Non-human identity management for small business buyers
Asked as “non-human identity management platform”, and as “machine identity and service account security tool”, on behalf of a small B2B company. 51 first choices recorded across the direct, paraphrase, budget and scale prompts, fourteen models each. Added to the November 2026 Edition.
Standing · first-choice share
20%
Contested · Akeyless Identity Security Platform 16%
20JumpCloud16Akeyless Identity Security Platform10Aembit55others
20% of first choices, contested.
Since October 2026=heldSince October 2026: 20% → 20%, ±0 points. Inside the 11-point floor: within noise.JumpCloud held the lead, ±0 points on 20%, inside the 11-point floor.
By buyer segment
The same question asked on behalf of a different buyer. Each standing is computed within its segment; they sit side by side and are never added together.
Small business
JumpCloud20%Contested=heldSince October 2026: 20% → 20%, ±0 points. Inside the 11-point floor: within noise.This pageMid-marketJumpCloud22%Contested▲+8Since October 2026: 14% → 22%, +8 points. Inside the 11-point floor: within noise.Standing →Enterprise
CyberArk Identity Security Platform20%Contested=heldSince October 2026: 20% → 20%, ±0 points. Inside the 11-point floor: within noise.Standing →
JumpCloud20%Contested=heldSince October 2026: 20% → 20%, ±0 points. Inside the 11-point floor: within noise.This pageMid-marketJumpCloud22%Contested▲+8Since October 2026: 14% → 22%, +8 points. Inside the 11-point floor: within noise.Standing →EnterpriseCyberArk Identity Security Platform20%Contested=heldSince October 2026: 20% → 20%, ±0 points. Inside the 11-point floor: within noise.Standing →The standing
Share is the count of first choices across the direct, paraphrase, budget and scale prompts, over all fourteen models, for a small B2B company. Ordered by share.
ProductFirst-choice shareNegative rateLabelsQuadrantSince October 2026
01JumpCloud20%0%36accepted challenger=heldSince October 2026: 20% → 20%, ±0 points. Inside the 11-point floor: within noise.20% → 20%
JumpCloud20%0%36accepted challenger=heldSince October 2026: 20% → 20%, ±0 points. Inside the 11-point floor: within noise.20% → 20%02Akeyless Identity Security Platform16%13%45accepted challenger▲+12Since October 2026: 4% → 16%, +12 points. Past the 11-point floor: movement.4% → 16%
03
Infisical10%0%32accepted challenger=heldSince October 2026: 10% → 10%, ±0 points. Inside the 11-point floor: within noise.10% → 10%
Infisical10%0%32accepted challenger=heldSince October 2026: 10% → 10%, ±0 points. Inside the 11-point floor: within noise.10% → 10%04
Aembit10%5%37accepted challenger=heldSince October 2026: 10% → 10%, ±0 points. Inside the 11-point floor: within noise.10% → 10%
Aembit10%5%37accepted challenger=heldSince October 2026: 10% → 10%, ±0 points. Inside the 11-point floor: within noise.10% → 10%05
Doppler8%5%20accepted challenger▲+4Since October 2026: 4% → 8%, +4 points. Inside the 11-point floor: within noise.4% → 8%
Doppler8%5%20accepted challenger▲+4Since October 2026: 4% → 8%, +4 points. Inside the 11-point floor: within noise.4% → 8%06
GitGuardian NHI Governance6%5%20accepted challenger▲+2Since October 2026: 4% → 6%, +2 points. Inside the 11-point floor: within noise.4% → 6%
GitGuardian NHI Governance6%5%20accepted challenger▲+2Since October 2026: 4% → 6%, +2 points. Inside the 11-point floor: within noise.4% → 6%07
Microsoft Entra ID2%25%20criticized challenger▼−2Since October 2026: 4% → 2%, −2 points. Inside the 11-point floor: within noise.4% → 2%
Microsoft Entra ID2%25%20criticized challenger▼−2Since October 2026: 4% → 2%, −2 points. Inside the 11-point floor: within noise.4% → 2%08
Entro Security2%47%19criticized challenger▲+2Since October 2026: 0% → 2%, +2 points. Inside the 11-point floor: within noise.0% → 2%
Entro Security2%47%19criticized challenger▲+2Since October 2026: 0% → 2%, +2 points. Inside the 11-point floor: within noise.0% → 2%09
Okta2%45%20criticized challenger▼−2Since October 2026: 4% → 2%, −2 points. Inside the 11-point floor: within noise.4% → 2%
Okta2%45%20criticized challenger▼−2Since October 2026: 4% → 2%, −2 points. Inside the 11-point floor: within noise.4% → 2%10
Astrix Security2%52%25criticized challenger=heldSince October 2026: 2% → 2%, ±0 points. Inside the 11-point floor: within noise.2% → 2%
Astrix Security2%52%25criticized challenger=heldSince October 2026: 2% → 2%, ±0 points. Inside the 11-point floor: within noise.2% → 2%11
HashiCorp Vault2%56%41criticized challenger▼−4Since October 2026: 6% → 2%, −4 points. Inside the 11-point floor: within noise.6% → 2%
HashiCorp Vault2%56%41criticized challenger▼−4Since October 2026: 6% → 2%, −4 points. Inside the 11-point floor: within noise.6% → 2%12
SailPoint Machine Identity Security2%89%18criticized challenger=heldSince October 2026: 2% → 2%, ±0 points. Inside the 11-point floor: within noise.2% → 2%
SailPoint Machine Identity Security2%89%18criticized challenger=heldSince October 2026: 2% → 2%, ±0 points. Inside the 11-point floor: within noise.2% → 2%Show the five products at 0%, ordered by negative rate
17CyberArk Identity Security Platform0%86%21criticized challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%
CyberArk Identity Security Platform0%86%21criticized challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%16
Oasis Security0%74%19criticized challenger▼−2Since October 2026: 2% → 0%, −2 points. Inside the 11-point floor: within noise.2% → 0%
Oasis Security0%74%19criticized challenger▼−2Since October 2026: 2% → 0%, −2 points. Inside the 11-point floor: within noise.2% → 0%15
Saviynt Identity Cloud0%60%10criticized challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%
Saviynt Identity Cloud0%60%10criticized challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%14
One Identity0%18%11accepted challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%
One Identity0%18%11accepted challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%13
AWS Secrets Manager0%0%11accepted challenger▼−2Since October 2026: 2% → 0%, −2 points. Inside the 11-point floor: within noise.2% → 0%
AWS Secrets Manager0%0%11accepted challenger▼−2Since October 2026: 2% → 0%, −2 points. Inside the 11-point floor: within noise.2% → 0%The floor is 11 points of share, measured: how far the models move a leader on their own when the same questions are asked twice with nothing changed. A larger change is movement; a smaller one can't be told apart from repeat variation, and both are shown. Each index measures its own floor from its own repeat, over its own categories, so the floor differs from one index to the next. Both editions asked the same fourteen models. How the floor is measured
Bars are the share of first choices, 0 to 100Every product with at least 10 labels here. Every product name links to its product page.
For buyers
Head to headHead-to-head pages are published for mid-market buyers, so these open on mid-market figures, not small business.
All twenty-eight head-to-head pages: the top eight products, each against each
JumpCloud vs HashiCorp VaultJumpCloud vs GitGuardian NHI GovernanceJumpCloud vs SailPoint Machine Identity SecurityJumpCloud vs Token SecurityAkeyless Identity Security Platform vs AembitAkeyless Identity Security Platform vs Oasis SecurityAkeyless Identity Security Platform vs HashiCorp VaultAkeyless Identity Security Platform vs GitGuardian NHI GovernanceAkeyless Identity Security Platform vs SailPoint Machine Identity SecurityAkeyless Identity Security Platform vs Token SecurityAembit vs Oasis SecurityAembit vs HashiCorp VaultAembit vs GitGuardian NHI GovernanceAembit vs SailPoint Machine Identity SecurityAembit vs Token SecurityOasis Security vs HashiCorp VaultOasis Security vs GitGuardian NHI GovernanceOasis Security vs SailPoint Machine Identity SecurityOasis Security vs Token SecurityHashiCorp Vault vs GitGuardian NHI GovernanceHashiCorp Vault vs SailPoint Machine Identity SecurityHashiCorp Vault vs Token SecurityGitGuardian NHI Governance vs SailPoint Machine Identity SecurityGitGuardian NHI Governance vs Token SecuritySailPoint Machine Identity Security vs Token Security
Recommended versus criticized
Every product with at least 10 labels here, on both axes. The 30% line names a quadrant, not the verdict above: that one needs more than 40%.
Criticized challengerCriticized default
Negative label rate →
01A02
030405060708091011121314151617Accepted challengerEndorsed leader
0%First-choice share → · lines at 30% share and 25% negative30%
Key
01JumpCloud20%
JumpCloud20%02Akeyless Identity Security Platform16%
03Infisical10%
Infisical10%04Aembit10%
Aembit10%05Doppler8%
Doppler8%06GitGuardian NHI Governance6%
GitGuardian NHI Governance6%07Microsoft Entra ID2%
Microsoft Entra ID2%08Entro Security2%
Entro Security2%09Okta2%
Okta2%10Astrix Security2%
Astrix Security2%11HashiCorp Vault2%
HashiCorp Vault2%12SailPoint Machine Identity Security2%
SailPoint Machine Identity Security2%13AWS Secrets Manager0%
AWS Secrets Manager0%14One Identity0%
One Identity0%15Saviynt Identity Cloud0%
Saviynt Identity Cloud0%16Oasis Security0%
Oasis Security0%17CyberArk Identity Security Platform0%
CyberArk Identity Security Platform0%What they warned about
Two of fourteen models held their first choice under the paraphrase. Claude Haiku 4.5, GPT-5.4 mini, Perplexity Sonar, Grok 4.20, Mistral Small, DeepSeek V4 Flash, Llama 4 Maverick, Qwen 3.7 Flash, Kimi K2, GLM 4.7 FlashX, MiniMax M2.5 and GPT-6 Luna changed. A high negative share on a product with few labels is a warning. A low share on a product with many labels is salience, not sentiment.
SailPoint Machine Identity Security89%
16 of 18 labels negative · 12 of 14 models · 10 hard negative
“Don't buy Enterprise PAM yet: Solutions like SailPoint, Broadcom (Symantec), or Oracle IDCS are built for large enterprises ... overkill and too expensive” Qwen 3.7 Flash, budget prompt
CyberArk Identity Security Platform86%
18 of 21 labels negative · 12 of 14 models · 6 hard negative
“CyberArk can be slightly expensive compared to its competitors, making it unsuitable for small or medium businesses.” Claude Haiku 4.5, negative prompt
HashiCorp Vault56%
23 of 41 labels negative · 12 of 14 models · 6 hard negative
“Avoid starting with HashiCorp Vault unless you have a dedicated engineer to manage it—it's often too heavy for small, agile teams.” Qwen 3.7 Flash, comparative prompt
Astrix Security52%
13 of 25 labels negative · 8 of 14 models · 7 hard negative
“Avoid platforms with very high negative‑rate scores (SailPoint, Delinea, Astrix, Oasis, Okta, HashiCorp Vault)” GLM 4.7 FlashX, negative prompt
What they cite
Fourteen of the fourteen models returned a source list in this edition: five return the pages they cited and nine the search results they consulted.
Sites the answers cite
78 of 84 answers in this category came back with a source list, from 14 of 14 models: citations where the model returns them, or the search results it consulted. 963 links across 236 sites, every framing counted. Ranked by the number of answers carrying the site or page. 73 of the 252 answers across every segment cited this index's own page for the category; the method page measures whether that reading tilts an answer.
publisher (Gane)37 answers · 41 citations · 10 models
vendor site · One Identity33 answers · 35 citations · 10 models
vendor site · SourceForge32 answers · 35 citations · 9 models
29 answers · 36 citations · 10 models
29 answers · 32 citations · 11 models
25 answers · 25 citations · 11 models
vendor site · G224 answers · 38 citations · 10 models
vendor site · Akeyless20 answers · 31 citations · 11 models
18 answers · 23 citations · 10 models
vendor site · Microsoft18 answers · 21 citations · 10 models
vendor site · Aembit14 answers · 36 citations · 8 models
13 answers · 20 citations · 8 models
Pages the answers cite
The ten pages named in the most answers, by full address. A page here is one the models returned with a recommendation, not one the index endorses.
36 answers · 10 models
30 answers · 10 models
28 answers · 9 models
25 answers · 11 models
22 answers · 9 models
17 answers · 10 models
13 answers · 9 models
12 answers · 7 models
12 answers · 7 models
9 answers · 5 models
Search against answers
Each company's standing in the answers beside its site's footprint in Google search, one row a site: the products the models named on it with their shares, and the share they add up to; monthly searches on Google, and DataForSEO's estimate of AI search demand (modeled from search signals, directional, not a count of queries to any assistant), for the most-searched of the company's and its products' names (the name is in each row's hover text); estimated monthly organic visits to the site; and its best position in Google's top ten for “best non-human identity management platform”, “non-human identity management platforms”. US estimates from DataForSEO and Google's Ads Transparency Center. A small company's site, or a mid-sized company's site for its flagship, is marked company; a product on a large parent's site (Google, Microsoft) has no site figures. A column with no figures for this category is left out, and an empty cell means none were seen, not none exist. Two measurements side by side: neither is read as the cause of the other.
| Company and products | Share | Own site cited | Name searches, Google | AI search demand, est. | Organic visits | Paid search a month, est. | Google ads, last 30 days | Best Google position |
|---|---|---|---|---|---|---|---|---|
| JumpCloud jumpcloud.com | 20% | 365 | 12,100 | 244 | 108,479 | $8,612 | 80 | |
| Akeyless Identity Security Platform akeyless.io | 16% | 126 | 3,357 | $916 | 24 | 5 | ||
| Infisical infisical.com | 10% | 177 | 4,400 | 40 | 4,742 | 14 | ||
| Aembit aembit.io | 10% | 94 | 590 | 4 | 3,239 | 0 | ||
| Doppler doppler.com | 8% | 159 | 90,500 | 11,875 | 2,255 | 12 | ||
| GitGuardian NHI Governance gitguardian.com | 6% | 59 | 0 | 13,653 | 31 | 9 | ||
| Microsoft parent site Microsoft Entra Workload ID 4%, Microsoft Entra ID 2% | 6% | 499 | 2,240,000 | 403,136 | ||||
| AWS parent site AWS IAM Roles 2%, AWS Secrets Manager 0% | 2% | 195 | 368,000 | 114,001 | ||||
| Sectigo Certificate Manager sectigo.com | 2% | 177 | 880 | 2 | 64,855 | $809 | 34 | |
| Cakewalk cakewalk.security | 2% | 12 |
Google's top ten for the two searches hold 18 sites; 2 of them are among the sites the models cited here (akeyless.io, oneidentity.com). The first result for “best non-human identity management platform” is saviynt.com.
How they answered
Six framings of the same buying question, each sent to every model in a fresh session with search on. One row per model, so a row shows whether it held its answer under rewording, what it named when cost was the constraint, and what it argued against. Computed from the raw judge labels.ShowHide
How they answered
Six framings of the same buying question, each sent to every model in a fresh session with search on. One row per model, so a row shows whether it held its answer under rewording, what it named when cost was the constraint, and what it argued against. Computed from the raw judge labels.
ShowHideModelDirect“What is the best non-human identity management platform for a small B2B company?”Paraphrase“Which machine identity and service account security tool would you recommend to a small business that sells to other businesses?”Comparative“What are the top non-human identity management platforms for a small team and how do they differ?”Budget-constrained“What is the best non-human identity management platform for a small company with a tight budget?”Scale-constrained“We are a 30 person company evaluating a non-human identity management platform. What should we look at?”Negative“Which non-human identity management platforms should a small business avoid or be cautious about?”
Claude Haiku 4.5JumpCloudno first choiceChangedagainst: 1Password, Dashlane, LastPassDoppler, Infisicalagainst: CyberArk Identity Security Platform, HashiCorp VaultGitGuardian NHI Governanceno first choiceagainst: CyberArk Identity Security Platform, OneLogin, SailPoint Machine Identity Security
Two alternatives
Microsoft Entra ID, OneLoginTwo alternatives
Akeyless Identity Security Platform, GitGuardian NHI GovernanceTwo alternatives
JumpCloud, Sectigo Certificate ManagerGPT-5.4 miniAkeyless Identity Security Platformagainst: Okta, ThalesJumpCloudChangedAembit, Teleportagainst: CyberArk Identity Security Platform, KeycloakDopplerno first choiceagainst: OpenIAM, PlainID, SailPoint Machine Identity Security, Saviynt Identity Cloud
Two alternatives
Entro Security, GitGuardian NHI GovernanceTwo alternatives
Microsoft Entra ID, VenafiThree alternatives
Authentik, HashiCorp Vault, JumpCloudTwo alternatives
Entro Security, SPIFFE/SPIREGemini 3.5 FlashDoppler, Infisicalagainst: Entro Security, HashiCorp Vault, Oasis Security, Saviynt Identity CloudDoppler, InfisicalHeldInfisicalagainst: HashiCorp VaultInfisicalagainst: Astrix Security, Cisco, Cyera, Entro Security, Oasis Security, SailPoint Machine Identity Securityno first choiceagainst: Astrix Security, CyberArk Identity Security Platform, Digicert Enterprise PKI, Entro Security, HashiCorp Vault, Microsoft CA enterprise setups, Oasis Security
Five alternatives
AWS IAM Roles Anywhere, Akeyless Identity Security Platform, Azure Managed Identities, GCP Workload Identity Federation, GitGuardian NHI GovernanceSeven alternatives
AWS Secrets Manager, Akeyless Identity Security Platform, Astrix Security, Azure Key Vault, Entro Security, Google Secret Manager, HashiCorp VaultEight alternatives
1Password Secrets Manager, AWS Secrets Manager, Akeyless Identity Security Platform, Azure Key Vault, Bitwarden Secrets Manager, Doppler, Google Secret Manager, OryFour alternatives
Aembit, Bitwarden Secrets Manager, Doppler, Workload Identity FederationPerplexity SonarAkeyless Identity Security Platformagainst: Lumos, ZluriMicrosoft Entra Workload IDChangedagainst: CyberArk Identity Security Platform, Delinea Secret ServerAkeyless Identity Security Platform, GitGuardian NHI Governanceagainst: Microsoft Entra ID, Oasis SecurityAkeyless Identity Security Platformagainst: Astrix Security, Entro Security, HashiCorp Vault, Oasis Security, One Identityno first choiceagainst: Astrix Security, CyberArk Identity Security Platform, Entro Security, Oasis Security, Ory, SPIFFE/SPIRE, SailPoint Machine Identity Security, Saviynt Identity Cloud, ServiceNow identity modules, Token Security
Three alternatives
Aembit, Astrix Security, InfisicalOne alternative
SailPoint Machine Identity SecurityThree alternatives
Aembit, Astrix Security, Entro SecurityTwo alternatives
Aembit, JumpCloudGrok 4.20Akeyless Identity Security Platformagainst: CyberArk Identity Security Platform, Defakto, Okta, One IdentityInfisicalChangedagainst: Akeyless Identity Security PlatformAembit, Infisicalagainst: Akeyless Identity Security Platform, GitGuardian NHI Governance, HashiCorp Vault, Microsoft Entra ID, Oasis Security, OktaGitGuardian NHI Governanceagainst: HashiCorp VaultAkeyless Identity Security Platform, Astrix Security, Entro Securityagainst: Andromeda, Astrix Security, Britive, Clutch Security, Microsoft-heavy setups, Oasis Security, Okta, P0 Security, SailPoint Machine Identity Security
Four alternatives
Astrix Security, Entro Security, HashiCorp Boundary, HashiCorp VaultThree alternatives
Doppler, HashiCorp Vault, Microsoft Entra Workload IDTwo alternatives
Astrix Security, Entro SecurityTwo alternatives
Akeyless Identity Security Platform, JumpCloudFive alternatives
Defakto, GitGuardian NHI Governance, Microsoft Entra ID, Okta, One IdentityMistral SmallOktaSectigo Certificate ManagerChangedJumpCloudagainst: HashiCorp VaultAkeyless Identity Security Platformno first choiceagainst: Astrix Security, Delinea Secret Server, Oasis Security, Okta, SailPoint Machine Identity Security
Three alternatives
Akeyless Identity Security Platform, Microsoft Entra ID, One IdentityThree alternatives
AppViewX CERT+, Microsoft Entra ID, ZluriTwo alternatives
Aembit, InfisicalTwo alternatives
JumpCloud, OktaDeepSeek V4 FlashAembitagainst: Astrix Security, CyberArk Identity Security Platform, Delinea Secret Server, HashiCorp Vault, Microsoft Entra ID, Oasis Security, SailPoint Machine Identity SecurityAkeyless Identity Security PlatformChangedAembitagainst: HashiCorp VaultGitGuardian NHI Governance, JumpCloudagainst: Aembit, Akeyless Identity Security Platform, Astrix Security, Defakto, Entro Security, Sonrai SecurityAembitagainst: Akeyless Identity Security Platform, Astrix Security, CyberArk Identity Security Platform, Entro Security, SailPoint Machine Identity Securityagainst: CyberArk Conjur, CyberArk Identity Security Platform, HashiCorp Vault, OpenBao, SailPoint Machine Identity Security
Two alternatives
Infisical, JumpCloudOne alternative
SecurdenThree alternatives
GitGuardian NHI Governance, Infisical, JumpCloudTwo alternatives
HashiCorp Vault, InfisicalThree alternatives
Authentik, Microsoft Entra ID, OktaLlama 4 Maverickno first choiceSailPoint Machine Identity SecurityChangedno first choiceno first choiceno first choiceagainst: CyberArk Identity Security Platform, IBM ISAM, Oracle Identity Governance, SailPoint IdentityIQ, Saviynt Identity Cloud
One alternative
JumpCloudQwen 3.7 FlashAkeyless Identity Security PlatformDopplerChangedagainst: HashiCorp VaultAembit, GitGuardian NHI Governanceagainst: HashiCorp VaultJumpCloudagainst: Broadcom, Oracle IDCS, SailPoint Machine Identity SecurityAembit, JumpCloudagainst: CyberArk Identity Security Platform, SailPoint Machine Identity Security, Saviynt Identity Cloudagainst: BeyondTrust, CyberArk Identity Security Platform, HashiCorp Vault, Thycotic
Four alternatives
AWS Secrets Manager, Azure Key Vault, Doppler, HashiCorp VaultOne alternative
InfisicalTwo alternatives
Infisical, JumpCloudSix alternatives
AWS IAM Roles, Akeyless Identity Security Platform, Azure Managed Identities, CyberArk Conjur, GitGuardian NHI Governance, HashiCorp VaultFour alternatives
AWS Secrets Manager, GitGuardian NHI Governance, Google Secret Manager, HashiCorp VaultKimi K2HashiCorp Vaultagainst: Aembit, Astrix Security, Entro Security, Oasis Security, Token Security1PasswordChangedagainst: CyberArk Identity Security Platform, HashiCorp Vault, SailPoint Machine Identity SecurityAembit, Infisicalagainst: Akeyless Identity Security Platform, Astrix Security, Doppler, Entro Security, HashiCorp Vault, Oasis Security, Token SecurityJumpCloudno first choiceagainst: Akeyless Identity Security Platform, Bridgecrew, Idira, Microsoft Entra ID, Okta, SailPoint Machine Identity Security, ServiceNow NHIM, Veza
Eight alternatives
1Password, AWS Secrets Manager, Azure Key Vault, Bitwarden Secrets Manager, Doppler, Google Secret Manager, Infisical, JumpCloudTwo alternatives
Doppler, Microsoft Entra Workload IDOne alternative
JumpCloudFour alternatives
Akeyless Identity Security Platform, Doppler, HashiCorp Vault, InfisicalGLM 4.7 FlashXJumpCloudMicrosoft Entra Workload IDChangedJumpCloudAembitagainst: SailPoint Entrono first choiceagainst: AppViewX CERT+, Astrix Security, CyberArk Identity Security Platform, Delinea Secret Server, HashiCorp Vault, Keyfactor, Microsoft Entra ID, Oasis Security, Okta, SailPoint Machine Identity Security
Two alternatives
Aembit, Auth0Three alternatives
HashiCorp Vault, Microsoft Cloud PKI, PKI Solutions FreshStartFive alternatives
Aembit, Akeyless Identity Security Platform, HashiCorp Vault, Infisical, Microsoft Entra Workload IDTwo alternatives
Akeyless Identity Security Platform, JumpCloudMiniMax M2.5Cakewalk, JumpCloudMicrosoft Entra IDChangedJumpCloudagainst: HashiCorp VaultInfisicalno first choiceagainst: HashiCorp Vault, Okta, SailPoint Machine Identity Security
Two alternatives
Oasis Security, Token SecurityTwo alternatives
Bitwarden Secrets Manager, Cisco DuoThree alternatives
Aembit, Akeyless Identity Security Platform, InfisicalTwo alternatives
Aembit, JumpCloudGPT-6 LunaAWS IAM Roles, Azure managed identities for workloads, Google Cloud Workload Identity FederationKeeperPAMChangedAembitAembitno first choiceagainst: Astrix Security, Oasis Securityagainst: CyberArk Identity Security Platform, HashiCorp Vault, Microsoft Entra Workload ID, SailPoint Machine Identity Security
Two alternatives
Akeyless Identity Security Platform, Entro SecurityOne alternative
Akeyless Identity Security PlatformFour alternatives
AWS IAM, Cisco Astrix, P0 Security, SailPoint EntroOne alternative
InfisicalTwo alternatives
AWS IAM Roles, GitHub Actions OIDCMuse Glimmer 30BJumpCloudagainst: HashiCorp VaultJumpCloudHeldagainst: CyberArk Identity Security Platform, Keyfactor, VenafiAembit, Doppler, Infisicalagainst: HashiCorp VaultOpenA2A AIM - Agent Identity Managementno first choiceagainst: CyberArk Identity Security Platform, HashiCorp Vault, IBM ISAM, Okta, Oracle Identity Governance, SailPoint IdentityIQ, Saviynt Identity Cloud, ServiceNow NHI Security
Two alternatives
Aembit, InfisicalTwo alternatives
ManageEngine Password Manager Pro, Microsoft Entra Workload IDOne alternative
JumpCloudSix alternatives
Akeyless Identity Security Platform, Cerbos, HashiCorp Vault, JumpCloud, SPIFFE/SPIRE, cert-managerBold is the first choiceAlternatives are counted; the count opens them.What the answer argued against
The record
One row per call: the version string exactly as returned, whether the model searched, sources cited, and latency.
Eighty-four rows: every prompt, every model, every answer.
| Prompt | Model | Version string | Time (UTC) | Searched | Sources | Latency |
|---|---|---|---|---|---|---|
| Direct recommendation | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 10:43 | yes | 9 | 6 s |
| Direct recommendation | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 12:54 | yes | 4 | 5 s |
| Direct recommendation | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 09:53 | yes | 4 | 20 s |
| Direct recommendation | Perplexity Sonar | sonar | 2026-11-01 19:37 | yes | 10 | 3 s |
| Direct recommendation | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 16:23 | yes | 5 | 12 s |
| Direct recommendation | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 14:05 | yes | 5 | 5 s |
| Direct recommendation | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 14:16 | yes | 22 | 26 s |
| Direct recommendation | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 11:32 | yes | 5 | 2 s |
| Direct recommendation | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 12:01 | no | 0 | 32 s |
| Direct recommendation | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 17:51 | yes | 19 | 45 s |
| Direct recommendation | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 19:21 | yes | 25 | 34 s |
| Direct recommendation | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 16:21 | yes | 5 | 25 s |
| Direct recommendation | GPT-6 Luna | gpt-6-luna | 2026-11-01 08:39 | yes | 3 | 17 s |
| Direct recommendation | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 19:43 | yes | 23 | 30 s |
| Paraphrase | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 13:04 | no | 0 | 5 s |
| Paraphrase | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 12:59 | yes | 2 | 5 s |
| Paraphrase | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 15:09 | no | 0 | 17 s |
| Paraphrase | Perplexity Sonar | sonar | 2026-11-01 14:16 | yes | 10 | 3 s |
| Paraphrase | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 18:05 | yes | 5 | 8 s |
| Paraphrase | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 10:07 | yes | 5 | 5 s |
| Paraphrase | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 15:24 | yes | 24 | 23 s |
| Paraphrase | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 13:50 | yes | 5 | 6 s |
| Paraphrase | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 09:59 | yes | 10 | 32 s |
| Paraphrase | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 18:45 | yes | 25 | 31 s |
| Paraphrase | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 16:02 | yes | 14 | 41 s |
| Paraphrase | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 12:49 | yes | 14 | 34 s |
| Paraphrase | GPT-6 Luna | gpt-6-luna | 2026-11-01 17:59 | yes | 2 | 17 s |
| Paraphrase | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 12:36 | yes | 24 | 33 s |
| Comparative | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 18:22 | yes | 9 | 10 s |
| Comparative | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 12:52 | yes | 5 | 8 s |
| Comparative | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 19:40 | yes | 4 | 26 s |
| Comparative | Perplexity Sonar | sonar | 2026-11-01 09:16 | yes | 10 | 6 s |
| Comparative | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 16:53 | yes | 23 | 20 s |
| Comparative | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 08:40 | yes | 5 | 6 s |
| Comparative | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 10:53 | yes | 24 | 34 s |
| Comparative | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 09:38 | yes | 5 | 3 s |
| Comparative | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 15:00 | yes | 5 | 20 s |
| Comparative | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 11:27 | yes | 23 | 57 s |
| Comparative | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 11:32 | yes | 14 | 191 s |
| Comparative | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 14:41 | yes | 22 | 60 s |
| Comparative | GPT-6 Luna | gpt-6-luna | 2026-11-01 14:17 | yes | 5 | 30 s |
| Comparative | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 12:59 | yes | 24 | 33 s |
| Budget constrained | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 12:06 | yes | 17 | 7 s |
| Budget constrained | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 15:25 | yes | 5 | 8 s |
| Budget constrained | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 12:59 | yes | 5 | 23 s |
| Budget constrained | Perplexity Sonar | sonar | 2026-11-01 17:19 | yes | 10 | 4 s |
| Budget constrained | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 15:40 | yes | 22 | 14 s |
| Budget constrained | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 15:51 | yes | 5 | 5 s |
| Budget constrained | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 17:50 | yes | 24 | 25 s |
| Budget constrained | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 10:41 | yes | 5 | 3 s |
| Budget constrained | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 14:17 | yes | 22 | 75 s |
| Budget constrained | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 16:50 | yes | 24 | 29 s |
| Budget constrained | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 14:11 | yes | 24 | 21 s |
| Budget constrained | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 17:19 | yes | 20 | 44 s |
| Budget constrained | GPT-6 Luna | gpt-6-luna | 2026-11-01 12:03 | yes | 2 | 16 s |
| Budget constrained | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 19:40 | yes | 14 | 22 s |
| Scale constrained | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 13:32 | no | 0 | 6 s |
| Scale constrained | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 14:24 | yes | 2 | 9 s |
| Scale constrained | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 09:23 | no | 0 | 17 s |
| Scale constrained | Perplexity Sonar | sonar | 2026-11-01 09:10 | yes | 10 | 6 s |
| Scale constrained | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 14:24 | yes | 14 | 17 s |
| Scale constrained | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 14:16 | no | 0 | 8 s |
| Scale constrained | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 12:52 | yes | 21 | 42 s |
| Scale constrained | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 10:56 | yes | 5 | 2 s |
| Scale constrained | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 17:23 | yes | 13 | 58 s |
| Scale constrained | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 11:44 | yes | 15 | 21 s |
| Scale constrained | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 15:28 | yes | 13 | 37 s |
| Scale constrained | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 16:55 | yes | 9 | 28 s |
| Scale constrained | GPT-6 Luna | gpt-6-luna | 2026-11-01 17:44 | yes | 3 | 18 s |
| Scale constrained | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 15:55 | yes | 20 | 25 s |
| Negative framing | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 12:40 | yes | 19 | 8 s |
| Negative framing | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 11:26 | yes | 3 | 4 s |
| Negative framing | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 10:19 | yes | 6 | 22 s |
| Negative framing | Perplexity Sonar | sonar | 2026-11-01 17:22 | yes | 10 | 5 s |
| Negative framing | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 18:03 | yes | 11 | 16 s |
| Negative framing | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 16:49 | yes | 5 | 4 s |
| Negative framing | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 16:00 | yes | 23 | 50 s |
| Negative framing | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 08:51 | yes | 5 | 3 s |
| Negative framing | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 18:03 | yes | 14 | 46 s |
| Negative framing | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 13:06 | yes | 25 | 37 s |
| Negative framing | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 19:16 | yes | 14 | 74 s |
| Negative framing | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 09:36 | yes | 24 | 62 s |
| Negative framing | GPT-6 Luna | gpt-6-luna | 2026-11-01 11:52 | yes | 3 | 18 s |
| Negative framing | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 18:59 | yes | 20 | 27 s |
Normalization in this category
Every judgment call made between the raw labels and the numbers above, listed so it is visible and reversible.
ShowHide
Category-scoped readings
Akeyless read as Akeyless Identity Security Platform
Akeyless Platform read as Akeyless Identity Security Platform
AppViewX read as AppViewX CERT+
Astrix read as Astrix Security
CyberArk read as CyberArk Identity Security Platform
CyberArk (including Conjur Cloud & Venafi) read as CyberArk Identity Security Platform
Delinea read as Delinea Secret Server
Delinea (formerly CyberArk Secret Server) read as Delinea Secret Server
Entro read as Entro Security
GitGuardian read as GitGuardian NHI Governance
GitGuardian Platform read as GitGuardian NHI Governance
Microsoft Entra read as Microsoft Entra ID
Oasis read as Oasis Security
SailPoint read as SailPoint Machine Identity Security
SailPoint's Machine Identity Security read as SailPoint Machine Identity Security
Saviynt read as Saviynt Identity Cloud
Sectigo read as Sectigo Certificate Manager
ServiceNow Non-Human Identity Management / NHI Security read as ServiceNow NHI Security
Smallstep read as Smallstep Certificate Manager
Unresolved, counted raw
AWS IAM roles, IAM Access Analyzer, and AWS Secrets Manager
Azure managed identities for workloads
Cisco Astrix
Digicert Enterprise PKI
GitHub Actions OIDC
Google Cloud Workload Identity Federation
Google Cloud service accounts and Workload Identity Federation
Kubernetes workload identity
Microsoft CA enterprise setups
Microsoft Entra ID Workload Identities
Microsoft-heavy setups
OpenA2A AIM - Agent Identity Management
Oracle IDCS
PKI Solutions FreshStart
PlainID
ServiceNow identity modules
Workload Identity Federation
Discontinued, still offered
No shut-down product was recommended here.