Inside the 11-point floor: within noise.Standing →Mid-marketJumpCloud22%Contested▲+8Since October 2026: 14% → 22%, +8 points. Inside the 11-point floor: within noise.Standing →EnterpriseCyberArk Identity Security Platform20%Contested=heldSince October 2026: 20% → 20%, ±0 points. Inside the 11-point floor: within noise.This pageThe standing
Share is the count of first choices across the direct, paraphrase, budget and scale prompts, over all fourteen models, for an enterprise B2B company. Ordered by share.
ProductFirst-choice shareNegative rateLabelsQuadrantSince October 2026
01CyberArk Identity Security Platform20%17%53accepted challenger=heldSince October 2026: 20% → 20%, ±0 points. Inside the 11-point floor: within noise.20% → 20%
CyberArk Identity Security Platform20%17%53accepted challenger=heldSince October 2026: 20% → 20%, ±0 points. Inside the 11-point floor: within noise.20% → 20%02
Oasis Security12%10%29accepted challenger▲+6Since October 2026: 6% → 12%, +6 points. Inside the 11-point floor: within noise.6% → 12%
Oasis Security12%10%29accepted challenger▲+6Since October 2026: 6% → 12%, +6 points. Inside the 11-point floor: within noise.6% → 12%03
SailPoint Machine Identity Security10%25%28criticized challenger=heldSince October 2026: 10% → 10%, ±0 points. Inside the 11-point floor: within noise.10% → 10%
SailPoint Machine Identity Security10%25%28criticized challenger=heldSince October 2026: 10% → 10%, ±0 points. Inside the 11-point floor: within noise.10% → 10%04Akeyless Identity Security Platform8%8%38accepted challenger▲+4Since October 2026: 4% → 8%, +4 points. Inside the 11-point floor: within noise.4% → 8%
05
Saviynt Identity Cloud8%19%31accepted challenger▲+6Since October 2026: 2% → 8%, +6 points. Inside the 11-point floor: within noise.2% → 8%
Saviynt Identity Cloud8%19%31accepted challenger▲+6Since October 2026: 2% → 8%, +6 points. Inside the 11-point floor: within noise.2% → 8%06JumpCloud8%0%11accepted challenger▲+6Since October 2026: 2% → 8%, +6 points. Inside the 11-point floor: within noise.2% → 8%
JumpCloud8%0%11accepted challenger▲+6Since October 2026: 2% → 8%, +6 points. Inside the 11-point floor: within noise.2% → 8%07
Microsoft Entra ID6%30%23criticized challenger▲+6Since October 2026: 0% → 6%, +6 points. Inside the 11-point floor: within noise.0% → 6%
Microsoft Entra ID6%30%23criticized challenger▲+6Since October 2026: 0% → 6%, +6 points. Inside the 11-point floor: within noise.0% → 6%08
Venafi4%14%21accepted challenger▼−2Since October 2026: 6% → 4%, −2 points. Inside the 11-point floor: within noise.6% → 4%
Venafi4%14%21accepted challenger▼−2Since October 2026: 6% → 4%, −2 points. Inside the 11-point floor: within noise.6% → 4%09
Microsoft4%10%10accepted challenger▲+4Since October 2026: 0% → 4%, +4 points. Inside the 11-point floor: within noise.0% → 4%
Microsoft4%10%10accepted challenger▲+4Since October 2026: 0% → 4%, +4 points. Inside the 11-point floor: within noise.0% → 4%10
Astrix Security2%13%30accepted challenger▼−2Since October 2026: 4% → 2%, −2 points. Inside the 11-point floor: within noise.4% → 2%
Astrix Security2%13%30accepted challenger▼−2Since October 2026: 4% → 2%, −2 points. Inside the 11-point floor: within noise.4% → 2%11
Token Security2%0%11accepted challenger=heldSince October 2026: 2% → 2%, ±0 points. Inside the 11-point floor: within noise.2% → 2%
Token Security2%0%11accepted challenger=heldSince October 2026: 2% → 2%, ±0 points. Inside the 11-point floor: within noise.2% → 2%12
HashiCorp Vault2%32%37criticized challenger▼−6Since October 2026: 8% → 2%, −6 points. Inside the 11-point floor: within noise.8% → 2%
HashiCorp Vault2%32%37criticized challenger▼−6Since October 2026: 8% → 2%, −6 points. Inside the 11-point floor: within noise.8% → 2%Show the seven products at 0%, ordered by negative rate
18
Okta0%32%28criticized challenger▼−2Since October 2026: 2% → 0%, −2 points. Inside the 11-point floor: within noise.2% → 0%
Okta0%32%28criticized challenger▼−2Since October 2026: 2% → 0%, −2 points. Inside the 11-point floor: within noise.2% → 0%14
Entro Security0%12%26accepted challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%
Entro Security0%12%26accepted challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%19
Teleport0%10%10accepted challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%
Teleport0%10%10accepted challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%16
One Identity0%7%15accepted challenger▼−4Since October 2026: 4% → 0%, −4 points. Inside the 11-point floor: within noise.4% → 0%
One Identity0%7%15accepted challenger▼−4Since October 2026: 4% → 0%, −4 points. Inside the 11-point floor: within noise.4% → 0%15
GitGuardian NHI Governance0%6%18accepted challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%
GitGuardian NHI Governance0%6%18accepted challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%13
Aembit0%0%22accepted challenger▼−8Since October 2026: 8% → 0%, −8 points. Inside the 11-point floor: within noise.8% → 0%
Aembit0%0%22accepted challenger▼−8Since October 2026: 8% → 0%, −8 points. Inside the 11-point floor: within noise.8% → 0%17ServiceNow NHIM0%0%10accepted challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%
The floor is 11 points of share, measured: how far the models move a leader on their own when the same questions are asked twice with nothing changed. A larger change is movement; a smaller one can't be told apart from repeat variation, and both are shown. Each index measures its own floor from its own repeat, over its own categories, so the floor differs from one index to the next. Both editions asked the same fourteen models. How the floor is measured
Bars are the share of first choices, 0 to 100Every product with at least 10 labels here. Every product name links to its product page.
For buyers
Head to headHead-to-head pages are published for mid-market buyers, so these open on mid-market figures, not enterprise.
All twenty-eight head-to-head pages: the top eight products, each against each
JumpCloud vs HashiCorp VaultJumpCloud vs GitGuardian NHI GovernanceJumpCloud vs SailPoint Machine Identity SecurityJumpCloud vs Token SecurityAkeyless Identity Security Platform vs AembitAkeyless Identity Security Platform vs Oasis SecurityAkeyless Identity Security Platform vs HashiCorp VaultAkeyless Identity Security Platform vs GitGuardian NHI GovernanceAkeyless Identity Security Platform vs SailPoint Machine Identity SecurityAkeyless Identity Security Platform vs Token SecurityAembit vs Oasis SecurityAembit vs HashiCorp VaultAembit vs GitGuardian NHI GovernanceAembit vs SailPoint Machine Identity SecurityAembit vs Token SecurityOasis Security vs HashiCorp VaultOasis Security vs GitGuardian NHI GovernanceOasis Security vs SailPoint Machine Identity SecurityOasis Security vs Token SecurityHashiCorp Vault vs GitGuardian NHI GovernanceHashiCorp Vault vs SailPoint Machine Identity SecurityHashiCorp Vault vs Token SecurityGitGuardian NHI Governance vs SailPoint Machine Identity SecurityGitGuardian NHI Governance vs Token SecuritySailPoint Machine Identity Security vs Token Security
Recommended versus criticized
Every product with at least 10 labels here, on both axes. The 30% line names a quadrant, not the verdict above: that one needs more than 40%.
Criticized challengerCriticized default
Negative label rate →
010203A04
050607080910111213141516S17
1819Accepted challengerEndorsed leader
0%First-choice share → · lines at 30% share and 25% negative40%
Key
01CyberArk Identity Security Platform20%
CyberArk Identity Security Platform20%02Oasis Security12%
Oasis Security12%03SailPoint Machine Identity Security10%
SailPoint Machine Identity Security10%04Akeyless Identity Security Platform8%
05Saviynt Identity Cloud8%
Saviynt Identity Cloud8%06JumpCloud8%
JumpCloud8%07Microsoft Entra ID6%
Microsoft Entra ID6%08Venafi4%
Venafi4%09Microsoft4%
Microsoft4%10Astrix Security2%
Astrix Security2%11Token Security2%
Token Security2%12HashiCorp Vault2%
HashiCorp Vault2%13Aembit0%
Aembit0%14Entro Security0%
Entro Security0%15GitGuardian NHI Governance0%
GitGuardian NHI Governance0%16One Identity0%
One Identity0%17ServiceNow NHIM0%
18Okta0%
Okta0%19Teleport0%
Teleport0%What they warned about
One of fourteen models held their first choice under the paraphrase. Claude Haiku 4.5, GPT-5.4 mini, Gemini 3.5 Flash, Perplexity Sonar, Grok 4.20, Mistral Small, DeepSeek V4 Flash, Llama 4 Maverick, Qwen 3.7 Flash, Kimi K2, GLM 4.7 FlashX, MiniMax M2.5 and Muse Glimmer 30B changed. A high negative share on a product with few labels is a warning. A low share on a product with many labels is salience, not sentiment.
HashiCorp Vault32%
12 of 37 labels negative · 10 of 14 models · 3 hard negative
“HashiCorp Vault and SailPoint have been noted for limitations in NHI support, scalability, and ease of deployment, making them risky choices” Mistral Small, negative prompt
Okta32%
9 of 28 labels negative · 8 of 14 models · 1 hard negative
“Avoid using these as your *only* NHI management solution. Use them only for authentication, not for governance or lifecycle management.” GLM 4.7 FlashX, negative prompt
CyberArk Identity Security Platform17%
9 of 53 labels negative · 7 of 14 models · 2 hard negative
“Avoid relying on CyberArk if your primary constraint is cost predictability” Qwen 3.7 Flash, budget prompt
Microsoft Entra ID30%
7 of 23 labels negative · 6 of 14 models · 1 hard negative
“Only Authenticate: (e.g., Okta, Entra ID) — Do not govern actions.” GLM 4.7 FlashX, negative prompt
What they cite
Fourteen of the fourteen models returned a source list in this edition: five return the pages they cited and nine the search results they consulted.
Sites the answers cite
78 of 84 answers in this category came back with a source list, from 14 of 14 models: citations where the model returns them, or the search results it consulted. 1034 links across 275 sites, every framing counted. Ranked by the number of answers carrying the site or page. 73 of the 252 answers across every segment cited this index's own page for the category; the method page measures whether that reading tilts an answer.
36 answers · 51 citations · 12 models
28 answers · 38 citations · 11 models
vendor site · One Identity28 answers · 28 citations · 11 models
26 answers · 27 citations · 12 models
23 answers · 25 citations · 10 models
vendor site · G221 answers · 27 citations · 9 models
19 answers · 25 citations · 9 models
vendor site · Akeyless18 answers · 25 citations · 10 models
publisher (Gane)17 answers · 20 citations · 8 models
vendor site · IBM14 answers · 17 citations · 8 models
vendor site · Saviynt13 answers · 24 citations · 6 models
12 answers · 19 citations · 7 models
Pages the answers cite
The ten pages named in the most answers, by full address. A page here is one the models returned with a recommendation, not one the index endorses.
24 answers · 11 models
23 answers · 11 models
22 answers · 10 models
20 answers · 10 models
17 answers · 8 models
16 answers · 8 models
13 answers · 10 models
12 answers · 8 models
11 answers · 7 models
10 answers · 6 models
Search against answers
Each company's standing in the answers beside its site's footprint in Google search, one row a site: the products the models named on it with their shares, and the share they add up to; monthly searches on Google, and DataForSEO's estimate of AI search demand (modeled from search signals, directional, not a count of queries to any assistant), for the most-searched of the company's and its products' names (the name is in each row's hover text); estimated monthly organic visits to the site; and its best position in Google's top ten for “best non-human identity management platform”, “non-human identity management platforms”. US estimates from DataForSEO and Google's Ads Transparency Center. A small company's site, or a mid-sized company's site for its flagship, is marked company; a product on a large parent's site (Google, Microsoft) has no site figures. A column with no figures for this category is left out, and an empty cell means none were seen, not none exist. Two measurements side by side: neither is read as the cause of the other.
| Company and products | Share | Own site cited | Name searches, Google | AI search demand, est. | Organic visits | Paid search a month, est. | Google ads, last 30 days | Best Google position |
|---|---|---|---|---|---|---|---|---|
| CyberArk cyberark.com CyberArk Identity Security Platform 20% | 20% | 118 | 22,200 | 1,253 | 147,793 company | $62 | 0 | |
| Oasis Security oasis.security | 12% | 80 | 2,400 | 53 | 4,117 | 11 | 3 | |
| SailPoint sailpoint.com SailPoint Machine Identity Security 10% | 10% | 61 | 22,200 | 1,049 | 58,881 company | 46 | ||
| Microsoft parent site Microsoft Entra ID 6%, Microsoft Entra Workload ID 2%, Microsoft Entra ID Governance 2% | 10% | 499 | 2,240,000 | 403,136 | ||||
| Akeyless Identity Security Platform akeyless.io | 8% | 126 | 3,357 | $916 | 24 | 5 | ||
| Saviynt saviynt.com Saviynt Identity Cloud 8% | 8% | 60 | 9,900 | 285 | 14,800 company | $71 | 34 | 1 |
| JumpCloud jumpcloud.com | 8% | 365 | 12,100 | 244 | 108,479 | $8,612 | 80 | |
| Venafi venafi.com | 4% | 30 | 3,600 | 91 | 7,407 | |||
| Microsoft microsoft.com | 4% | 294 | 2,240,000 | 403,136 | 145,358,109 | $12,455 | 103 | |
| Astrix Security astrix.security | 2% | 96 | 1,000 | 10 | 3,034 | 0 | 5 |
Google's top ten for the two searches hold 18 sites; 3 of them are among the sites the models cited here (akeyless.io, oneidentity.com, saviynt.com). The first result for “best non-human identity management platform” is saviynt.com.
How they answered
Six framings of the same buying question, each sent to every model in a fresh session with search on. One row per model, so a row shows whether it held its answer under rewording, what it named when cost was the constraint, and what it argued against. Computed from the raw judge labels.ShowHide
How they answered
Six framings of the same buying question, each sent to every model in a fresh session with search on. One row per model, so a row shows whether it held its answer under rewording, what it named when cost was the constraint, and what it argued against. Computed from the raw judge labels.
ShowHideModelDirect“What is the best non-human identity management platform for an enterprise B2B company?”Paraphrase“Which machine identity and service account security tool would you recommend to a large B2B company with thousands of employees?”Comparative“What are the top enterprise-grade non-human identity management platforms and how do they differ?”Budget-constrained“What is the best non-human identity management platform for a large company that needs predictable total cost across thousands of users?”Scale-constrained“We are a 5,000 person company with SSO, SOC 2 and procurement review requirements evaluating a non-human identity management platform. What should we look at?”Negative“Which non-human identity management platforms should a large enterprise avoid or be cautious about?”
Claude Haiku 4.5no first choiceCyberArk Identity Security PlatformChangedCyberArk Identity Security PlatformJumpCloudagainst: Oasis Securityno first choicenothing named
Six alternatives
Akeyless Identity Security Platform, BeyondTrust, DigiCert, Entro Security, Keyfactor, One Identity SafeguardEight alternatives
Astrix Security, Entro Security, HashiCorp Vault, JumpCloud, Keyfactor, Oasis Security, One Identity, Smallstep Certificate ManagerTwo alternatives
Microsoft Entra ID with Machine Identity Extensions, One IdentityGPT-5.4 miniCyberArk Identity Security PlatformMicrosoft Entra IDChangedSailPoint Machine Identity SecurityInfisical, JumpCloudagainst: CyberArk Identity Security Platform, ForgeRock, Ping Identity, SailPoint Machine Identity Security, Saviynt Identity Cloudno first choicenothing named
Two alternatives
Okta, SailPoint Machine Identity SecurityTwo alternatives
CyberArk Identity Security Platform, KeyfactorFive alternatives
CyberArk Identity Security Platform, Keyfactor, Microsoft Entra ID, Okta, VenafiGemini 3.5 FlashOasis Securityagainst: Microsoft Entra ID, OktaCyberArk Identity Security PlatformChangedOasis SecurityAkeyless Identity Security Platformagainst: AWS Secrets Manager, Azure Key Vault, Google Secret Managerno first choiceagainst: AWS Secrets Manager, Azure Key Vault, Google Secret Manager, HashiCorp Vault, OpenBao
Five alternatives
Aembit, CyberArk Privileged Access Manager, Entro Security, HashiCorp Vault, Token SecurityFive alternatives
Akeyless Identity Security Platform, Astrix Security, HashiCorp Vault, Oasis Security, VenafiSix alternatives
Aembit, Astrix Security, CyberArk Identity Security Platform, Entro Security, HashiCorp Vault, SilverfortThree alternatives
CyberArk Machine Identity Security, HashiCorp Vault, Oasis SecurityPerplexity SonarOasis SecurityCyberArk Identity Security PlatformChangedagainst: Microsoft Entra ID, OktaCyberArk Identity Security Platform, Microsoft Entra Workload ID, Saviynt Identity CloudMicrosoft Entra ID Governanceagainst: CyberArk Machine Identity Security, Saviynt Identity Cloudno first choiceagainst: HashiCorp Vault, Microsoft
Three alternatives
Astrix Security, CyberArk Identity Security Platform, Microsoft Entra IDTwo alternatives
HashiCorp Vault, SailPoint Machine Identity SecuritySix alternatives
Aembit, Akeyless Identity Security Platform, Astrix Security, Clutch Security, GitGuardian NHI Governance, OktaOne alternative
LumosGrok 4.20Astrix Securityagainst: CyberArk Identity Security Platform, Microsoft Entra ID, OktaCyberArk Identity Security PlatformChangedagainst: Akeyless Identity Security Platform, Entro Security, HashiCorp Vault, Saviynt Identity Cloud, VenafiAstrix Securityagainst: HashiCorp Vault, Microsoft Entra IDAkeyless Identity Security Platformagainst: CyberArk Identity Security PlatformSailPoint Machine Identity Securityagainst: Astrix Security, Defakto, Entro Security, Oasis Security, Okta, Permiso
Three alternatives
Aembit, Akeyless Identity Security Platform, Oasis SecurityOne alternative
Microsoft Entra Workload IDFour alternatives
Aembit, Akeyless Identity Security Platform, Entro Security, Oasis SecurityTwo alternatives
One Identity, SailPoint Machine Identity SecuritySix alternatives
Akeyless Identity Security Platform, Astrix Security, Entro Security, Microsoft Entra ID, Okta/Auth0, One IdentityMistral SmallCyberArk Identity Security Platform, Saviynt Identity CloudKeyfactor, VenafiChangedCyberArk Identity Security PlatformSailPoint Machine Identity Security, Saviynt Identity Cloudno first choiceagainst: HashiCorp Vault, Lumos, SailPoint Machine Identity Security
Three alternatives
Aembit, Microsoft Entra ID, Oasis SecurityTwo alternatives
CyberArk Conjur, HashiCorp VaultFive alternatives
Akeyless Identity Security Platform, Astrix Security, Microsoft Entra ID, Okta, Saviynt Identity CloudTwo alternatives
JumpCloud, One IdentityDeepSeek V4 FlashMicrosoft Entra IDCyberArk Identity Security PlatformChangedAembitagainst: CyberArk Conjur, HashiCorp Vault, SailPoint Machine Identity Securityno first choiceno first choiceagainst: Akeyless Identity Security Platform, Astrix Security, Entro Security, HashiCorp Vault, Oasis Security, Permiso, SGNL, Teleport
Five alternatives
Aembit, CyberArk Identity Security Platform, GitGuardian NHI Governance, Saviynt Identity Cloud, Token SecurityThree alternatives
Akeyless Identity Security Platform, Delinea Secret Server, VenafiFour alternatives
Akeyless Identity Security Platform, Astrix Security, Entro Security, GitGuardian NHI GovernanceLlama 4 Maverickno first choiceSailPoint Machine Identity SecurityChangedno first choiceno first choiceno first choiceagainst: HashiCorp Vault, Okta, SailPoint Machine Identity Security
Qwen 3.7 FlashCyberArk Identity Security PlatformAkeyless Identity Security PlatformChangedCyberArk Identity Security Platform, Saviynt Identity CloudAkeyless Identity Security Platform, Microsoft Entra IDagainst: CyberArk Identity Security Platformno first choiceagainst: CyberArk Identity Security Platform, HashiCorp Vault, Microsoft Entra ID, Okta
Three alternatives
Akeyless Identity Security Platform, HashiCorp Vault, VenafiThree alternatives
CyberArk Identity Security Platform, HashiCorp Vault, Smallstep Certificate ManagerFour alternatives
Akeyless Identity Security Platform, HashiCorp Vault, Microsoft Entra ID, OktaOne alternative
Saviynt Identity CloudKimi K2Oasis Security, Token SecurityCyberArk Identity Security PlatformChangedMicrosoft Entra IDAuthentikagainst: CyberArk Identity Security Platform, Delinea Secret Server, Saviynt Identity Cloud, VenafiOasis Securityagainst: miniOrange REST API
Four alternatives
Clutch Security, CyberArk Identity Security Platform, Saviynt Identity Cloud, ServiceNow NHI SecurityTwo alternatives
BeyondTrust, Delinea Secret ServerThirteen alternatives
Aembit, Akeyless Identity Security Platform, Astrix Security, CyberArk Identity Security Platform, Entro Security, HashiCorp Vault, Natoma, Oasis Security, Okta, SailPoint Machine Identity Security, Saviynt Identity Cloud, Token Security, VenafiTwo alternatives
HashiCorp Vault, JumpCloudTwo alternatives
Defakto, Token SecurityGLM 4.7 FlashXCyberArk Identity Security Platform, Saviynt Identity CloudSailPoint Machine Identity Security, VenafiChangedAstrix Security, ServiceNow NHIMJumpCloudagainst: CyberArk Identity Security Platform, Venafino first choiceagainst: AWS Secrets Manager, HashiCorp Vault, Microsoft Entra ID, Okta
One alternative
One IdentityThree alternatives
Azure Key Vault, CyberArk Conjur, HashiCorp VaultSix alternatives
Akeyless Identity Security Platform, CyberArk Identity Security Platform, Defakto Security, Microsoft Entra Workload ID, Okta, Saviynt Identity CloudThree alternatives
HashiCorp Vault, Microsoft Entra ID, SailPoint Machine Identity SecurityMiniMax M2.5MicrosoftHashiCorp VaultChangedAstrix Security, CyberArk Identity Security Platform, MicrosoftSecureAuthagainst: Authentik, SailPoint Machine Identity Securityno first choiceagainst: Okta
Five alternatives
Astrix Security, CyberArk Identity Security Platform, Oasis Security, Saviynt Identity Cloud, Token SecurityFour alternatives
CyberArk Conjur, Keyfactor, SPIFFE/SPIRE, VenafiFive alternatives
Aembit, Oasis Security, Okta, Saviynt Identity Cloud, VenafiTwo alternatives
Entro Security, Oasis SecurityGPT-6 LunaOasis Securityagainst: Astrix SecurityOasis SecurityHeldagainst: Astrix SecurityCyberArk Identity Security Platform, Microsoft Entra Workload ID, Saviynt Identity Security / ZumaMicrosoft Entra Workload IDno first choiceagainst: Akeyless Identity Security Platform, BeyondTrust Password Safe, CyberArk Identity Security Platform, GitGuardian NHI Governance, HashiCorp Vault, Microsoft Entra ID
Two alternatives
Aembit, CyberArk Identity Security PlatformOne alternative
IdiraFive alternatives
Akeyless Identity Security Platform, Entro Security, GitGuardian NHI Governance, Oasis Security, SailPoint Agentic FabricTwo alternatives
CyberArk Identity Security Platform, Saviynt Identity CloudMuse Glimmer 30BMicrosoft, Saviynt Identity CloudSailPoint Machine Identity SecurityChangedCyberArk Identity Security PlatformJumpCloudagainst: CyberArk Identity Security Platform, One Identity, SailPoint Machine Identity Security, Saviynt Identity Cloudno first choiceagainst: HashiCorp Vault, Okta, SailPoint Machine Identity Security, Saviynt Identity Cloud
Three alternatives
CyberArk Identity Security Platform, HashiCorp Vault, TeleportThree alternatives
CyberArk Conjur, HashiCorp Vault, VenafiTen alternatives
Akeyless Identity Security Platform, BeyondTrust, Defakto, Delinea Secret Server, HashiCorp Vault, Microsoft, Okta, Saviynt Identity Cloud, Teleport, VenafiOne alternative
Teleport Machine & Workload IdentityBold is the first choiceAlternatives are counted; the count opens them.What the answer argued against
The record
One row per call: the version string exactly as returned, whether the model searched, sources cited, and latency.
Eighty-four rows: every prompt, every model, every answer.
| Prompt | Model | Version string | Time (UTC) | Searched | Sources | Latency |
|---|---|---|---|---|---|---|
| Direct recommendation | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 09:30 | no | 0 | 4 s |
| Direct recommendation | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 17:47 | yes | 3 | 4 s |
| Direct recommendation | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 18:26 | yes | 11 | 22 s |
| Direct recommendation | Perplexity Sonar | sonar | 2026-11-01 16:13 | yes | 10 | 4 s |
| Direct recommendation | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 18:37 | yes | 7 | 11 s |
| Direct recommendation | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 08:42 | yes | 5 | 5 s |
| Direct recommendation | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 12:32 | yes | 23 | 26 s |
| Direct recommendation | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 14:13 | yes | 5 | 4 s |
| Direct recommendation | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 17:59 | no | 0 | 28 s |
| Direct recommendation | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 16:05 | yes | 15 | 22 s |
| Direct recommendation | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 14:53 | yes | 25 | 81 s |
| Direct recommendation | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 13:09 | yes | 5 | 27 s |
| Direct recommendation | GPT-6 Luna | gpt-6-luna | 2026-11-01 19:17 | yes | 4 | 19 s |
| Direct recommendation | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 11:00 | yes | 13 | 21 s |
| Paraphrase | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 16:41 | yes | 19 | 9 s |
| Paraphrase | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 19:08 | yes | 3 | 5 s |
| Paraphrase | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 10:02 | no | 0 | 11 s |
| Paraphrase | Perplexity Sonar | sonar | 2026-11-01 13:04 | yes | 10 | 4 s |
| Paraphrase | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 13:47 | yes | 10 | 10 s |
| Paraphrase | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 11:01 | yes | 5 | 5 s |
| Paraphrase | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 14:21 | yes | 23 | 30 s |
| Paraphrase | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 11:08 | yes | 5 | 2 s |
| Paraphrase | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 15:17 | yes | 5 | 19 s |
| Paraphrase | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 14:48 | yes | 15 | 57 s |
| Paraphrase | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 10:10 | yes | 25 | 55 s |
| Paraphrase | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 09:22 | yes | 5 | 28 s |
| Paraphrase | GPT-6 Luna | gpt-6-luna | 2026-11-01 09:54 | yes | 3 | 16 s |
| Paraphrase | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 08:49 | yes | 12 | 18 s |
| Comparative | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 14:40 | yes | 18 | 12 s |
| Comparative | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 14:11 | yes | 6 | 10 s |
| Comparative | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 15:45 | yes | 11 | 28 s |
| Comparative | Perplexity Sonar | sonar | 2026-11-01 19:19 | yes | 10 | 9 s |
| Comparative | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 15:45 | yes | 14 | 20 s |
| Comparative | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 11:15 | yes | 5 | 6 s |
| Comparative | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 13:42 | yes | 24 | 55 s |
| Comparative | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 15:20 | yes | 7 | 5 s |
| Comparative | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 17:26 | yes | 10 | 26 s |
| Comparative | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 15:13 | yes | 19 | 94 s |
| Comparative | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 17:13 | yes | 22 | 206 s |
| Comparative | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 08:58 | yes | 10 | 45 s |
| Comparative | GPT-6 Luna | gpt-6-luna | 2026-11-01 14:43 | yes | 9 | 32 s |
| Comparative | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 12:07 | yes | 24 | 45 s |
| Budget constrained | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 12:25 | yes | 19 | 12 s |
| Budget constrained | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 12:25 | yes | 3 | 5 s |
| Budget constrained | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 10:54 | yes | 6 | 25 s |
| Budget constrained | Perplexity Sonar | sonar | 2026-11-01 13:27 | yes | 10 | 4 s |
| Budget constrained | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 13:54 | yes | 13 | 11 s |
| Budget constrained | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 19:17 | yes | 5 | 6 s |
| Budget constrained | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 11:24 | yes | 24 | 14 s |
| Budget constrained | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 10:57 | yes | 5 | 2 s |
| Budget constrained | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 17:52 | yes | 15 | 93 s |
| Budget constrained | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 13:58 | yes | 23 | 44 s |
| Budget constrained | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 10:23 | yes | 25 | 82 s |
| Budget constrained | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 11:51 | yes | 14 | 39 s |
| Budget constrained | GPT-6 Luna | gpt-6-luna | 2026-11-01 15:24 | yes | 2 | 20 s |
| Budget constrained | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 09:33 | yes | 25 | 36 s |
| Scale constrained | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 17:32 | yes | 28 | 13 s |
| Scale constrained | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 14:32 | yes | 7 | 9 s |
| Scale constrained | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 11:55 | no | 0 | 20 s |
| Scale constrained | Perplexity Sonar | sonar | 2026-11-01 18:46 | yes | 10 | 11 s |
| Scale constrained | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 18:46 | yes | 14 | 16 s |
| Scale constrained | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 11:49 | no | 0 | 9 s |
| Scale constrained | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 09:05 | yes | 24 | 45 s |
| Scale constrained | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 10:25 | yes | 5 | 4 s |
| Scale constrained | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 15:24 | no | 0 | 30 s |
| Scale constrained | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 14:39 | yes | 25 | 28 s |
| Scale constrained | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 17:33 | yes | 13 | 162 s |
| Scale constrained | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 17:43 | yes | 10 | 21 s |
| Scale constrained | GPT-6 Luna | gpt-6-luna | 2026-11-01 19:20 | yes | 4 | 34 s |
| Scale constrained | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 17:55 | yes | 15 | 26 s |
| Negative framing | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 10:56 | yes | 38 | 12 s |
| Negative framing | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 17:20 | yes | 4 | 8 s |
| Negative framing | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 17:28 | yes | 7 | 30 s |
| Negative framing | Perplexity Sonar | sonar | 2026-11-01 17:23 | yes | 10 | 5 s |
| Negative framing | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 19:39 | yes | 13 | 15 s |
| Negative framing | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 10:50 | yes | 14 | 10 s |
| Negative framing | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 18:13 | yes | 24 | 64 s |
| Negative framing | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 18:33 | yes | 5 | 2 s |
| Negative framing | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 11:08 | yes | 25 | 77 s |
| Negative framing | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 13:33 | yes | 25 | 56 s |
| Negative framing | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 15:06 | yes | 25 | 41 s |
| Negative framing | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 14:13 | yes | 22 | 61 s |
| Negative framing | GPT-6 Luna | gpt-6-luna | 2026-11-01 13:39 | yes | 2 | 22 s |
| Negative framing | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 12:41 | yes | 21 | 30 s |
Normalization in this category
Every judgment call made between the raw labels and the numbers above, listed so it is visible and reversible.
ShowHide
Category-scoped readings
Akeyless read as Akeyless Identity Security Platform
Akeyless Platform read as Akeyless Identity Security Platform
AppViewX read as AppViewX CERT+
Astrix read as Astrix Security
Astrix (Cisco) read as Astrix Security
Astrix (now Cisco) read as Astrix Security
CyberArk read as CyberArk Identity Security Platform
CyberArk (Idira) read as CyberArk Identity Security Platform
CyberArk (Palo Alto Networks) read as CyberArk Identity Security Platform
CyberArk (Venafi) read as CyberArk Identity Security Platform
CyberArk (including Palo Alto Networks’ Idira) read as CyberArk Identity Security Platform
CyberArk (now Palo Alto Networks) read as CyberArk Identity Security Platform
CyberArk (now enhanced with Venafi) read as CyberArk Identity Security Platform
Delinea read as Delinea Secret Server
Delinea (formerly Thycotic) read as Delinea Secret Server
Entro read as Entro Security
Entro (now SailPoint) read as Entro Security
GitGuardian read as GitGuardian NHI Governance
GitGuardian Platform read as GitGuardian NHI Governance
HashiCorp read as HashiCorp Vault
Microsoft Entra read as Microsoft Entra ID
Microsoft Entra (Workload IDs) read as Microsoft Entra ID
Microsoft Entra (formerly Azure AD) read as Microsoft Entra ID
Microsoft Entra (formerly Azure Active Directory) read as Microsoft Entra ID
Oasis read as Oasis Security
Oasis (now Cyera) read as Oasis Security
Ping read as Ping Identity
SailPoint read as SailPoint Machine Identity Security
Saviynt read as Saviynt Identity Cloud
ServiceNow read as ServiceNow NHIM
ServiceNow (NHI Security / Veza) read as ServiceNow NHIM
Smallstep read as Smallstep Certificate Manager
Unresolved, counted raw
Arkion
Cremit
Defakto Security
Hidden layer
IBM Agent Identity
Microsoft Entra Agent ID
Microsoft Entra ID with Machine Identity Extensions
Okta for AI Agents
SGNL (now CrowdStrike)
SailPoint Agentic Fabric
Saviynt Identity Security / Zuma
Sonrai
Teleport Machine & Workload Identity
miniOrange REST API
Discontinued, still offered
No shut-down product was recommended here.