Privileged access management for enterprise buyers
Asked as “privileged access management platform”, and as “PAM tool”, on behalf of an enterprise B2B company. 51 first choices recorded across the direct, paraphrase, budget and scale prompts, fourteen models each.
Standing · first-choice share
51%
Clear leader
51CyberArk Privileged Access Manager18ManageEngine PAM36012BeyondTrust20others
51% of first choices, clear leader.
Since October 2026▼−5Since October 2026: 56% → 51%, −5 points. Inside the 11-point floor: within noise.CyberArk Privileged Access Manager held the lead, −5 points on 56%, inside the 11-point floor.
By buyer segment
The same question asked on behalf of a different buyer. Each standing is computed within its segment; they sit side by side and are never added together.
Small business
KeeperPAM39%Contested↗new leaderNew leader since October 2026: KeeperPAM (39%) replaces ManageEngine PAM360 (33% then, 11% now), 28 points clear, past the 11-point floor.Standing →Mid-market
Delinea Secret Server39%Contested▲+2Since October 2026: 37% → 39%, +2 points. Inside the 11-point floor: within noise.Standing →Enterprise
CyberArk Privileged Access Manager51%Clear leader▼−5Since October 2026: 56% → 51%, −5 points. Inside the 11-point floor: within noise.This page
KeeperPAM39%Contested↗new leaderNew leader since October 2026: KeeperPAM (39%) replaces ManageEngine PAM360 (33% then, 11% now), 28 points clear, past the 11-point floor.Standing →Mid-marketDelinea Secret Server39%Contested▲+2Since October 2026: 37% → 39%, +2 points. Inside the 11-point floor: within noise.Standing →EnterpriseCyberArk Privileged Access Manager51%Clear leader▼−5Since October 2026: 56% → 51%, −5 points. Inside the 11-point floor: within noise.This pageThe standing
Share is the count of first choices across the direct, paraphrase, budget and scale prompts, over all fourteen models, for an enterprise B2B company. Ordered by share.
ProductFirst-choice shareNegative rateLabelsQuadrantSince October 2026
01CyberArk Privileged Access Manager51%29%73criticized default▼−5Since October 2026: 56% → 51%, −5 points. Inside the 11-point floor: within noise.56% → 51%
CyberArk Privileged Access Manager51%29%73criticized default▼−5Since October 2026: 56% → 51%, −5 points. Inside the 11-point floor: within noise.56% → 51%02
ManageEngine PAM36018%13%31accepted challenger▲+6Since October 2026: 12% → 18%, +6 points. Inside the 11-point floor: within noise.12% → 18%
ManageEngine PAM36018%13%31accepted challenger▲+6Since October 2026: 12% → 18%, +6 points. Inside the 11-point floor: within noise.12% → 18%03
BeyondTrust12%14%69accepted challenger▲+2Since October 2026: 10% → 12%, +2 points. Inside the 11-point floor: within noise.10% → 12%
BeyondTrust12%14%69accepted challenger▲+2Since October 2026: 10% → 12%, +2 points. Inside the 11-point floor: within noise.10% → 12%04Delinea Secret Server10%16%69accepted challenger▲+2Since October 2026: 8% → 10%, +2 points. Inside the 11-point floor: within noise.8% → 10%
Delinea Secret Server10%16%69accepted challenger▲+2Since October 2026: 8% → 10%, +2 points. Inside the 11-point floor: within noise.8% → 10%05KeeperPAM4%11%18accepted challenger=heldSince October 2026: 4% → 4%, ±0 points. Inside the 11-point floor: within noise.4% → 4%
KeeperPAM4%11%18accepted challenger=heldSince October 2026: 4% → 4%, ±0 points. Inside the 11-point floor: within noise.4% → 4%06
One Identity Safeguard2%13%30accepted challenger▲+2Since October 2026: 0% → 2%, +2 points. Inside the 11-point floor: within noise.0% → 2%
One Identity Safeguard2%13%30accepted challenger▲+2Since October 2026: 0% → 2%, +2 points. Inside the 11-point floor: within noise.0% → 2%Show the four products at 0%, ordered by negative rate
09
Microsoft Entra Privileged Identity Management0%33%15criticized challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%
Microsoft Entra Privileged Identity Management0%33%15criticized challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%10
WALLIX Bastion0%25%16criticized challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%
WALLIX Bastion0%25%16criticized challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%08
HashiCorp Vault0%14%22accepted challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%
HashiCorp Vault0%14%22accepted challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%07
Teleport0%6%18accepted challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%
Teleport0%6%18accepted challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%The floor is 11 points of share, measured: how far the models move a leader on their own when the same questions are asked twice with nothing changed. A larger change is movement; a smaller one can't be told apart from repeat variation, and both are shown. Each index measures its own floor from its own repeat, over its own categories, so the floor differs from one index to the next. Both editions asked the same fourteen models. How the floor is measured
Bars are the share of first choices, 0 to 100Every product with at least 10 labels here. Every product name links to its product page.
For buyers
Head to head
Delinea Secret Server vs ManageEngine PAM360Delinea Secret Server vs KeeperPAMDelinea Secret Server vs miniOrange PAM
Head-to-head pages are published for mid-market buyers, so these open on mid-market figures, not enterprise.All twenty-one head-to-head pages: the top seven products, each against each
Delinea Secret Server vs BeyondTrustDelinea Secret Server vs Securden Unified PAMDelinea Secret Server vs StrongDMManageEngine PAM360 vs KeeperPAMManageEngine PAM360 vs miniOrange PAMManageEngine PAM360 vs BeyondTrustManageEngine PAM360 vs Securden Unified PAMManageEngine PAM360 vs StrongDMKeeperPAM vs miniOrange PAMKeeperPAM vs BeyondTrustKeeperPAM vs Securden Unified PAMKeeperPAM vs StrongDMminiOrange PAM vs BeyondTrustminiOrange PAM vs Securden Unified PAMminiOrange PAM vs StrongDMBeyondTrust vs Securden Unified PAMBeyondTrust vs StrongDMSecurden Unified PAM vs StrongDM
Recommended versus criticized
Every product with at least 10 labels here, on both axes. The 30% line names a quadrant, not the verdict above: that one needs more than 40%.
Criticized challengerCriticized default
Negative label rate →
01020304050607080910Accepted challengerEndorsed leader
0%First-choice share → · lines at 30% share and 25% negative70%
Key
01CyberArk Privileged Access Manager51%
CyberArk Privileged Access Manager51%02ManageEngine PAM36018%
ManageEngine PAM36018%03BeyondTrust12%
BeyondTrust12%04Delinea Secret Server10%
Delinea Secret Server10%05KeeperPAM4%
KeeperPAM4%06One Identity Safeguard2%
One Identity Safeguard2%07Teleport0%
Teleport0%08HashiCorp Vault0%
HashiCorp Vault0%09Microsoft Entra Privileged Identity Management0%
Microsoft Entra Privileged Identity Management0%10WALLIX Bastion0%
WALLIX Bastion0%What they warned about
Ten of fourteen models held their first choice under the paraphrase. Claude Haiku 4.5, GPT-5.4 mini, Perplexity Sonar and MiniMax M2.5 changed. A high negative share on a product with few labels is a warning. A low share on a product with many labels is salience, not sentiment.
CyberArk Privileged Access Manager29%
21 of 73 labels negative · 12 of 14 models · 2 hard negative
“Avoid: CyberArk if cost predictability is your top priority — its component-based licensing and high implementation costs make TTO ... difficult to forecast.” Kimi K2, budget prompt
Delinea Secret Server16%
11 of 69 labels negative · 10 of 14 models · 2 hard negative
“Caution Level: HIGH ... four critical Secret Server vulnerabilities, including an authentication-bypass flaw rated CVSS 9.8” Kimi K2, negative prompt
BeyondTrust14%
10 of 69 labels negative · 8 of 14 models · 1 hard negative
“Avoid the large enterprise PAM leaders (CyberArk, BeyondTrust, Delinea)” MiniMax M2.5, budget prompt
Microsoft Entra Privileged Identity Management33%
5 of 15 labels negative · 5 of 14 models
“good if your needs are mostly Microsoft-centric, but it is usually not enough by itself for a full enterprise PAM program” GPT-5.4 mini, direct prompt
What they cite
Fourteen of the fourteen models returned a source list in this edition: five return the pages they cited and nine the search results they consulted.
Sites the answers cite
74 of 84 answers in this category came back with a source list, from 14 of 14 models: citations where the model returns them, or the search results it consulted. 908 links across 227 sites, every framing counted. Ranked by the number of answers carrying the site or page. 38 of the 252 answers across every segment cited this index's own page for the category; the method page measures whether that reading tilts an answer.
30 answers · 37 citations · 11 models
25 answers · 27 citations · 10 models
vendor site · BeyondTrust23 answers · 28 citations · 9 models
22 answers · 22 citations · 11 models
vendor site · Delinea21 answers · 38 citations · 7 models
vendor site · ManageEngine20 answers · 25 citations · 12 models
20 answers · 21 citations · 8 models
18 answers · 20 citations · 10 models
vendor site · One Identity17 answers · 19 citations · 8 models
vendor site · Akeyless16 answers · 23 citations · 8 models
15 answers · 16 citations · 5 models
15 answers · 15 citations · 9 models
Pages the answers cite
The ten pages named in the most answers, by full address. A page here is one the models returned with a recommendation, not one the index endorses.
22 answers · 11 models
22 answers · 9 models
18 answers · 9 models
18 answers · 8 models
14 answers · 8 models
14 answers · 5 models
10 answers · 5 models
10 answers · 7 models
9 answers · 5 models
9 answers · 6 models
Search against answers
Each company's standing in the answers beside its site's footprint in Google search, one row a site: the products the models named on it with their shares, and the share they add up to; monthly searches on Google, and DataForSEO's estimate of AI search demand (modeled from search signals, directional, not a count of queries to any assistant), for the most-searched of the company's and its products' names (the name is in each row's hover text); estimated monthly organic visits to the site; and its best position in Google's top ten for “best privileged access management platform”, “privileged access management platform”, “privileged access management platforms”. US estimates from DataForSEO and Google's Ads Transparency Center. A small company's site, or a mid-sized company's site for its flagship, is marked company; a product on a large parent's site (Google, Microsoft) has no site figures. A column with no figures for this category is left out, and an empty cell means none were seen, not none exist. Two measurements side by side: neither is read as the cause of the other.
| Company and products | Share | Own site cited | Name searches, Google | AI search demand, est. | Organic visits | Paid search a month, est. | Google ads, last 30 days | Best Google position |
|---|---|---|---|---|---|---|---|---|
| CyberArk paloaltonetworks.com CyberArk Privileged Access Manager 51% | 51% | 158 | 22,200 | 1,253 | 951,391 | $383 | 106 | 2 |
| ManageEngine parent site ManageEngine PAM360 18% | 18% | 128 | 8,100 | 675 | ||||
| BeyondTrust beyondtrust.com BeyondTrust 12%, BeyondTrust Pathfinder 0% | 12% | 159 | 6,600 | 377 | 91,200 | $1,820 | 120 | 6 |
| Delinea delinea.com Delinea Secret Server 10% | 10% | 197 | 6,600 | 218 | 85,859 company | $78 | 91 | 5 |
| KeeperPAM keeper.io | 4% | 110 | 170 | 1 | 144,125 | |||
| One Identity oneidentity.com One Identity Safeguard 2% | 2% | 61 | 1,600 | 405 | 40,708 company | 0 | ||
| Idira | 2% | |||||||
| CyberArk PAM | 2% | |||||||
| Teleport goteleport.com | 0% | 82 | 60,500 | 18,942 | 199,418 | $157 | 11 | |
| HashiCorp hashicorp.com HashiCorp Vault 0%, HashiCorp Boundary 0%, HashiCorp 0% | 0% | 400 | 5,400 | 317 | 173,934 | $26 | 29 |
Google's top ten for the three searches hold 22 sites; 3 of them are among the sites the models cited here (beyondtrust.com, delinea.com, manageengine.com). The first result for “best privileged access management platform” is gartner.com.
How they answered
Six framings of the same buying question, each sent to every model in a fresh session with search on. One row per model, so a row shows whether it held its answer under rewording, what it named when cost was the constraint, and what it argued against. Computed from the raw judge labels.ShowHide
How they answered
Six framings of the same buying question, each sent to every model in a fresh session with search on. One row per model, so a row shows whether it held its answer under rewording, what it named when cost was the constraint, and what it argued against. Computed from the raw judge labels.
ShowHideModelDirect“What is the best privileged access management platform for an enterprise B2B company?”Paraphrase“Which PAM tool would you recommend to a large B2B company with thousands of employees?”Comparative“What are the top enterprise-grade privileged access management platforms and how do they differ?”Budget-constrained“What is the best privileged access management platform for a large company that needs predictable total cost across thousands of users?”Scale-constrained“We are a 5,000 person company with SSO, SOC 2 and procurement review requirements evaluating a privileged access management platform. What should we look at?”Negative“Which privileged access management platforms should a large enterprise avoid or be cautious about?”
Claude Haiku 4.5no first choiceCyberArk Privileged Access ManagerChangedagainst: Delinea Secret Server, ManageEngine PAM360CyberArk Privileged Access ManagerKeeperPAMagainst: CyberArk Privileged Access Managerno first choiceagainst: Securden Unified PAM
Two alternatives
BeyondTrust, One Identity SafeguardFive alternatives
BeyondTrust, Delinea Secret Server, HashiCorp Vault, One Identity Privileged Management, StrongDMThree alternatives
BeyondTrust, Delinea Secret Server, PAM360GPT-5.4 miniCyberArk Privileged Access Manageragainst: Microsoft Entra Privileged Identity ManagementBeyondTrustChangedCyberArk Privileged Access ManagerManageEngine PAM360no first choicenothing named
Two alternatives
BeyondTrust, Delinea Secret ServerFour alternatives
CyberArk Privileged Access Manager, Delinea Secret Server, Microsoft Entra Privileged Identity Management, One Identity SafeguardFour alternatives
BeyondTrust, Delinea Secret Server, Microsoft Entra Privileged Identity Management, One Identity SafeguardThree alternatives
BeyondTrust, CyberArk Privileged Access Manager, Delinea Secret ServerGemini 3.5 FlashCyberArk Privileged Access ManagerCyberArk Privileged Access ManagerHeldCyberArk Privileged Access ManagerDelinea Secret Serveragainst: CyberArk Privileged Access Managerno first choiceagainst: Bitwarden, Dashlane, Delinea Secret Server, LastPass, Symantec Privileged Access Manager
Four alternatives
BeyondTrust, Delinea Secret Server, HashiCorp Vault, TeleportFour alternatives
BeyondTrust, Delinea Secret Server, HashiCorp Boundary, HashiCorp VaultFive alternatives
BeyondTrust, Delinea Secret Server, HashiCorp, Microsoft Entra Privileged Identity Management, TeleportFour alternatives
BeyondTrust, KeeperPAM, ManageEngine PAM360, TeleportPerplexity SonarCyberArk Privileged Access Manageragainst: Microsoft Entra Privileged Identity Management, StrongDM, TeleportCyberArk PAMChangedCyberArk Privileged Access ManagerManageEngine PAM360against: CyberArk Privileged Access ManagerBeyondTrust, CyberArk Privileged Access Manageragainst: BeyondTrust, CyberArk Privileged Access Manager, Delinea Secret Server, JumpCloud, ManageEngine PAM360, Symantec PAM / Broadcom, ThreatLocker Elevation Control, Venice
Two alternatives
BeyondTrust, Delinea Secret ServerThree alternatives
BeyondTrust, Delinea Secret Server, One Identity SafeguardSix alternatives
BeyondTrust, Delinea Secret Server, HashiCorp Vault, ManageEngine PAM360, Microsoft Entra Privileged Identity Management, One Identity SafeguardTwo alternatives
BeyondTrust, Delinea Secret ServerOne alternative
Delinea Secret ServerGrok 4.20CyberArk Privileged Access ManagerCyberArk Privileged Access ManagerHeldCyberArk Privileged Access Manageragainst: KeeperPAMDelinea Secret Server, ManageEngine PAM360against: BeyondTrust, CyberArk Privileged Access ManagerCyberArk Privileged Access Manageragainst: CA PAM, CyberArk Privileged Access Manager, Delinea Secret Server, One Identity Safeguard, WALLIX Bastion
Two alternatives
BeyondTrust, Delinea Secret ServerThree alternatives
BeyondTrust, Delinea Secret Server, ManageEngine PAM360Four alternatives
BeyondTrust, Delinea Secret Server, HashiCorp Vault, TeleportFour alternatives
BeyondTrust, Delinea Secret Server, One Identity Safeguard, WALLIX BastionMistral SmallCyberArk Privileged Access ManagerCyberArk Privileged Access ManagerHeldCyberArk Privileged Access Manageragainst: KeeperPAMManageEngine PAM360against: BeyondTrust, CyberArk Privileged Access Manager, Delinea Secret Serverno first choiceagainst: BeyondTrust, CyberArk Privileged Access Manager, HashiCorp Vault, ManageEngine PAM360
Two alternatives
BeyondTrust, ManageEngine PAM360Three alternatives
BeyondTrust, Delinea Secret Server, SailPointSix alternatives
BeyondTrust, Delinea Secret Server, HashiCorp Vault, One Identity Safeguard, Teleport, WALLIX BastionDeepSeek V4 FlashCyberArk Privileged Access ManagerCyberArk Privileged Access ManagerHeldCyberArk Privileged Access ManagerDelinea Secret Serveragainst: CyberArk Privileged Access ManagerIdiraagainst: ARCON PAM, BeyondTrust, CyberArk Privileged Access Manager, Delinea Secret Server, One Identity Safeguard, WALLIX Bastion
Two alternatives
BeyondTrust, Delinea Secret ServerThree alternatives
BeyondTrust, Delinea Secret Server, ManageEngine PAM360Two alternatives
BeyondTrust, Delinea Secret ServerTwo alternatives
BeyondTrust, ManageEngine PAM360Five alternatives
BeyondTrust, Delinea Secret Server, Fortinet FortiPAM, One Identity Safeguard, SaviyntLlama 4 MaverickCyberArk Privileged Access ManagerCyberArk Privileged Access ManagerHeldno first choiceCyberArk Privileged Access ManagerCyberArk Privileged Access Manageragainst: BeyondTrust, CyberArk Privileged Access Manager
Five alternatives
BeyondTrust, Gatekeeper, Heimdal Privileged Access Management, ManageEngine PAM360, SafeguardThree alternatives
BeyondTrust, Delinea Secret Server, ManageEngine PAM360Three alternatives
BeyondTrust PAM, One Identity Safeguard, Securden Unified PAMThree alternatives
Delinea Secret Server, JumpCloud, Remediant SecureONEQwen 3.7 FlashCyberArk Privileged Access Manageragainst: HashiCorp VaultCyberArk Privileged Access ManagerHeldCyberArk Privileged Access ManagerManageEngine PAM360against: CyberArk Privileged Access ManagerBeyondTrust, KeeperPAMagainst: CyberArk Identityagainst: CyberArk Privileged Access Manager, Palo Alto Networks, Symantec Privileged Access Manager
Two alternatives
BeyondTrust, Delinea Secret ServerThree alternatives
Delinea Secret Server, HashiCorp Vault, Microsoft Entra IDThree alternatives
Akeyless, BeyondTrust, Delinea Secret ServerOne alternative
KeeperPAMOne alternative
HashiCorpKimi K2CyberArk Privileged Access ManagerCyberArk Privileged Access ManagerHeldCyberArk Privileged Access ManagerDelinea Secret Server, One Identity Safeguardagainst: CyberArk Privileged Access ManagerDelinea Secret Serveragainst: CyberArk Privileged Access Manager, HashiCorp Vault, Okta Privileged Accessagainst: BeyondTrust, CyberArk Privileged Access Manager, Delinea Secret Server
Two alternatives
BeyondTrust, Delinea Secret ServerTwo alternatives
BeyondTrust, Delinea Secret ServerFive alternatives
BeyondTrust, Delinea Secret Server, HashiCorp Boundary, HashiCorp Vault, TeleportOne alternative
ManageEngine PAM360Two alternatives
BeyondTrust, TeleportGLM 4.7 FlashXCyberArk Privileged Access Manageragainst: Microsoft Entra IDCyberArk Privileged Access ManagerHeldCyberArk Privileged Access Manageragainst: ManageEngine PAM360, Microsoft Entra Privileged Identity ManagementManageEngine PAM360against: CyberArk Privileged Access Managerno first choiceagainst: CyberArk Privileged Access Manager, Linux sudoers, Windows LAPS
Two alternatives
BeyondTrust, Delinea Secret ServerThree alternatives
BeyondTrust, Delinea Secret Server, One Identity SafeguardFour alternatives
Akeyless, BeyondTrust, Delinea Secret Server, HashiCorp VaultTwo alternatives
BeyondTrust, JumpServerMiniMax M2.5BeyondTrustCyberArk Privileged Access ManagerChangedCyberArk Privileged Access ManagerManageEngine PAM360against: BeyondTrust, CyberArk Privileged Access Manager, Delinea Secret Serverno first choiceagainst: Microsoft Entra Privileged Identity Management, senhaseguranothing named
Two alternatives
CyberArk Privileged Access Manager, Delinea Secret ServerTwo alternatives
BeyondTrust, Delinea Secret ServerFour alternatives
BeyondTrust, Delinea Secret Server, HashiCorp Vault, Microsoft Entra ID GovernanceFour alternatives
Apporetum, JumpCloud, KeeperPAM, Securden Unified PAMGPT-6 LunaBeyondTrustBeyondTrustHeldBeyondTrust Pathfinder, CyberArk Privileged Access Manager, Delinea Secret Server, Idiraagainst: Microsoft Entra Privileged Identity ManagementManageEngine PAM360no first choiceagainst: BeyondTrust Remote Support, Delinea Secret Server, Okta Privileged Access
Three alternatives
CyberArk Privileged Access Manager, Delinea Secret Server, Palo Alto NetworksTwo alternatives
Delinea Secret Server, Palo Alto Networks’ CyberArk offeringThree alternatives
One Identity Safeguard, StrongDM, WALLIX BastionThree alternatives
BeyondTrust, CyberArk Privileged Access Manager, Delinea Secret ServerMuse Glimmer 30BCyberArk Privileged Access Manageragainst: ARCON PAM, One Identity Safeguard, WALLIX BastionCyberArk Privileged Access ManagerHeldBeyondTrust, CyberArk Privileged Access Manageragainst: AkeylessManageEngine PAM360against: BeyondTrust, CyberArk Privileged Access Manager, Delinea Secret Serverno first choiceagainst: ARCON PAM, BeyondTrust, CyberArk Privileged Access Manager, Delinea Secret Server, One Identity Safeguard, WALLIX Bastion
Two alternatives
BeyondTrust, Delinea Secret ServerTwo alternatives
BeyondTrust, Delinea Secret ServerFour alternatives
Delinea Secret Server, KeeperPAM, Saviynt, TeleportThree alternatives
JumpCloud, KeeperPAM, Okta Privileged AccessBold is the first choiceAlternatives are counted; the count opens them.What the answer argued against
The record
One row per call: the version string exactly as returned, whether the model searched, sources cited, and latency.
Eighty-four rows: every prompt, every model, every answer.
| Prompt | Model | Version string | Time (UTC) | Searched | Sources | Latency |
|---|---|---|---|---|---|---|
| Direct recommendation | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 17:15 | no | 0 | 5 s |
| Direct recommendation | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 10:24 | yes | 3 | 6 s |
| Direct recommendation | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 11:34 | no | 0 | 17 s |
| Direct recommendation | Perplexity Sonar | sonar | 2026-11-01 12:56 | yes | 10 | 4 s |
| Direct recommendation | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 17:37 | yes | 14 | 12 s |
| Direct recommendation | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 10:13 | yes | 5 | 3 s |
| Direct recommendation | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 18:28 | yes | 22 | 39 s |
| Direct recommendation | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 14:01 | yes | 5 | 3 s |
| Direct recommendation | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 13:07 | yes | 5 | 20 s |
| Direct recommendation | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 18:13 | yes | 10 | 22 s |
| Direct recommendation | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 14:30 | yes | 23 | 47 s |
| Direct recommendation | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 10:01 | yes | 14 | 51 s |
| Direct recommendation | GPT-6 Luna | gpt-6-luna | 2026-11-01 17:47 | yes | 4 | 23 s |
| Direct recommendation | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 09:11 | yes | 14 | 18 s |
| Paraphrase | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 12:36 | yes | 19 | 9 s |
| Paraphrase | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 15:09 | yes | 5 | 5 s |
| Paraphrase | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 18:35 | yes | 5 | 21 s |
| Paraphrase | Perplexity Sonar | sonar | 2026-11-01 18:22 | yes | 10 | 3 s |
| Paraphrase | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 18:05 | yes | 5 | 8 s |
| Paraphrase | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 13:57 | no | 0 | 3 s |
| Paraphrase | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 16:00 | yes | 25 | 34 s |
| Paraphrase | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 16:17 | yes | 5 | 2 s |
| Paraphrase | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 17:10 | no | 0 | 29 s |
| Paraphrase | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 13:17 | yes | 15 | 34 s |
| Paraphrase | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 09:43 | yes | 18 | 40 s |
| Paraphrase | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 08:48 | yes | 5 | 24 s |
| Paraphrase | GPT-6 Luna | gpt-6-luna | 2026-11-01 18:07 | yes | 3 | 23 s |
| Paraphrase | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 17:04 | yes | 14 | 16 s |
| Comparative | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 16:08 | yes | 10 | 9 s |
| Comparative | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 11:53 | yes | 6 | 9 s |
| Comparative | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 19:40 | no | 0 | 18 s |
| Comparative | Perplexity Sonar | sonar | 2026-11-01 13:42 | yes | 10 | 7 s |
| Comparative | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 16:13 | yes | 5 | 12 s |
| Comparative | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 09:26 | yes | 5 | 7 s |
| Comparative | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 13:30 | yes | 23 | 51 s |
| Comparative | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 19:36 | yes | 5 | 2 s |
| Comparative | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 19:00 | yes | 19 | 60 s |
| Comparative | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 19:28 | yes | 15 | 34 s |
| Comparative | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 19:29 | yes | 23 | 53 s |
| Comparative | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 13:38 | yes | 20 | 51 s |
| Comparative | GPT-6 Luna | gpt-6-luna | 2026-11-01 15:22 | yes | 10 | 38 s |
| Comparative | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 15:46 | yes | 15 | 27 s |
| Budget constrained | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 17:34 | yes | 18 | 10 s |
| Budget constrained | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 15:49 | yes | 2 | 5 s |
| Budget constrained | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 15:52 | yes | 9 | 29 s |
| Budget constrained | Perplexity Sonar | sonar | 2026-11-01 08:56 | yes | 10 | 4 s |
| Budget constrained | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 19:27 | yes | 5 | 9 s |
| Budget constrained | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 11:49 | yes | 5 | 4 s |
| Budget constrained | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 11:11 | yes | 25 | 34 s |
| Budget constrained | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 14:37 | yes | 5 | 3 s |
| Budget constrained | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 09:39 | yes | 9 | 21 s |
| Budget constrained | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 12:23 | yes | 23 | 36 s |
| Budget constrained | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 11:09 | yes | 24 | 37 s |
| Budget constrained | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 14:53 | yes | 25 | 73 s |
| Budget constrained | GPT-6 Luna | gpt-6-luna | 2026-11-01 15:51 | yes | 2 | 22 s |
| Budget constrained | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 16:29 | yes | 12 | 32 s |
| Scale constrained | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 08:48 | yes | 18 | 14 s |
| Scale constrained | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 14:15 | yes | 5 | 10 s |
| Scale constrained | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 12:26 | no | 0 | 22 s |
| Scale constrained | Perplexity Sonar | sonar | 2026-11-01 11:55 | yes | 10 | 11 s |
| Scale constrained | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 14:23 | yes | 10 | 16 s |
| Scale constrained | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 14:07 | no | 0 | 7 s |
| Scale constrained | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 15:48 | yes | 25 | 53 s |
| Scale constrained | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 09:18 | yes | 5 | 3 s |
| Scale constrained | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 19:13 | no | 0 | 31 s |
| Scale constrained | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 12:42 | yes | 23 | 49 s |
| Scale constrained | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 09:10 | yes | 20 | 42 s |
| Scale constrained | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 14:33 | no | 0 | 30 s |
| Scale constrained | GPT-6 Luna | gpt-6-luna | 2026-11-01 19:00 | yes | 3 | 20 s |
| Scale constrained | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 12:02 | yes | 15 | 25 s |
| Negative framing | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 15:03 | yes | 18 | 10 s |
| Negative framing | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 13:15 | yes | 0 | 6 s |
| Negative framing | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 11:18 | yes | 11 | 33 s |
| Negative framing | Perplexity Sonar | sonar | 2026-11-01 10:13 | yes | 10 | 5 s |
| Negative framing | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 16:19 | yes | 10 | 17 s |
| Negative framing | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 18:17 | yes | 5 | 5 s |
| Negative framing | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 15:19 | yes | 24 | 54 s |
| Negative framing | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 08:44 | yes | 5 | 2 s |
| Negative framing | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 10:13 | yes | 10 | 54 s |
| Negative framing | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 15:38 | yes | 24 | 33 s |
| Negative framing | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 17:31 | yes | 23 | 44 s |
| Negative framing | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 19:11 | yes | 10 | 43 s |
| Negative framing | GPT-6 Luna | gpt-6-luna | 2026-11-01 17:57 | yes | 3 | 35 s |
| Negative framing | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 16:02 | yes | 23 | 31 s |
Normalization in this category
Every judgment call made between the raw labels and the numbers above, listed so it is visible and reversible.
ShowHide
Category-scoped readings
ARCON read as ARCON PAM
Arcon read as ARCON PAM
Broadcom read as Symantec Privileged Access Manager
CyberArk read as CyberArk Privileged Access Manager
CyberArk (Identity Security Platform) read as CyberArk Privileged Access Manager
CyberArk (Now Idira - Owned by Palo Alto Networks) read as CyberArk Privileged Access Manager
CyberArk (Privileged Cloud) read as CyberArk Privileged Access Manager
CyberArk (now Idira by Palo Alto Networks) read as CyberArk Privileged Access Manager
CyberArk (now Idira) read as CyberArk Privileged Access Manager
CyberArk (now branded as Idira) read as CyberArk Privileged Access Manager
CyberArk (now marketed as **Idira**) read as CyberArk Privileged Access Manager
Delinea read as Delinea Secret Server
Delinea (Secret Server + Privilege Manager) read as Delinea Secret Server
Delinea (Secret Server + StrongDM) read as Delinea Secret Server
Delinea (Secret Server / Delinea Platform) read as Delinea Secret Server
Delinea (Secret Server / Platform) read as Delinea Secret Server
Delinea (Thycotic/Centrify) read as Delinea Secret Server
Delinea (formerly BeyondTrust) read as Delinea Secret Server
Delinea (formerly Thycotic & Centrify) read as Delinea Secret Server
Delinea (formerly Thycotic + Centrify) read as Delinea Secret Server
Delinea (formerly Thycotic + Secret Server) read as Delinea Secret Server
Delinea (formerly Thycotic and Centrify) read as Delinea Secret Server
Delinea (formerly Thycotic) read as Delinea Secret Server
Delinea (formerly Thycotic/Centrify) read as Delinea Secret Server
Delinea (formerly ThycoticCentrify) read as Delinea Secret Server
Keeper read as KeeperPAM
Keeper Business read as KeeperPAM
Keeper Security read as KeeperPAM
Keeper Security (KeeperPAM) read as KeeperPAM
ManageEngine read as ManageEngine PAM360
Netwrix read as Netwrix Privilege Secure
Okta read as Okta Privileged Access
One Identity read as One Identity Safeguard
One Identity (Quest Software) read as One Identity Safeguard
One Identity (Quest) read as One Identity Safeguard
One Identity (Safeguard) read as One Identity Safeguard
Securden read as Securden Unified PAM
Securden PAM read as Securden Unified PAM
Thycotic (Digital Shadows) read as Delinea Secret Server
WALLIX read as WALLIX Bastion
Wallix read as WALLIX Bastion
miniOrange read as miniOrange PAM
Unresolved, counted raw
BeyondTrust Privilege Management
CA PAM
CyberArk Identity Cloud
CyberArk PAM
Fortanix
Fortinet FortiPAM
Linux sudoers
Okta PAM
One Identity Privileged Management
OnePassword Business
PAM360
Palo Alto Networks’ CyberArk offering
PingOne Privilege
Remediant SecureONE
SailPoint Privileged Access
Symantec PAM / Broadcom
Discontinued, still offered
No shut-down product was recommended here.