SASE platforms
Asked as “SASE platform”, and as “secure access service edge solution”, on behalf of a mid-market B2B company. 47 first choices recorded across the direct, paraphrase, budget and scale prompts, fourteen models each.
Standing · first-choice share
30%
Contested · Cloudflare One 28%
30Cato Networks28Cloudflare One11Cato SASE Cloud32others
30% of first choices, contested.
Since October 2026▼−5Since October 2026: 35% → 30%, −5 points. Inside the 11-point floor: within noise.Cato Networks held the lead, −5 points on 35%, inside the 11-point floor.
By buyer segment
The same question asked on behalf of a different buyer. Each standing is computed within its segment; they sit side by side and are never added together.
Small business
Cloudflare One68%Clear leader▼−1Since October 2026: 69% → 68%, −1 point. Inside the 11-point floor: within noise.Standing →Mid-market
Cato Networks30%Contested▼−5Since October 2026: 35% → 30%, −5 points. Inside the 11-point floor: within noise.This pageEnterprise
Palo Alto Networks Prisma SASE24%Contested▼−2Since October 2026: 26% → 24%, −2 points. Inside the 11-point floor: within noise.Standing →
Cloudflare One68%Clear leader▼−1Since October 2026: 69% → 68%, −1 point. Inside the 11-point floor: within noise.Standing →Mid-marketCato Networks30%Contested▼−5Since October 2026: 35% → 30%, −5 points. Inside the 11-point floor: within noise.This pageEnterprisePalo Alto Networks Prisma SASE24%Contested▼−2Since October 2026: 26% → 24%, −2 points. Inside the 11-point floor: within noise.Standing →The standing
Share is the count of first choices across the direct, paraphrase, budget and scale prompts, over all fourteen models, for a mid-market B2B company. Ordered by share.
ProductFirst-choice shareNegative rateLabelsQuadrantSince October 2026
01Cato Networks30%11%36accepted challenger▼−5Since October 2026: 35% → 30%, −5 points. Inside the 11-point floor: within noise.35% → 30%
Cato Networks30%11%36accepted challenger▼−5Since October 2026: 35% → 30%, −5 points. Inside the 11-point floor: within noise.35% → 30%02Cloudflare One28%9%45accepted challenger▼−5Since October 2026: 33% → 28%, −5 points. Inside the 11-point floor: within noise.33% → 28%
Cloudflare One28%9%45accepted challenger▼−5Since October 2026: 33% → 28%, −5 points. Inside the 11-point floor: within noise.33% → 28%03
Cato SASE Cloud11%36%14criticized challenger▲+1Since October 2026: 10% → 11%, +1 point. Inside the 11-point floor: within noise.10% → 11%
Cato SASE Cloud11%36%14criticized challenger▲+1Since October 2026: 10% → 11%, +1 point. Inside the 11-point floor: within noise.10% → 11%04
Netskope One4%25%44criticized challenger▼−2Since October 2026: 6% → 4%, −2 points. Inside the 11-point floor: within noise.6% → 4%
Netskope One4%25%44criticized challenger▼−2Since October 2026: 6% → 4%, −2 points. Inside the 11-point floor: within noise.6% → 4%05
Fortinet FortiSASE2%11%61accepted challenger▼−4Since October 2026: 6% → 2%, −4 points. Inside the 11-point floor: within noise.6% → 2%
Fortinet FortiSASE2%11%61accepted challenger▼−4Since October 2026: 6% → 2%, −4 points. Inside the 11-point floor: within noise.6% → 2%06
Cisco Secure Access2%26%35criticized challenger▲+2Since October 2026: 0% → 2%, +2 points. Inside the 11-point floor: within noise.0% → 2%
Cisco Secure Access2%26%35criticized challenger▲+2Since October 2026: 0% → 2%, +2 points. Inside the 11-point floor: within noise.0% → 2%07
Zscaler Zero Trust Exchange2%37%59criticized challenger=heldSince October 2026: 2% → 2%, ±0 points. Inside the 11-point floor: within noise.2% → 2%
Zscaler Zero Trust Exchange2%37%59criticized challenger=heldSince October 2026: 2% → 2%, ±0 points. Inside the 11-point floor: within noise.2% → 2%Show the three products at 0%, ordered by negative rate
08Palo Alto Networks Prisma SASE0%28%43criticized challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%
Palo Alto Networks Prisma SASE0%28%43criticized challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%09
Check Point Harmony SASE0%23%22accepted challenger▼−2Since October 2026: 2% → 0%, −2 points. Inside the 11-point floor: within noise.2% → 0%
Check Point Harmony SASE0%23%22accepted challenger▼−2Since October 2026: 2% → 0%, −2 points. Inside the 11-point floor: within noise.2% → 0%10
Versa SASE0%15%13accepted challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%
Versa SASE0%15%13accepted challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%The floor is 11 points of share, measured: how far the models move a leader on their own when the same questions are asked twice with nothing changed. A larger change is movement; a smaller one can't be told apart from repeat variation, and both are shown. Each index measures its own floor from its own repeat, over its own categories, so the floor differs from one index to the next. Both editions asked the same fourteen models. How the floor is measured
Bars are the share of first choices, 0 to 100Every product with at least 10 labels here. Every product name links to its product page.
For buyers
Head to head
All twenty-one head-to-head pages: the top seven products, each against each
Cato Networks vs Fortinet FortiSASECato Networks vs Cisco Secure AccessCato Networks vs Zscaler Zero Trust ExchangeCloudflare One vs Cato SASE CloudCloudflare One vs Netskope OneCloudflare One vs Fortinet FortiSASECloudflare One vs Cisco Secure AccessCloudflare One vs Zscaler Zero Trust ExchangeCato SASE Cloud vs Netskope OneCato SASE Cloud vs Fortinet FortiSASECato SASE Cloud vs Cisco Secure AccessCato SASE Cloud vs Zscaler Zero Trust ExchangeNetskope One vs Fortinet FortiSASENetskope One vs Cisco Secure AccessNetskope One vs Zscaler Zero Trust ExchangeFortinet FortiSASE vs Cisco Secure AccessFortinet FortiSASE vs Zscaler Zero Trust ExchangeCisco Secure Access vs Zscaler Zero Trust Exchange
Recommended versus criticized
Every product with at least 10 labels here, on both axes. The 30% line names a quadrant, not the verdict above: that one needs more than 40%.
Criticized challengerCriticized default
Negative label rate →
01020304050607080910Accepted challengerEndorsed leader
0%First-choice share → · lines at 30% share and 25% negative40%
Key
01Cato Networks30%
Cato Networks30%02Cloudflare One28%
Cloudflare One28%03Cato SASE Cloud11%
Cato SASE Cloud11%04Netskope One4%
Netskope One4%05Fortinet FortiSASE2%
Fortinet FortiSASE2%06Cisco Secure Access2%
Cisco Secure Access2%07Zscaler Zero Trust Exchange2%
Zscaler Zero Trust Exchange2%08Palo Alto Networks Prisma SASE0%
Palo Alto Networks Prisma SASE0%09Check Point Harmony SASE0%
Check Point Harmony SASE0%10Versa SASE0%
Versa SASE0%What they warned about
Four of fourteen models held their first choice under the paraphrase. Claude Haiku 4.5, GPT-5.4 mini, Grok 4.20, Mistral Small, Llama 4 Maverick, Qwen 3.7 Flash, Kimi K2, GLM 4.7 FlashX, MiniMax M2.5 and Muse Glimmer 30B changed. A high negative share on a product with few labels is a warning. A low share on a product with many labels is salience, not sentiment.
Zscaler Zero Trust Exchange37%
22 of 59 labels negative · 10 of 14 models · 4 hard negative
“has a high negative share on the IT AI Recommendation Index, with 62% of labels being negative, and has been known to have outages and latency issues” Llama 4 Maverick, negative prompt
Palo Alto Networks Prisma SASE28%
12 of 43 labels negative · 9 of 14 models · 2 hard negative
“What I'd Avoid for Mid-Market - Palo Alto Prisma SASE — Excellent but overkill for mid-sized companies” Kimi K2, paraphrase prompt
Netskope One25%
11 of 44 labels negative · 8 of 14 models · 1 hard negative
“Netskope | Higher-tier pricing with add-ons” Kimi K2, budget prompt
Fortinet FortiSASE11%
7 of 61 labels negative · 7 of 14 models · 2 hard negative
“Users and analysts advise avoiding it due to significant architectural and usability concerns.” Mistral Small, negative prompt
What they cite
Fourteen of the fourteen models returned a source list in this edition: five return the pages they cited and nine the search results they consulted.
Sites the answers cite
76 of 84 answers in this category came back with a source list, from 14 of 14 models: citations where the model returns them, or the search results it consulted. 854 links across 193 sites, every framing counted. Ranked by the number of answers carrying the site or page. 32 of the 252 answers across every segment cited this index's own page for the category; the method page measures whether that reading tilts an answer.
32 answers · 57 citations · 8 models
vendor site · Fortinet32 answers · 56 citations · 12 models
vendor site · Cloudflare23 answers · 34 citations · 11 models
vendor site · G221 answers · 32 citations · 12 models
21 answers · 21 citations · 11 models
21 answers · 21 citations · 11 models
20 answers · 24 citations · 9 models
17 answers · 21 citations · 8 models
vendor site · Cato Networks16 answers · 21 citations · 10 models
16 answers · 16 citations · 7 models
14 answers · 14 citations · 8 models
vendor site · CloudSEK13 answers · 13 citations · 5 models
Pages the answers cite
The ten pages named in the most answers, by full address. A page here is one the models returned with a recommendation, not one the index endorses.
21 answers · 11 models
21 answers · 8 models
21 answers · 11 models
16 answers · 7 models
14 answers · 6 models
14 answers · 8 models
13 answers · 5 models
13 answers · 6 models
11 answers · 6 models
9 answers · 4 models
Search against answers
Each company's standing in the answers beside its site's footprint in Google search, one row a site: the products the models named on it with their shares, and the share they add up to; monthly searches on Google, and DataForSEO's estimate of AI search demand (modeled from search signals, directional, not a count of queries to any assistant), for the most-searched of the company's and its products' names (the name is in each row's hover text); estimated monthly organic visits to the site; and its best position in Google's top ten for “best sase platform”, “sase platform”, “sase platforms”. US estimates from DataForSEO and Google's Ads Transparency Center. A small company's site, or a mid-sized company's site for its flagship, is marked company; a product on a large parent's site (Google, Microsoft) has no site figures. A column with no figures for this category is left out, and an empty cell means none were seen, not none exist. Two measurements side by side: neither is read as the cause of the other.
| Company and products | Share | Own site cited | Name searches, Google | AI search demand, est. | Organic visits | Google ads, last 30 days | Best Google position |
|---|---|---|---|---|---|---|---|
| Cato catonetworks.com Cato Networks 30%, Cato SASE Cloud 11% | 40% | 133 | 5,400 | 120 | 20,161 company | 10 | 4 |
| Cloudflare parent site Cloudflare One 28% | 28% | 355 | 550,000 | 10,897 | |||
| Cisco parent site Cisco Secure Access 2%, Cisco Umbrella 2%, Cisco Catalyst SD-WAN 2%, Cisco Secure Connect 2% and 1 more | 11% | 175 | 165,000 | 48,352 | |||
| Netskope netskope.com Netskope One 4% | 4% | 119 | 18,100 | 830 | 42,119 company | 27 | 8 |
| Fortinet parent site Fortinet FortiSASE 2% | 2% | 152 | 49,500 | 2,339 | |||
| Zscaler parent site Zscaler Zero Trust Exchange 2% | 2% | 169 | 60,500 | 3,104 | |||
| Cato Networks Cato SASE Cloud | 2% | ||||||
| Cato Networks – Cato SASE Cloud | 2% | ||||||
| Cato Networks' Cato SASE Cloud | 2% | ||||||
| Lookout Cloud Security Platform | 2% |
Google's top ten for the three searches hold 19 sites; 4 of them are among the sites the models cited here (catonetworks.com, cloudflare.com, fortinet.com, g2.com). The first result for “best sase platform” is reddit.com.
How they answered
Six framings of the same buying question, each sent to every model in a fresh session with search on. One row per model, so a row shows whether it held its answer under rewording, what it named when cost was the constraint, and what it argued against. Computed from the raw judge labels.ShowHide
How they answered
Six framings of the same buying question, each sent to every model in a fresh session with search on. One row per model, so a row shows whether it held its answer under rewording, what it named when cost was the constraint, and what it argued against. Computed from the raw judge labels.
ShowHideModelDirect“What is the best SASE platform for a mid-market B2B company?”Paraphrase“Which secure access service edge solution would you recommend to a mid-sized B2B company?”Comparative“What are the top SASE platforms and how do they differ?”Budget-constrained“What is the best SASE platform for a company with a limited budget?”Scale-constrained“We are a 500 person company evaluating a SASE platform. What should we look at?”Negative“Which SASE platforms should I avoid or be cautious about?”
Claude Haiku 4.5Cato SASE CloudCato NetworksChangedCato NetworksCisco Umbrellano first choiceagainst: Cato SASE Cloud, Cisco's SASE solution, Prisma Cloud
Three alternatives
Check Point Harmony SASE, Cisco Umbrella, Fortinet FortiSASETwo alternatives
Check Point Harmony SASE, Fortinet FortiSASEThree alternatives
Netskope One, Palo Alto Networks Prisma SASE, Zscaler Zero Trust ExchangeThree alternatives
Cloudflare One, OpenVPN CloudConnexa, Zscaler Zero Trust ExchangeGPT-5.4 miniFortinet FortiSASENetskope OneChangedCato Networks, Zscaler Zero Trust ExchangeCloudflare Oneagainst: Zscaler Zero Trust Exchangeno first choiceagainst: Cato SASE Cloud, Prisma Access, Zscaler Private Access
Four alternatives
Cato Networks, Cisco Secure Access, Netskope One, Zscaler Zero Trust ExchangeTwo alternatives
Palo Alto Networks Prisma SASE, Zscaler Zero Trust ExchangeFive alternatives
Cisco Secure Access, Cloudflare One, Fortinet FortiSASE, Netskope One, Palo Alto Networks Prisma SASEOne alternative
Fortinet FortiSASEGemini 3.5 FlashCato Networksagainst: Palo Alto Networks Prisma SASE, Zscaler Zero Trust ExchangeCato NetworksHeldagainst: Zscaler Zero Trust ExchangePalo Alto Networks Prisma SASECloudflare Oneagainst: Palo Alto Networks Prisma SASE, Zscaler Zero Trust ExchangeCato Networksagainst: Zscaler Zero Trust Exchangeagainst: Netskope One, Zscaler Zero Trust Exchange
Three alternatives
Check Point Harmony SASE, Cloudflare One, Fortinet FortiSASEThree alternatives
Cloudflare One, Fortinet FortiSASE, Palo Alto Networks Prisma SASESix alternatives
Cato Networks, Cisco Secure Access, Cloudflare One, Fortinet FortiSASE, Netskope One, Zscaler Zero Trust ExchangeThree alternatives
Cato Networks, Check Point Harmony SASE, Fortinet FortiSASEFour alternatives
Cloudflare One, Fortinet FortiSASE, Netskope One, Palo Alto Networks Prisma SASEPerplexity SonarCato SASE CloudCato SASE CloudHeldagainst: Palo Alto Networks Prisma AccessZscaler Zero Trust ExchangeCloudflare Oneagainst: Cato SASE Cloud, Cisco Secure Access, Netskope One, Prisma Cloud, Zscaler Zero Trust Exchangeno first choiceagainst: Cato Networks, Cisco Secure Access, Cloudflare One, Forcepoint ONE, Fortinet FortiSASE, Netskope One, Palo Alto Networks Prisma Access, Zscaler Zero Trust Exchange
Five alternatives
Check Point Harmony SASE, Cloudflare One, Fortinet FortiSASE, Netskope One, Palo Alto Networks Prisma AccessThree alternatives
Check Point Harmony SASE, Cisco Secure Access, Zscaler Zero Trust ExchangeSeven alternatives
Cato SASE Cloud, Cisco Secure Access, Cloudflare One, Fortinet FortiSASE, Netskope One, Palo Alto Networks Prisma SASE, Versa SASETwo alternatives
Check Point Harmony SASE, Fortinet FortiSASEGrok 4.20Cato Networks' Cato SASE Cloudagainst: Zscaler Zero Trust ExchangePalo Alto Networks' Prisma SASEChangedCato Networksagainst: Check Point Harmony SASE, Cloudflare OneCloudflare Oneagainst: Cato SASE Cloud, Cisco Secure Access, Netskope One, Prisma Access, Zscaler Zero Trust Exchangeno first choiceagainst: Cato Networks, Cisco Secure Access, Fortinet FortiSASE, Netskope One, Palo Alto Networks Prisma SASE, Versa SASE, Zscaler Zero Trust Exchange
Two alternatives
Netskope One, Palo Alto Networks Prisma SASEFive alternatives
Cisco Secure Connect, Cloudflare One, Fortinet FortiSASE, Netskope One, Zscaler Zero Trust ExchangeFive alternatives
Cisco Secure Access, Fortinet FortiSASE, Netskope One, Palo Alto Networks Prisma SASE, Zscaler Zero Trust ExchangeFour alternatives
Barracuda SecureEdge, Fortinet FortiSASE, NordLayer, TwingateThree alternatives
Cato Networks, Fortinet FortiSASE, Prisma CloudMistral SmallCato NetworksCisco Secure Connect, Zscaler Zero Trust ExchangeChangedCato Networks, Palo Alto Networks Prisma SASE, Zscaler Zero Trust ExchangeCato SASE Cloudno first choiceagainst: Fortinet FortiSASE, Netskope One, Palo Alto Networks Prisma SASE, Zscaler Zero Trust Exchange
Four alternatives
Cloudflare One, Fortinet FortiSASE, Netskope One, Zscaler Zero Trust ExchangeOne alternative
Prisma AccessFour alternatives
Cisco Secure Access, Fortinet FortiSASE, Netskope One, Versa SASEThree alternatives
Cloudflare's SASE Platform, Fortinet FortiSASE, TwingateDeepSeek V4 FlashCato NetworksCato NetworksHeldagainst: Netskope One, Palo Alto Networks Prisma SASEPalo Alto Networks Prisma SASECloudflare Oneagainst: Palo Alto Networks Prisma Access, Zscaler Zero Trust ExchangeCato Networksagainst: Check Point Harmony SASE, Cisco Secure Access, Netskope One, Palo Alto Networks Prisma SASE, Todyl Security Platform, Zscaler Zero Trust Exchange
Three alternatives
Cisco Secure Access, Fortinet FortiSASE, Netskope OneTwo alternatives
Cloudflare One, Fortinet FortiSASEFour alternatives
Cato Networks, Fortinet FortiSASE, Netskope One, Zscaler Zero Trust ExchangeFour alternatives
Cato Networks, Fortinet FortiSASE, NordLayer, TwingateFive alternatives
Cisco Secure Access, Cloudflare One, Fortinet FortiSASE, Palo Alto Networks Prisma SASE, Zscaler Zero Trust ExchangeLlama 4 MaverickCato NetworksManaged SASE by Omega Systems CorpChangedno first choiceCloudflare Oneno first choiceagainst: Fortinet FortiSASE, Palo Alto Networks Prisma SASE, Zscaler Zero Trust Exchange
One alternative
Cloudflare OneTwo alternatives
Comcast Business SASE, Verizon SASE ManagementTwo alternatives
Netskope One, Palo Alto Networks Prisma SASEQwen 3.7 FlashCato NetworksCisco MerakiChangedCato Networks, Zscaler Zero Trust ExchangeCloudflare Oneno first choiceagainst: Cato Networks, Check Point Harmony SASE, Fortinet FortiSASE, Palo Alto Networks Prisma SASE, Zscaler Secure Access Service Edge
Three alternatives
Cloudflare One, Prisma Access, Zscaler Zero Trust ExchangeThree alternatives
Microsoft 365, Palo Alto Networks Prisma SASE, Zscaler Zero Trust ExchangeFive alternatives
Cisco Secure Access, Cloudflare One, Fortinet FortiSASE, Netskope One, Palo Alto Networks Prisma SASEOne alternative
Cisco UmbrellaKimi K2Cato Networksagainst: Palo Alto Networks Prisma SASE, Zscaler Zero Trust ExchangeCato SASE Cloud, Cloudflare OneChangedagainst: Palo Alto Networks Prisma SASE, Zscaler Zero Trust ExchangeCato Networks — Cato SASE Cloud, Palo Alto Networks — Prisma SASECloudflare Oneagainst: Netskope One, Prisma Cloud, Zscaler Zero Trust Exchangeno first choiceagainst: Cisco Secure Access, Palo Alto Networks Prisma Access, Zscaler Zero Trust Exchange
Two alternatives
Fortinet FortiSASE, Netskope OneTwo alternatives
Check Point Harmony SASE, Fortinet FortiSASEFour alternatives
Cloudflare — Cloudflare One, Fortinet FortiSASE, Netskope — Netskope One, Zscaler — Zero Trust ExchangeTwo alternatives
Cato Networks, Fortinet FortiSASESix alternatives
Cisco Secure Access, Cloudflare One, Fortinet FortiSASE, Netskope One, Prisma Cloud, Zscaler Zero Trust ExchangeGLM 4.7 FlashXCisco Catalyst SD-WAN, Cisco Secure AccessNetskope OneChangedno first choiceCloudflare Oneno first choiceagainst: Check Point Harmony SASE, Zscaler Zero Trust Exchange
Four alternatives
Cato Networks, Fortinet FortiSASE, Palo Alto Networks Prisma SASE, Zscaler Zero Trust ExchangeOne alternative
Fortinet FortiSASESeven alternatives
Cato Networks, Cisco Secure Access, Cloudflare One, Fortinet FortiSASE, Netskope One, Palo Alto Networks Prisma SASE, Zscaler Zero Trust ExchangeTwo alternatives
Cisco Umbrella, Fortinet FortiSASEMiniMax M2.5Cato NetworksLookout Cloud Security PlatformChangedCato NetworksCloudflare Oneno first choiceagainst: Cisco Secure Accessagainst: Check Point Harmony SASE, Cisco Secure Connect, Legacy VPN Providers
Four alternatives
Cisco Secure Access, Netskope One, Palo Alto Networks Prisma Access, Zscaler Zero Trust ExchangeThree alternatives
AT&T Managed SASE with Cisco or Palo Alto, Palo Alto Networks Prisma SASE, Zscaler Zero Trust ExchangeFour alternatives
Fortinet FortiSASE, Netskope One, Palo Alto Networks Prisma SASE, Zscaler Zero Trust ExchangeThree alternatives
Fortinet FortiSASE, NordLayer, TwingateGPT-6 LunaCato NetworksCato NetworksHeldCato SASE Cloud, Netskope One, Palo Alto Networks Prisma SASE, Zscaler Zero Trust ExchangeCloudflare Oneno first choiceagainst: Cato SASE Cloud, Cisco Secure Access, Cloudflare One, Forcepoint ONE, Fortinet FortiSASE, Netskope One, Palo Alto Networks Prisma SASE
Three alternatives
Fortinet FortiSASE, Netskope One, Zscaler Zero Trust ExchangeTwo alternatives
Fortinet FortiSASE, Netskope OneThree alternatives
Cisco Secure Access, Cloudflare One, Fortinet FortiSASETwo alternatives
Cisco Secure Connect, Fortinet FortiSASEMuse Glimmer 30BCato Networks Cato SASE CloudCato Networks – Cato SASE CloudChangedZscaler Zero Trust ExchangeCloudflare Oneagainst: Netskope One, Palo Alto Networks Prisma SASE, Zscaler Zero Trust Exchangeno first choiceagainst: Cato Networks, Cisco Secure Access, Cloudflare One, Fortinet FortiSASE, Versa SASE, Zscaler Zero Trust Exchange
Five alternatives
Check Point Harmony SASE, Cisco Secure Access, Cisco Umbrella, Cloudflare One, Fortinet FortiSASEThree alternatives
Cisco Secure Access, Cisco Umbrella, Netskope OneSix alternatives
Cato Networks, Cisco Secure Access, Cloudflare One, Fortinet FortiSASE, Netskope One, Palo Alto Networks Prisma SASEFour alternatives
Cato Networks Cato SASE Cloud, Cisco Secure Access, Cisco Umbrella, Fortinet FortiSASEBold is the first choiceAlternatives are counted; the count opens them.What the answer argued against
The record
One row per call: the version string exactly as returned, whether the model searched, sources cited, and latency.
Eighty-four rows: every prompt, every model, every answer.
| Prompt | Model | Version string | Time (UTC) | Searched | Sources | Latency |
|---|---|---|---|---|---|---|
| Direct recommendation | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 19:23 | yes | 15 | 10 s |
| Direct recommendation | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 18:13 | yes | 2 | 5 s |
| Direct recommendation | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 13:38 | yes | 11 | 22 s |
| Direct recommendation | Perplexity Sonar | sonar | 2026-11-01 11:29 | yes | 10 | 4 s |
| Direct recommendation | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 16:37 | yes | 15 | 19 s |
| Direct recommendation | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 09:14 | yes | 5 | 5 s |
| Direct recommendation | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 18:45 | yes | 18 | 31 s |
| Direct recommendation | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 16:21 | yes | 5 | 2 s |
| Direct recommendation | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 14:12 | yes | 5 | 28 s |
| Direct recommendation | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 08:38 | yes | 19 | 46 s |
| Direct recommendation | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 14:47 | yes | 22 | 44 s |
| Direct recommendation | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 16:05 | yes | 9 | 41 s |
| Direct recommendation | GPT-6 Luna | gpt-6-luna | 2026-11-01 16:42 | yes | 4 | 14 s |
| Direct recommendation | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 16:32 | yes | 17 | 30 s |
| Paraphrase | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 15:54 | yes | 19 | 9 s |
| Paraphrase | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 12:31 | yes | 4 | 6 s |
| Paraphrase | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 17:11 | no | 0 | 17 s |
| Paraphrase | Perplexity Sonar | sonar | 2026-11-01 18:10 | yes | 10 | 4 s |
| Paraphrase | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 16:19 | yes | 5 | 10 s |
| Paraphrase | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 08:56 | yes | 5 | 4 s |
| Paraphrase | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 12:34 | yes | 25 | 28 s |
| Paraphrase | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 15:00 | yes | 5 | 3 s |
| Paraphrase | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 08:39 | no | 0 | 34 s |
| Paraphrase | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 13:54 | yes | 10 | 18 s |
| Paraphrase | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 09:13 | yes | 18 | 40 s |
| Paraphrase | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 19:31 | yes | 5 | 87 s |
| Paraphrase | GPT-6 Luna | gpt-6-luna | 2026-11-01 09:50 | yes | 3 | 20 s |
| Paraphrase | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 15:59 | yes | 22 | 29 s |
| Comparative | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 14:18 | yes | 9 | 9 s |
| Comparative | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 18:56 | yes | 4 | 9 s |
| Comparative | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 14:46 | yes | 11 | 27 s |
| Comparative | Perplexity Sonar | sonar | 2026-11-01 10:34 | yes | 10 | 6 s |
| Comparative | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 14:05 | yes | 5 | 16 s |
| Comparative | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 11:55 | yes | 5 | 9 s |
| Comparative | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 17:13 | yes | 24 | 47 s |
| Comparative | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 17:28 | yes | 5 | 2 s |
| Comparative | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 19:18 | yes | 5 | 26 s |
| Comparative | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 17:26 | yes | 19 | 53 s |
| Comparative | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 09:59 | yes | 24 | 24 s |
| Comparative | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 11:49 | yes | 24 | 66 s |
| Comparative | GPT-6 Luna | gpt-6-luna | 2026-11-01 09:11 | yes | 8 | 32 s |
| Comparative | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 13:01 | yes | 13 | 32 s |
| Budget constrained | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 09:33 | yes | 19 | 9 s |
| Budget constrained | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 16:22 | yes | 3 | 4 s |
| Budget constrained | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 17:36 | yes | 11 | 18 s |
| Budget constrained | Perplexity Sonar | sonar | 2026-11-01 12:36 | yes | 10 | 4 s |
| Budget constrained | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 17:14 | yes | 5 | 9 s |
| Budget constrained | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 19:14 | yes | 5 | 4 s |
| Budget constrained | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 17:23 | yes | 18 | 28 s |
| Budget constrained | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 10:53 | yes | 5 | 3 s |
| Budget constrained | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 19:17 | yes | 10 | 32 s |
| Budget constrained | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 13:45 | yes | 20 | 43 s |
| Budget constrained | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 18:19 | yes | 13 | 36 s |
| Budget constrained | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 18:01 | yes | 14 | 42 s |
| Budget constrained | GPT-6 Luna | gpt-6-luna | 2026-11-01 10:33 | yes | 2 | 13 s |
| Budget constrained | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 14:42 | yes | 15 | 20 s |
| Scale constrained | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 12:33 | yes | 14 | 13 s |
| Scale constrained | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 15:28 | yes | 4 | 11 s |
| Scale constrained | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 11:38 | no | 0 | 19 s |
| Scale constrained | Perplexity Sonar | sonar | 2026-11-01 08:49 | yes | 10 | 8 s |
| Scale constrained | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 18:17 | yes | 5 | 14 s |
| Scale constrained | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 09:43 | no | 0 | 8 s |
| Scale constrained | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 10:25 | yes | 20 | 28 s |
| Scale constrained | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 11:51 | yes | 5 | 4 s |
| Scale constrained | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 10:01 | no | 0 | 31 s |
| Scale constrained | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 17:43 | yes | 19 | 66 s |
| Scale constrained | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 11:55 | no | 0 | 11 s |
| Scale constrained | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 16:56 | no | 0 | 29 s |
| Scale constrained | GPT-6 Luna | gpt-6-luna | 2026-11-01 13:46 | yes | 2 | 18 s |
| Scale constrained | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 16:43 | yes | 14 | 20 s |
| Negative framing | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 16:41 | yes | 18 | 9 s |
| Negative framing | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 12:11 | yes | 2 | 7 s |
| Negative framing | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 18:19 | yes | 9 | 26 s |
| Negative framing | Perplexity Sonar | sonar | 2026-11-01 12:31 | yes | 10 | 6 s |
| Negative framing | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 19:35 | yes | 9 | 18 s |
| Negative framing | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 09:26 | yes | 5 | 5 s |
| Negative framing | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 11:51 | yes | 23 | 21 s |
| Negative framing | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 12:54 | yes | 5 | 3 s |
| Negative framing | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 19:40 | yes | 10 | 49 s |
| Negative framing | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 16:24 | yes | 23 | 34 s |
| Negative framing | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 09:44 | yes | 21 | 88 s |
| Negative framing | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 08:37 | no | 0 | 28 s |
| Negative framing | GPT-6 Luna | gpt-6-luna | 2026-11-01 12:34 | yes | 5 | 33 s |
| Negative framing | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 09:21 | yes | 17 | 30 s |
Normalization in this category
Every judgment call made between the raw labels and the numbers above, listed so it is visible and reversible.
ShowHide
Category-scoped readings
Cato read as Cato SASE Cloud
Cato Networks SASE Cloud read as Cato SASE Cloud
Check Point read as Check Point Harmony SASE
Check Point Software Technologies read as Check Point Harmony SASE
Cisco read as Cisco Secure Access
Cisco (Cisco Secure Connect) read as Cisco Secure Access
Cisco (Secure Access + Catalyst SD-WAN) read as Cisco Secure Access
Cisco (Secure Access / Umbrella + Catalyst SD-WAN / Duo) read as Cisco Secure Access
Cisco (Secure Access) read as Cisco Secure Access
Cisco (Umbrella-based offerings) read as Cisco Secure Access
Cisco (Umbrella/Viptela) read as Cisco Secure Access
Cloudflare read as Cloudflare One
Cloudflare (Cloudflare One) read as Cloudflare One
Forcepoint read as Forcepoint ONE
Fortinet read as Fortinet FortiSASE
Fortinet (FortiSASE + FortiGate) read as Fortinet FortiSASE
Fortinet (FortiSASE / FortiGate integration) read as Fortinet FortiSASE
Fortinet (FortiSASE / Unified SASE) read as Fortinet FortiSASE
Fortinet (FortiSASE) read as Fortinet FortiSASE
Netskope read as Netskope One
Netskope (Netskope One) read as Netskope One
Palo Alto read as Palo Alto Networks Prisma SASE
Palo Alto (Prisma SASE) read as Palo Alto Networks Prisma SASE
Palo Alto Networks read as Palo Alto Networks Prisma SASE
Palo Alto Networks (Prisma Access / SASE) read as Palo Alto Networks Prisma SASE
Palo Alto Networks (Prisma Access) read as Palo Alto Networks Prisma SASE
Palo Alto Networks (Prisma SASE) read as Palo Alto Networks Prisma SASE
Palo Alto Networks (Prisma) read as Palo Alto Networks Prisma SASE
Todyl read as Todyl Security Platform
VMware read as VMware SASE
Versa read as Versa SASE
Zscaler read as Zscaler Zero Trust Exchange
Zscaler (ZIA/ZPA/Zero Trust Exchange) read as Zscaler Zero Trust Exchange
Zscaler (Zero Trust Exchange) read as Zscaler Zero Trust Exchange
Zscaler (Zscaler Internet Access / Private Access) read as Zscaler Zero Trust Exchange
Zscaler (Zscaler Zero Trust Exchange) read as Zscaler Zero Trust Exchange
Unresolved, counted raw
AT&T Managed SASE with Cisco or Palo Alto
Aryaka SmartSecure
Cato Networks Cato SASE Cloud
Cato Networks – Cato SASE Cloud
Cato Networks — Cato SASE Cloud
Cato Networks' Cato SASE Cloud
Cloudflare — Cloudflare One
Comcast Business SASE
Legacy VPN Providers
Lookout Cloud Security Platform
Managed SASE by Omega Systems Corp
Netskope — Netskope One
Palo Alto Networks — Prisma SASE
Palo Alto Networks' Prisma SASE
Prisma ADEM
VersaONE
Zscaler Secure Access Service Edge (SASE)
Zscaler — Zero Trust Exchange (ZIA + ZPA + ZDX)
Discontinued, still offered
No shut-down product was recommended here.