Microsegmentation for small business buyers
Asked as “microsegmentation solution”, and as “east-west network segmentation tool”, on behalf of a small B2B company. 57 first choices recorded across the direct, paraphrase, budget and scale prompts, fourteen models each. Added to the November 2026 Edition.
Standing · first-choice share
30%
Contested · Akamai Guardicore Segmentation 5%
30Zero Networks Segment05Akamai Guardicore Segmentation05Illumio Segmentation60others
30% of first choices, contested.
Since October 2026▲+14Since October 2026: 16% → 30%, +14 points. Past the 11-point floor: movement.Zero Networks Segment held the lead, +14 points on 16%, past the floor.
By buyer segment
The same question asked on behalf of a different buyer. Each standing is computed within its segment; they sit side by side and are never added together.
Small business
Zero Networks Segment30%Contested▲+14Since October 2026: 16% → 30%, +14 points. Past the 11-point floor: movement.This pageMid-market
ColorTokens Xshield36%Contested▲+11Since October 2026: 25% → 36%, +11 points. Inside the 11-point floor: within noise.Standing →Enterprise
Illumio Segmentation77%Clear leader▲+14Since October 2026: 63% → 77%, +14 points. Past the 11-point floor: movement.Standing →
Zero Networks Segment30%Contested▲+14Since October 2026: 16% → 30%, +14 points. Past the 11-point floor: movement.This pageMid-marketColorTokens Xshield36%Contested▲+11Since October 2026: 25% → 36%, +11 points. Inside the 11-point floor: within noise.Standing →EnterpriseIllumio Segmentation77%Clear leader▲+14Since October 2026: 63% → 77%, +14 points. Past the 11-point floor: movement.Standing →The standing
Share is the count of first choices across the direct, paraphrase, budget and scale prompts, over all fourteen models, for a small B2B company. Ordered by share.
ProductFirst-choice shareNegative rateLabelsQuadrantSince October 2026
01Zero Networks Segment30%0%37accepted challenger▲+14Since October 2026: 16% → 30%, +14 points. Past the 11-point floor: movement.16% → 30%
Zero Networks Segment30%0%37accepted challenger▲+14Since October 2026: 16% → 30%, +14 points. Past the 11-point floor: movement.16% → 30%02
Akamai Guardicore Segmentation5%36%50criticized challenger▼−1Since October 2026: 6% → 5%, −1 point. Inside the 11-point floor: within noise.6% → 5%
Akamai Guardicore Segmentation5%36%50criticized challenger▼−1Since October 2026: 6% → 5%, −1 point. Inside the 11-point floor: within noise.6% → 5%03Illumio Segmentation5%42%57criticized challenger▼−8Since October 2026: 13% → 5%, −8 points. Inside the 11-point floor: within noise.13% → 5%
Illumio Segmentation5%42%57criticized challenger▼−8Since October 2026: 13% → 5%, −8 points. Inside the 11-point floor: within noise.13% → 5%04AWS Security Groups4%0%14accepted challenger▲+1Since October 2026: 3% → 4%, +1 point. Inside the 11-point floor: within noise.3% → 4%
05
Faddom4%0%15accepted challenger▼−2Since October 2026: 6% → 4%, −2 points. Inside the 11-point floor: within noise.6% → 4%
Faddom4%0%15accepted challenger▼−2Since October 2026: 6% → 4%, −2 points. Inside the 11-point floor: within noise.6% → 4%06ColorTokens Xshield4%6%16accepted challenger=heldSince October 2026: 4% → 4%, ±0 points. Inside the 11-point floor: within noise.4% → 4%
ColorTokens Xshield4%6%16accepted challenger=heldSince October 2026: 4% → 4%, ±0 points. Inside the 11-point floor: within noise.4% → 4%07Azure Network Security Groups4%0%12accepted challenger▲+1Since October 2026: 3% → 4%, +1 point. Inside the 11-point floor: within noise.3% → 4%
08
Calico4%8%13accepted challenger▲+4Since October 2026: 0% → 4%, +4 points. Inside the 11-point floor: within noise.0% → 4%
Calico4%8%13accepted challenger▲+4Since October 2026: 0% → 4%, +4 points. Inside the 11-point floor: within noise.0% → 4%09
Cisco Secure Workload4%63%27criticized challenger=heldSince October 2026: 4% → 4%, ±0 points. Inside the 11-point floor: within noise.4% → 4%
Cisco Secure Workload4%63%27criticized challenger=heldSince October 2026: 4% → 4%, ±0 points. Inside the 11-point floor: within noise.4% → 4%10
Elisity2%0%15accepted challenger▼−2Since October 2026: 4% → 2%, −2 points. Inside the 11-point floor: within noise.4% → 2%
Elisity2%0%15accepted challenger▼−2Since October 2026: 4% → 2%, −2 points. Inside the 11-point floor: within noise.4% → 2%Show the one product at 0%, ordered by negative rate
11
VMware NSX0%82%28criticized challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%
VMware NSX0%82%28criticized challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%The floor is 11 points of share, measured: how far the models move a leader on their own when the same questions are asked twice with nothing changed. A larger change is movement; a smaller one can't be told apart from repeat variation, and both are shown. Each index measures its own floor from its own repeat, over its own categories, so the floor differs from one index to the next. Both editions asked the same fourteen models. How the floor is measured
Bars are the share of first choices, 0 to 100Every product with at least 10 labels here. Every product name links to its product page.
Head to head
ColorTokens Xshield vs Zero Networks SegmentColorTokens Xshield vs Illumio SegmentationColorTokens Xshield vs Akamai Guardicore Segmentation
Head-to-head pages are published for mid-market buyers, so these open on mid-market figures, not small business.All ten head-to-head pages: the top five products, each against each
ColorTokens Xshield vs Cisco Secure WorkloadZero Networks Segment vs Illumio SegmentationZero Networks Segment vs Akamai Guardicore SegmentationZero Networks Segment vs Cisco Secure WorkloadIllumio Segmentation vs Akamai Guardicore SegmentationIllumio Segmentation vs Cisco Secure WorkloadAkamai Guardicore Segmentation vs Cisco Secure Workload
Recommended versus criticized
Every product with at least 10 labels here, on both axes. The 30% line names a quadrant, not the verdict above: that one needs more than 40%.
Criticized challengerCriticized default
Negative label rate →
010203A04
0506A07
08091011Accepted challengerEndorsed leader
0%First-choice share → · lines at 30% share and 25% negative40%
Key
01Zero Networks Segment30%
Zero Networks Segment30%02Akamai Guardicore Segmentation5%
Akamai Guardicore Segmentation5%03Illumio Segmentation5%
Illumio Segmentation5%04AWS Security Groups4%
05Faddom4%
Faddom4%06ColorTokens Xshield4%
ColorTokens Xshield4%07Azure Network Security Groups4%
08Calico4%
Calico4%09Cisco Secure Workload4%
Cisco Secure Workload4%10Elisity2%
Elisity2%11VMware NSX0%
VMware NSX0%What they warned about
Four of fourteen models held their first choice under the paraphrase. Claude Haiku 4.5, GPT-5.4 mini, Gemini 3.5 Flash, Perplexity Sonar, Grok 4.20, Llama 4 Maverick, Qwen 3.7 Flash, Kimi K2, MiniMax M2.5 and GPT-6 Luna changed. A high negative share on a product with few labels is a warning. A low share on a product with many labels is salience, not sentiment.
Illumio Segmentation42%
24 of 57 labels negative · 11 of 14 models · 8 hard negative
“What to Avoid ... Illumio | Built for large enterprises with dedicated security engineers; expensive” Kimi K2, budget prompt
Akamai Guardicore Segmentation36%
18 of 50 labels negative · 11 of 14 models · 5 hard negative
“avoid traditional enterprise platforms (like VMware NSX, Illumio, or Akamai Guardicore) unless absolutely necessary” Kimi K2, direct prompt
VMware NSX82%
23 of 28 labels negative · 10 of 14 models · 12 hard negative
“Implementing VMware NSX is frequently described as a mistake for small businesses due to its steep learning curve and operational overhead.” Mistral Small, negative prompt
Cisco Secure Workload63%
17 of 27 labels negative · 9 of 14 models · 9 hard negative
“Hardware-Centric & Enterprise SDN Solutions ... Why to avoid: These solutions require massive upfront hardware investments” Gemini 3.5 Flash, negative prompt
What they cite
Fourteen of the fourteen models returned a source list in this edition: five return the pages they cited and nine the search results they consulted.
Sites the answers cite
74 of 84 answers in this category came back with a source list, from 14 of 14 models: citations where the model returns them, or the search results it consulted. 886 links across 171 sites, every framing counted. Ranked by the number of answers carrying the site or page. 84 of the 252 answers across every segment cited this index's own page for the category; the method page measures whether that reading tilts an answer.
vendor site · G242 answers · 65 citations · 11 models
vendor site · Zero Networks33 answers · 71 citations · 13 models
publisher (Gane)33 answers · 33 citations · 10 models
30 answers · 32 citations · 12 models
vendor site · SourceForge29 answers · 42 citations · 10 models
vendor site · Illumio25 answers · 37 citations · 10 models
vendor site · Tigera22 answers · 27 citations · 10 models
vendor site · Akamai21 answers · 35 citations · 12 models
vendor site · Elisity20 answers · 32 citations · 9 models
19 answers · 26 citations · 9 models
vendor site · Ordr18 answers · 18 citations · 11 models
vendor site · Tufin18 answers · 18 citations · 9 models
Pages the answers cite
The ten pages named in the most answers, by full address. A page here is one the models returned with a recommendation, not one the index endorses.
33 answers · 10 models
31 answers · 10 models
26 answers · 10 models
26 answers · 10 models
16 answers · 8 models
15 answers · 11 models
13 answers · 8 models
12 answers · 6 models
11 answers · 7 models
11 answers · 7 models
Search against answers
Each company's standing in the answers beside its site's footprint in Google search, one row a site: the products the models named on it with their shares, and the share they add up to; monthly searches on Google, and DataForSEO's estimate of AI search demand (modeled from search signals, directional, not a count of queries to any assistant), for the most-searched of the company's and its products' names (the name is in each row's hover text); estimated monthly organic visits to the site; and its best position in Google's top ten for “best microsegmentation solution”, “microsegmentation solution”, “microsegmentation solutions”. US estimates from DataForSEO and Google's Ads Transparency Center. A small company's site, or a mid-sized company's site for its flagship, is marked company; a product on a large parent's site (Google, Microsoft) has no site figures. A column with no figures for this category is left out, and an empty cell means none were seen, not none exist. Two measurements side by side: neither is read as the cause of the other.
| Company and products | Share | Own site cited | Name searches, Google | AI search demand, est. | Organic visits | Paid search a month, est. | Google ads, last 30 days | Best Google position |
|---|---|---|---|---|---|---|---|---|
| Zero Networks Segment zeronetworks.com | 30% | 100 | 10 | 2 | 27,418 | 7 | 4 | |
| Akamai parent site Akamai Guardicore Segmentation 5% | 5% | 146 | 27,100 | 1,614 | ||||
| Tailscale tailscale.com | 5% | 73 | 165,000 | 2,416 | 115,710 | 33 | ||
| Illumio Segmentation illumio.com | 5% | 165 | 30 | 3 | 25,056 | 78 | 3 | |
| AWS parent site AWS Security Groups 4%, AWS Network Firewall 2% | 5% | 15 | 368,000 | 114,001 | ||||
| Faddom faddom.com | 4% | 44 | 390 | 8 | 5,183 | $1,015 | 1 | |
| ColorTokens Xshield colortokens.com | 4% | 78 | 30 | 1 | 693 | 0 | 6 | |
| Azure azure.com Azure Network Security Groups 4% | 4% | 12 | 301,000 | 47,904 | ||||
| Calico tigera.io | 4% | 35 | 135,000 | 20,802 | 21,429 | $8 | 12 | 2 |
| Cilium cilium.io | 4% | 19 | 5,400 | 304 | 4,632 |
Google's top ten for the three searches hold 11 sites; 6 of them are among the sites the models cited here (akamai.com, elisity.com, illumio.com, tigera.io, tufin.com, zeronetworks.com). The first result for “best microsegmentation solution” is gartner.com.
How they answered
Six framings of the same buying question, each sent to every model in a fresh session with search on. One row per model, so a row shows whether it held its answer under rewording, what it named when cost was the constraint, and what it argued against. Computed from the raw judge labels.ShowHide
How they answered
Six framings of the same buying question, each sent to every model in a fresh session with search on. One row per model, so a row shows whether it held its answer under rewording, what it named when cost was the constraint, and what it argued against. Computed from the raw judge labels.
ShowHideModelDirect“What is the best microsegmentation solution for a small B2B company?”Paraphrase“Which east-west network segmentation tool would you recommend to a small business that sells to other businesses?”Comparative“What are the top microsegmentation solutions for a small team and how do they differ?”Budget-constrained“What is the best microsegmentation solution for a small company with a tight budget?”Scale-constrained“We are a 30 person company evaluating a microsegmentation solution. What should we look at?”Negative“Which microsegmentation solutions should a small business avoid or be cautious about?”
Claude Haiku 4.5Enclaveno first choiceChangedColorTokens XshieldColorTokens Xshieldno first choicenothing named
Two alternatives
Akamai Guardicore Segmentation, ColorTokens XshieldFour alternatives
12Port Horizon, Calico, Faddom, Zero Networks SegmentTwo alternatives
Faddom, Zscaler Private AccessGPT-5.4 miniAkamai Guardicore Segmentation, Illumio Segmentationagainst: VMware vDefendCisco Secure WorkloadChangedIllumio SegmentationCisco Secure Workload, Illumio for SMBsno first choicenothing named
One alternative
Zero Networks SegmentTwo alternatives
Palo Alto Networks microsegmentation tooling, VMware NSXThree alternatives
Akamai Guardicore Segmentation, Cisco Secure Workload, VMware NSXGemini 3.5 FlashTailscale, Twingateagainst: Akamai Guardicore Segmentation, Cisco Secure WorkloadAWS Security Groups, Azure Network Security GroupsChangedagainst: Cisco ACI, VMware NSXEnclave.io / Twingate, Tailscaleagainst: Cisco ACI, VMware NSXNetBird, Tailscaleagainst: Akamai Guardicore Segmentation, Illumio Segmentation, VMware NSXno first choiceagainst: Akamai Guardicore Segmentation, Cisco ACI, Cisco Secure Workload, ColorTokens Xshield, Illumio Segmentation, VMware NSX
Six alternatives
AWS Security Groups, Azure Network Security Groups, Calico, Cilium, ColorTokens Xshield, Illumio SegmentationThree alternatives
Fortinet FortiGate, Illumio Segmentation, TailscaleFive alternatives
AWS Security Groups, Akamai Guardicore Segmentation, Cilium, Elisity, Tigera CalicoNine alternatives
AWS Security Groups, Azure Network Security Groups, Calico, Cilium, GCP Firewall Rules, Illumio Cloud / Core, Linux Hosts via Ansible + `nftables`/`iptables`, Windows Firewall via Group Policy, ZeroTierThree alternatives
NetBird, Tailscale, ZeroTierPerplexity SonarZero Networks SegmentColorTokens XshieldChangedagainst: Akamai Guardicore SegmentationZero Networks Segmentagainst: Cisco Secure Workload, VMware NSXFaddomagainst: Akamai Guardicore Segmentation, Cisco Secure Workload, Illumio Segmentation, VMware NSXno first choiceagainst: Cisco Secure Workload, Illumio Segmentation
Three alternatives
Akamai Guardicore Segmentation, Illumio Segmentation, Tigera CalicoTwo alternatives
Illumio Segmentation, Zscaler Zero Trust Device SegmentationFour alternatives
Akamai Guardicore Segmentation, Elisity, Illumio Segmentation, Zscaler Workload SegmentationThree alternatives
ColorTokens Xshield, Tigera Calico, Zero Networks SegmentGrok 4.20Akamai Guardicore Segmentationagainst: Check Point CloudGuard, Cisco Secure Workload, Prisma Cloud, VMware NSXZero Networks SegmentChangedagainst: Akamai Guardicore Segmentation, Calico, Illumio SegmentationZero Networks Segmentationagainst: Check Point, Cisco Secure Workload, FireMonCalico, Ciliumagainst: Cisco Secure Workload, Illumio Segmentation, VMware NSXno first choiceagainst: Check Point, Cisco ACI, FireMon, Tufin, VMware NSX
Four alternatives
ColorTokens Xtended, Elisity, Illumio Segmentation, Zero Networks SegmentThree alternatives
Cisco Secure Workload, Faddom, VMware NSXFour alternatives
Akamai Guardicore Segmentation, Illumio Segmentation, Tigera Calico, Zscaler Workload SegmentationSeven alternatives
Akamai Guardicore Segmentation, Antrea, ColorTokens Xshield, Istio, OVN-Kubernetes, Zero Networks Segment, np-guardSix alternatives
Akamai Guardicore Segmentation, Guardicore, Illumio Segmentation, Microsoft Defender for Cloud, VMware NSX, Zero Networks SegmentMistral SmallZero Networks SegmentZero Networks SegmentHeldagainst: Akamai Guardicore Segmentation, Illumio SegmentationAkamai Guardicore Segmentation, Illumio SegmentationCalico, Ciliumno first choiceagainst: Windows Firewall, iptablesagainst: Cisco Secure Workload, VMware NSX
One alternative
Illumio SegmentationThree alternatives
Calico, Cisco Secure Workload, Zscaler Workload SegmentationTwo alternatives
Akamai Guardicore Segmentation, Zero Networks SegmentDeepSeek V4 FlashZero Networks SegmentZero Networks SegmentHeldagainst: Akamai Guardicore Segmentation, Illumio SegmentationZero Networks Segmentagainst: Illumio SegmentationZero Networks Segmentagainst: Akamai Guardicore Segmentation, Cisco, Illumio Segmentation, Open vSwitch, iptables/nftablesElisity, Zero Networks Segmentagainst: Cisco ISE, Illumio Segmentation, VMware NSXagainst: Akamai Guardicore Segmentation, Cisco ACI, Guardicore, Illumio Segmentation, VMware NSX
Three alternatives
Akamai Guardicore Segmentation, Illumio Segmentation, TrueFortOne alternative
ColorTokens XshieldTwo alternatives
Akamai Guardicore Segmentation, FaddomThree alternatives
Network ACLs, Windows Firewall / Linux iptables, security groupsLlama 4 Maverickno first choiceZero Networks SegmentChangedZero Networks Segmentagainst: Illumio Segmentationno first choiceno first choiceagainst: Akamai Guardicore Segmentation, Illumio Segmentation
One alternative
Akamai Guardicore SegmentationQwen 3.7 FlashIllumio Segmentationagainst: VMware NSXZero Networks SegmentChangedagainst: Illumio Segmentation, VMware NSXIllumio Segmentationagainst: Cisco Secure Workload, Palo Alto's Prisma SD-WAN/SegmentationAWS Security Groups, Azure Network Security Groups, Firewallaagainst: Illumio Segmentation, Palo Alto Networks' Prisma SD-WANPrisma Cloud, Tetragonagainst: FireMon, Skybox, Tufinagainst: VMware NSX
Four alternatives
CrowdStrike, Netskope, Project Calico, SysdigTwo alternatives
Akamai Guardicore Segmentation, OrdrThree alternatives
Akamai Guardicore Segmentation, Calico, Tigera CalicoThree alternatives
Calico, OPNsense, pfSenseTwo alternatives
AWS Security Groups, Azure Network Security GroupsKimi K2AWS Network Firewall, Zero Networks Segment, security groupsagainst: Akamai Guardicore Segmentation, Cisco Secure Workload, Illumio Segmentation, VMware NSXZero Networks SegmentChangedagainst: Cisco Hypershield, VMware NSXIllumio Segmentationagainst: VMware NSXFirewallaagainst: Akamai Guardicore Segmentation, Cisco Secure Workload, Illumio Segmentationno first choiceagainst: Cisco Secure Workload, VMware NSX
Ten alternatives
Elisity, Firewall Rules + Cloud Armor, Istio, Linkerd, Microsoft Defender for Cloud, Network Security Groups (NSGs) + Azure Firewall, OPNsense, Ordr, TrueFort, pfSenseOne alternative
Illumio SegmentationFour alternatives
AWS Security Groups, Akamai Guardicore Segmentation, Azure Network Security Groups, ColorTokens XshieldThree alternatives
OPNsense, Zero Networks Segment, pfSenseGLM 4.7 FlashXZero Networks SegmentZero Networks SegmentHeldAkamai Guardicore Segmentation, Zero Networks SegmentFaddomno first choiceagainst: Akamai Guardicore Segmentation, Cisco Secure Workload, Illumio Segmentation, VMware NSX
Two alternatives
Akamai Guardicore Segmentation, Illumio SegmentationTwo alternatives
Fortinet FortiGate, Illumio SegmentationOne alternative
Illumio SegmentationFive alternatives
Antrea, Calico Open Source, Cloudflare One, Istio, Zscaler Private AccessMiniMax M2.5Akamai Guardicore Segmentation, Zscaler Private AccessOPNsense, pfSenseChangedagainst: Guardicore, Illumio Adaptive Security PlatformIllumio Segmentationagainst: VMware NSXUbuntuufw, pfSenseno first choiceagainst: Akamai Guardicore Segmentation, Cisco Secure Workload, Illumio Segmentation
Two alternatives
Akita, HubSpotFour alternatives
AWS Security Groups, Azure Network Security Groups, FortiGate, Sophos XG FirewallThree alternatives
Akamai Guardicore Segmentation, Faddom, Unisys StealthTwo alternatives
AWS Security Groups, Azure Network Security GroupsGPT-6 LunaTailscaleIllumio SegmentationChangedAWS Security Groupsagainst: Akamai Guardicore SegmentationGroup Policyagainst: Tailscaleno first choicenothing named
One alternative
Illumio SegmentationThree alternatives
Elisity, Illumio Segmentation, Zero Networks SegmentOne alternative
Microsoft IntuneOne alternative
AWS Security GroupsMuse Glimmer 30BZero Networks Segmentagainst: Illumio SegmentationZero Networks SegmentHeldZero Networks Segmentagainst: Akamai Guardicore Segmentation, Cisco Secure Workload, Illumio SegmentationZero Networks Segmentagainst: Cisco ISE, NSXno first choiceagainst: Illumio Segmentation, VMware NSXagainst: Akamai Guardicore Segmentation, Cisco Secure Workload, Illumio Segmentation, VMware NSX
One alternative
Akamai Guardicore SegmentationThree alternatives
Akamai Guardicore Segmentation, Faddom, Illumio SegmentationFive alternatives
Calico, Cilium, ColorTokens Xshield, Elisity, FaddomFive alternatives
AWS Security Groups, Antrea, Calico, Cilium, FaddomBold is the first choiceAlternatives are counted; the count opens them.What the answer argued against
The record
One row per call: the version string exactly as returned, whether the model searched, sources cited, and latency.
Eighty-four rows: every prompt, every model, every answer.
| Prompt | Model | Version string | Time (UTC) | Searched | Sources | Latency |
|---|---|---|---|---|---|---|
| Direct recommendation | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 12:22 | yes | 9 | 7 s |
| Direct recommendation | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 17:03 | yes | 3 | 8 s |
| Direct recommendation | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 09:05 | no | 0 | 14 s |
| Direct recommendation | Perplexity Sonar | sonar | 2026-11-01 16:17 | yes | 10 | 4 s |
| Direct recommendation | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 15:10 | yes | 12 | 14 s |
| Direct recommendation | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 17:26 | yes | 5 | 5 s |
| Direct recommendation | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 11:02 | yes | 24 | 29 s |
| Direct recommendation | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 12:30 | yes | 5 | 3 s |
| Direct recommendation | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 13:42 | no | 0 | 32 s |
| Direct recommendation | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 18:36 | yes | 24 | 49 s |
| Direct recommendation | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 17:00 | yes | 23 | 63 s |
| Direct recommendation | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 11:22 | yes | 5 | 22 s |
| Direct recommendation | GPT-6 Luna | gpt-6-luna | 2026-11-01 11:57 | yes | 4 | 19 s |
| Direct recommendation | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 18:52 | yes | 21 | 24 s |
| Paraphrase | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 18:52 | no | 0 | 4 s |
| Paraphrase | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 12:57 | yes | 4 | 6 s |
| Paraphrase | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 17:52 | no | 0 | 17 s |
| Paraphrase | Perplexity Sonar | sonar | 2026-11-01 10:25 | yes | 10 | 3 s |
| Paraphrase | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 15:39 | yes | 5 | 8 s |
| Paraphrase | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 10:46 | yes | 5 | 4 s |
| Paraphrase | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 17:04 | yes | 24 | 26 s |
| Paraphrase | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 17:49 | yes | 5 | 3 s |
| Paraphrase | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 14:36 | yes | 5 | 23 s |
| Paraphrase | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 17:38 | yes | 14 | 52 s |
| Paraphrase | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 13:28 | yes | 24 | 24 s |
| Paraphrase | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 17:01 | no | 0 | 75 s |
| Paraphrase | GPT-6 Luna | gpt-6-luna | 2026-11-01 09:36 | yes | 2 | 12 s |
| Paraphrase | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 15:29 | yes | 13 | 16 s |
| Comparative | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 09:24 | yes | 13 | 10 s |
| Comparative | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 13:18 | yes | 4 | 7 s |
| Comparative | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 11:44 | no | 0 | 20 s |
| Comparative | Perplexity Sonar | sonar | 2026-11-01 17:47 | yes | 10 | 5 s |
| Comparative | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 16:06 | yes | 9 | 16 s |
| Comparative | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 11:37 | yes | 9 | 11 s |
| Comparative | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 12:56 | yes | 22 | 35 s |
| Comparative | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 14:54 | yes | 5 | 3 s |
| Comparative | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 14:07 | yes | 5 | 28 s |
| Comparative | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 15:53 | yes | 19 | 70 s |
| Comparative | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 19:07 | yes | 22 | 205 s |
| Comparative | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 17:35 | yes | 12 | 47 s |
| Comparative | GPT-6 Luna | gpt-6-luna | 2026-11-01 10:05 | yes | 6 | 21 s |
| Comparative | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 19:40 | yes | 14 | 27 s |
| Budget constrained | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 14:37 | yes | 14 | 8 s |
| Budget constrained | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 09:28 | yes | 4 | 6 s |
| Budget constrained | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 13:04 | yes | 5 | 20 s |
| Budget constrained | Perplexity Sonar | sonar | 2026-11-01 13:04 | yes | 10 | 3 s |
| Budget constrained | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 16:44 | yes | 20 | 17 s |
| Budget constrained | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 12:31 | yes | 13 | 9 s |
| Budget constrained | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 17:26 | yes | 24 | 42 s |
| Budget constrained | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 08:41 | yes | 5 | 3 s |
| Budget constrained | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 18:00 | yes | 13 | 36 s |
| Budget constrained | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 13:10 | yes | 23 | 30 s |
| Budget constrained | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 14:12 | yes | 25 | 61 s |
| Budget constrained | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 18:00 | yes | 5 | 26 s |
| Budget constrained | GPT-6 Luna | gpt-6-luna | 2026-11-01 16:38 | yes | 3 | 14 s |
| Budget constrained | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 09:04 | yes | 17 | 18 s |
| Scale constrained | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 19:27 | no | 0 | 5 s |
| Scale constrained | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 13:40 | yes | 7 | 8 s |
| Scale constrained | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 13:39 | no | 0 | 17 s |
| Scale constrained | Perplexity Sonar | sonar | 2026-11-01 09:56 | yes | 10 | 7 s |
| Scale constrained | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 18:47 | yes | 5 | 11 s |
| Scale constrained | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 15:50 | no | 0 | 8 s |
| Scale constrained | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 08:46 | yes | 21 | 37 s |
| Scale constrained | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 11:41 | yes | 5 | 3 s |
| Scale constrained | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 12:26 | no | 0 | 30 s |
| Scale constrained | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 16:05 | yes | 10 | 19 s |
| Scale constrained | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 14:45 | yes | 19 | 25 s |
| Scale constrained | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 08:59 | yes | 5 | 41 s |
| Scale constrained | GPT-6 Luna | gpt-6-luna | 2026-11-01 09:23 | yes | 4 | 17 s |
| Scale constrained | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 18:16 | yes | 15 | 21 s |
| Negative framing | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 14:42 | yes | 17 | 8 s |
| Negative framing | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 17:16 | yes | 3 | 8 s |
| Negative framing | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 13:55 | yes | 10 | 26 s |
| Negative framing | Perplexity Sonar | sonar | 2026-11-01 14:31 | yes | 10 | 5 s |
| Negative framing | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 16:51 | yes | 20 | 14 s |
| Negative framing | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 18:21 | yes | 5 | 5 s |
| Negative framing | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 13:58 | yes | 21 | 40 s |
| Negative framing | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 16:26 | yes | 5 | 4 s |
| Negative framing | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 17:36 | yes | 21 | 48 s |
| Negative framing | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 13:04 | yes | 16 | 29 s |
| Negative framing | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 13:01 | yes | 22 | 35 s |
| Negative framing | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 12:41 | yes | 20 | 45 s |
| Negative framing | GPT-6 Luna | gpt-6-luna | 2026-11-01 19:01 | yes | 3 | 15 s |
| Negative framing | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 18:21 | yes | 25 | 37 s |
Normalization in this category
Every judgment call made between the raw labels and the numbers above, listed so it is visible and reversible.
ShowHide
Category-scoped readings
Akamai Guardicore read as Akamai Guardicore Segmentation
Akamai Guardicore Centra read as Akamai Guardicore Segmentation
Azure NSG read as Azure Network Security Groups
Azure NSGs read as Azure Network Security Groups
Cisco Secure Workload SaaS read as Cisco Secure Workload
Cloudflare read as Cloudflare One
ColorTokens read as ColorTokens Xshield
ColorTokens (Xshield) read as ColorTokens Xshield
Fortinet read as Fortinet FortiGate
Illumio read as Illumio Segmentation
Illumio Core read as Illumio Segmentation
Palo Alto read as Palo Alto Networks
VMware (NSX) read as VMware NSX
VMware NSX microsegmentation read as VMware NSX
Zero Networks read as Zero Networks Segment
Zscaler read as Zscaler Private Access
Unresolved, counted raw
AWS Firewall Manager
AWS VPC
Akita
ColorTokens Xtended
Customer.io
Enclave.io / Twingate
Firewall Rules + Cloud Armor
GCP VPC
Group Policy
Illumio Adaptive Security Platform
Illumio Cloud / Core (SMB Packages)
Illumio for SMBs
Linux Hosts via Ansible + `nftables`/`iptables`
Network ACLs
Network Security Groups (NSGs) + Azure Firewall
OVN-Kubernetes
Palo Alto Networks microsegmentation tooling
Palo Alto Networks' Prisma SD-WAN
Palo Alto's Prisma SD-WAN/Segmentation
Pushwoosh
Segment.com
Sophos XG Firewall
Ubuntuufw
Windows Firewall
Windows Firewall / Linux iptables
Windows Firewall via Group Policy (GPO)
Zscaler Zero Trust Device Segmentation
iptables
np-guard
Discontinued, still offered
No shut-down product was recommended here.