SASE platforms for small business buyers
Asked as “SASE platform”, and as “secure access service edge solution”, on behalf of a small B2B company. 44 first choices recorded across the direct, paraphrase, budget and scale prompts, fourteen models each.
Standing · first-choice share
68%
Clear leader
68Cloudflare One11Cato Networks05Cato SASE Cloud16others
68% of first choices, clear leader.
Since October 2026▼−1Since October 2026: 69% → 68%, −1 point. Inside the 11-point floor: within noise.Cloudflare One held the lead, −1 point on 69%, inside the 11-point floor.
By buyer segment
The same question asked on behalf of a different buyer. Each standing is computed within its segment; they sit side by side and are never added together.
Small business
Cloudflare One68%Clear leader▼−1Since October 2026: 69% → 68%, −1 point. Inside the 11-point floor: within noise.This pageMid-market
Cato Networks30%Contested▼−5Since October 2026: 35% → 30%, −5 points. Inside the 11-point floor: within noise.Standing →Enterprise
Palo Alto Networks Prisma SASE24%Contested▼−2Since October 2026: 26% → 24%, −2 points. Inside the 11-point floor: within noise.Standing →
Cloudflare One68%Clear leader▼−1Since October 2026: 69% → 68%, −1 point. Inside the 11-point floor: within noise.This pageMid-marketCato Networks30%Contested▼−5Since October 2026: 35% → 30%, −5 points. Inside the 11-point floor: within noise.Standing →EnterprisePalo Alto Networks Prisma SASE24%Contested▼−2Since October 2026: 26% → 24%, −2 points. Inside the 11-point floor: within noise.Standing →The standing
Share is the count of first choices across the direct, paraphrase, budget and scale prompts, over all fourteen models, for a small B2B company. Ordered by share.
ProductFirst-choice shareNegative rateLabelsQuadrantSince October 2026
01Cloudflare One68%3%62endorsed leader▼−1Since October 2026: 69% → 68%, −1 point. Inside the 11-point floor: within noise.69% → 68%
Cloudflare One68%3%62endorsed leader▼−1Since October 2026: 69% → 68%, −1 point. Inside the 11-point floor: within noise.69% → 68%02Cato Networks11%3%32accepted challenger▲+7Since October 2026: 4% → 11%, +7 points. Inside the 11-point floor: within noise.4% → 11%
Cato Networks11%3%32accepted challenger▲+7Since October 2026: 4% → 11%, +7 points. Inside the 11-point floor: within noise.4% → 11%03
Fortinet FortiSASE5%18%49accepted challenger▲+1Since October 2026: 4% → 5%, +1 point. Inside the 11-point floor: within noise.4% → 5%
Fortinet FortiSASE5%18%49accepted challenger▲+1Since October 2026: 4% → 5%, +1 point. Inside the 11-point floor: within noise.4% → 5%04
Cato SASE Cloud5%38%16criticized challenger▲+3Since October 2026: 2% → 5%, +3 points. Inside the 11-point floor: within noise.2% → 5%
Cato SASE Cloud5%38%16criticized challenger▲+3Since October 2026: 2% → 5%, +3 points. Inside the 11-point floor: within noise.2% → 5%05
Twingate2%0%16accepted challenger▲+2Since October 2026: 0% → 2%, +2 points. Inside the 11-point floor: within noise.0% → 2%
Twingate2%0%16accepted challenger▲+2Since October 2026: 0% → 2%, +2 points. Inside the 11-point floor: within noise.0% → 2%06
Check Point Harmony SASE2%19%31accepted challenger▼−4Since October 2026: 6% → 2%, −4 points. Inside the 11-point floor: within noise.6% → 2%
Check Point Harmony SASE2%19%31accepted challenger▼−4Since October 2026: 6% → 2%, −4 points. Inside the 11-point floor: within noise.6% → 2%Show the six products at 0%, ordered by negative rate
11Palo Alto Networks Prisma SASE0%62%24criticized challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%
Palo Alto Networks Prisma SASE0%62%24criticized challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%12
Zscaler Zero Trust Exchange0%61%54criticized challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%
Zscaler Zero Trust Exchange0%61%54criticized challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%10
Netskope One0%56%27criticized challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%
Netskope One0%56%27criticized challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%09
Cisco Secure Access0%32%31criticized challenger▼−6Since October 2026: 6% → 0%, −6 points. Inside the 11-point floor: within noise.6% → 0%
Cisco Secure Access0%32%31criticized challenger▼−6Since October 2026: 6% → 0%, −6 points. Inside the 11-point floor: within noise.6% → 0%08Todyl Security Platform0%8%12accepted challenger▼−2Since October 2026: 2% → 0%, −2 points. Inside the 11-point floor: within noise.2% → 0%
07
NordLayer0%0%11accepted challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%
NordLayer0%0%11accepted challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%The floor is 11 points of share, measured: how far the models move a leader on their own when the same questions are asked twice with nothing changed. A larger change is movement; a smaller one can't be told apart from repeat variation, and both are shown. Each index measures its own floor from its own repeat, over its own categories, so the floor differs from one index to the next. Both editions asked the same fourteen models. How the floor is measured
Bars are the share of first choices, 0 to 100Every product with at least 10 labels here. Every product name links to its product page.
For buyers
Head to headHead-to-head pages are published for mid-market buyers, so these open on mid-market figures, not small business.
All twenty-one head-to-head pages: the top seven products, each against each
Cato Networks vs Fortinet FortiSASECato Networks vs Cisco Secure AccessCato Networks vs Zscaler Zero Trust ExchangeCloudflare One vs Cato SASE CloudCloudflare One vs Netskope OneCloudflare One vs Fortinet FortiSASECloudflare One vs Cisco Secure AccessCloudflare One vs Zscaler Zero Trust ExchangeCato SASE Cloud vs Netskope OneCato SASE Cloud vs Fortinet FortiSASECato SASE Cloud vs Cisco Secure AccessCato SASE Cloud vs Zscaler Zero Trust ExchangeNetskope One vs Fortinet FortiSASENetskope One vs Cisco Secure AccessNetskope One vs Zscaler Zero Trust ExchangeFortinet FortiSASE vs Cisco Secure AccessFortinet FortiSASE vs Zscaler Zero Trust ExchangeCisco Secure Access vs Zscaler Zero Trust Exchange
One product takes 68% of first choices here, so the chart would put eleven markers in one corner and one at the far edge. The two measurements it plots are columns in the standing above: share, and the negative label rate. Five products carry a negative rate above 25% in this category.
What they warned about
Seven of fourteen models held their first choice under the paraphrase. Gemini 3.5 Flash, Perplexity Sonar, Grok 4.20, Llama 4 Maverick, Qwen 3.7 Flash, MiniMax M2.5 and GPT-6 Luna changed. A high negative share on a product with few labels is a warning. A low share on a product with many labels is salience, not sentiment.
Zscaler Zero Trust Exchange61%
33 of 54 labels negative · 13 of 14 models · 6 hard negative
“The recommendation is to avoid ZPA for small business because it is built for large enterprises, with opaque/custom pricing” Muse Glimmer 30B, negative prompt
Netskope One56%
15 of 27 labels negative · 9 of 14 models · 4 hard negative
“58% negative rate - No public pricing ... Support responsiveness issues reported by users” GLM 4.7 FlashX, negative prompt
Palo Alto Networks Prisma SASE62%
15 of 24 labels negative · 9 of 14 models · 2 hard negative
“Platforms with High Negative Feedback Rates ... 88% negative rate - Extremely complex implementation” GLM 4.7 FlashX, negative prompt
Fortinet FortiSASE18%
9 of 49 labels negative · 7 of 14 models · 2 hard negative
“User comments specifically advise to "avoid FortiSASE at all costs" due to its design and usability issues.” Mistral Small, negative prompt
What they cite
Fourteen of the fourteen models returned a source list in this edition: five return the pages they cited and nine the search results they consulted.
Sites the answers cite
74 of 84 answers in this category came back with a source list, from 14 of 14 models: citations where the model returns them, or the search results it consulted. 806 links across 175 sites, every framing counted. Ranked by the number of answers carrying the site or page. 32 of the 252 answers across every segment cited this index's own page for the category; the method page measures whether that reading tilts an answer.
vendor site · G243 answers · 83 citations · 12 models
31 answers · 39 citations · 9 models
vendor site · Cloudflare30 answers · 66 citations · 12 models
vendor site · Fortinet24 answers · 36 citations · 12 models
publisher (Gane)24 answers · 27 citations · 10 models
22 answers · 26 citations · 9 models
17 answers · 19 citations · 6 models
vendor site · OpenVPN17 answers · 17 citations · 9 models
17 answers · 17 citations · 11 models
16 answers · 19 citations · 9 models
13 answers · 15 citations · 8 models
12 answers · 13 citations · 8 models
Pages the answers cite
The ten pages named in the most answers, by full address. A page here is one the models returned with a recommendation, not one the index endorses.
30 answers · 9 models
24 answers · 7 models
22 answers · 9 models
17 answers · 9 models
17 answers · 11 models
14 answers · 9 models
14 answers · 6 models
12 answers · 5 models
12 answers · 7 models
12 answers · 6 models
Search against answers
Each company's standing in the answers beside its site's footprint in Google search, one row a site: the products the models named on it with their shares, and the share they add up to; monthly searches on Google, and DataForSEO's estimate of AI search demand (modeled from search signals, directional, not a count of queries to any assistant), for the most-searched of the company's and its products' names (the name is in each row's hover text); estimated monthly organic visits to the site; and its best position in Google's top ten for “best sase platform”, “sase platform”, “sase platforms”. US estimates from DataForSEO and Google's Ads Transparency Center. A small company's site, or a mid-sized company's site for its flagship, is marked company; a product on a large parent's site (Google, Microsoft) has no site figures. A column with no figures for this category is left out, and an empty cell means none were seen, not none exist. Two measurements side by side: neither is read as the cause of the other.
| Company and products | Share | Own site cited | Name searches, Google | AI search demand, est. | Organic visits | Paid search a month, est. | Google ads, last 30 days | Best Google position |
|---|---|---|---|---|---|---|---|---|
| Cloudflare parent site Cloudflare One 68%, Cloudflare Access 0% | 68% | 355 | 550,000 | 10,897 | ||||
| Cato catonetworks.com Cato Networks 11%, Cato SASE Cloud 5% | 16% | 133 | 5,400 | 120 | 20,161 company | 10 | 4 | |
| Fortinet parent site Fortinet FortiSASE 5% | 5% | 152 | 49,500 | 2,339 | ||||
| Cisco parent site Cisco Umbrella 2%, Cisco Secure Connect 2%, Cisco Secure Access 0%, Cisco Meraki 0% | 5% | 175 | 165,000 | 48,352 | ||||
| Twingate twingate.com | 2% | 170 | 9,900 | 126 | 119,706 | 5 | ||
| Check Point checkpoint.com Check Point Harmony SASE 2% | 2% | 139 | 14,800 | 4,487 | 370,648 company | $255 | 48 | |
| Datto datto.com Datto Secure Edge 2% | 2% | 3 | 9,900 | 805 | 35,477 company | $16 | 37 | |
| NordLayer nordlayer.com | 0% | 52 | 2,900 | 28 | 136,857 | $985 | 120 | |
| Todyl Security Platform todyl.com | 0% | 16 | 4,270 | 17 | ||||
| OpenVPN openvpn.net OpenVPN CloudConnexa 0% | 0% | 22 | 90 | 3 | 71,447 company | 15 |
Google's top ten for the three searches hold 19 sites; 3 of them are among the sites the models cited here (cloudflare.com, fortinet.com, g2.com). The first result for “best sase platform” is reddit.com.
How they answered
Six framings of the same buying question, each sent to every model in a fresh session with search on. One row per model, so a row shows whether it held its answer under rewording, what it named when cost was the constraint, and what it argued against. Computed from the raw judge labels.ShowHide
How they answered
Six framings of the same buying question, each sent to every model in a fresh session with search on. One row per model, so a row shows whether it held its answer under rewording, what it named when cost was the constraint, and what it argued against. Computed from the raw judge labels.
ShowHideModelDirect“What is the best SASE platform for a small B2B company?”Paraphrase“Which secure access service edge solution would you recommend to a small business that sells to other businesses?”Comparative“What are the top SASE platforms for a small team and how do they differ?”Budget-constrained“What is the best SASE platform for a small company with a tight budget?”Scale-constrained“We are a 30 person company evaluating a SASE platform. What should we look at?”Negative“Which SASE platforms should a small business avoid or be cautious about?”
Claude Haiku 4.5no first choiceno first choiceHeldCato Networks, Cloudflare One, OpenVPN CloudConnexaagainst: Palo Alto Networks Prisma SASE, Zscaler Zero Trust ExchangeCisco Umbrellano first choiceagainst: Cato SASE Cloud, Check Point Harmony SASE, Cisco's SASE solution, Palo Alto Networks Prisma SASE
Two alternatives
Check Point Harmony SASE, NordLayerFour alternatives
Barracuda SecureEdge, Netskope One, NordLayer, WindscribeGPT-5.4 miniCloudflare OneCloudflare OneHeldCloudflare OneCloudflare Oneagainst: Zscaler Zero Trust Exchangeno first choiceagainst: Cato SASE Cloud, Fortinet FortiSASE
Three alternatives
Netskope One, Palo Alto Networks Prisma Access, Zscaler Zero Trust ExchangeTwo alternatives
Cisco Secure Access, Zscaler Zero Trust ExchangeFive alternatives
Barracuda SecureEdge, Cato Networks, Fortinet FortiSASE, SonicWall Cloud Secure Edge, Zscaler Zero Trust ExchangeOne alternative
Fortinet FortiSASEGemini 3.5 FlashCato Networks, Check Point Harmony SASE, Cloudflare Oneagainst: Prisma Cloud, Zscaler Zero Trust ExchangeCloudflare OneChangedagainst: Palo Alto Networks Prisma Access, Zscaler Zero Trust ExchangeCloudflare OneCloudflare Oneagainst: Prisma Cloud, Zscaler Zero Trust ExchangeCloudflare Oneagainst: Cato Networksagainst: Cisco Secure Access, Netskope One, Palo Alto Networks Prisma SASE, Symantec Identity Governance and Administration, Zscaler Zero Trust Exchange
Three alternatives
Fortinet FortiSASE, NordLayer, Todyl Security PlatformThree alternatives
Cato Networks, Check Point Harmony SASE, NordLayerFour alternatives
Cato Networks, Check Point Harmony SASE, NordLayer, TwingateFour alternatives
Check Point Harmony SASE, Fortinet FortiSASE, NordLayer, TwingateThree alternatives
Check Point Harmony SASE, NordLayer, TwingatePerplexity SonarCloudflare Oneagainst: Netskope One, Palo Alto Networks Prisma Access, Zscaler Zero Trust ExchangeDatto Secure EdgeChangedagainst: Cisco Secure Access, Zscaler Zero Trust ExchangeCato SASE Cloud, Cloudflare Oneagainst: Netskope One, Palo Alto Networks Prisma SASE, Zscaler Zero Trust ExchangeCloudflare Oneagainst: Zscaler Zero Trust Exchangeno first choiceagainst: Broadcom, Cisco Secure Access, Forcepoint ONE, Netskope One, Palo Alto Networks Prisma Access, Versa SASE, Zscaler Zero Trust Exchange
Three alternatives
Cato SASE Cloud, Check Point Harmony SASE, Fortinet FortiSASEOne alternative
Cloudflare AccessTwo alternatives
Check Point Harmony SASE, Fortinet FortiSASETwo alternatives
Check Point Harmony SASE, Fortinet FortiSASEGrok 4.20Cato Networks, Cloudflare Oneagainst: Cisco Secure Access, Fortinet FortiSASE, Netskope OneCato SASE CloudChangedagainst: Fortinet FortiSASE, Palo Alto Networks Prisma SASECloudflare One, Netskope Oneagainst: Palo Alto Networks Prisma SASE, Zscaler Zero Trust ExchangeCloudflare Oneagainst: Cisco Secure Access, Fortinet FortiSASE, Prisma Cloud, Zscaler Zero Trust Exchangeno first choiceagainst: Check Point Harmony SASE, Cisco Secure Access, Palo Alto Networks Prisma SASE, Zscaler Zero Trust Exchange
Two alternatives
Palo Alto Networks Prisma SASE, Zscaler Zero Trust ExchangeThree alternatives
Cisco Secure Access, Netskope One, Zscaler Zero Trust ExchangeTwo alternatives
Cisco Secure Access, Fortinet FortiSASEFour alternatives
Cato Networks, NordLayer, OpenVPN CloudConnexa, TwingateTwo alternatives
Cato Networks, Netskope OneMistral SmallCloudflare OneCloudflare OneHeldFortinet FortiSASE, Todyl Security Platformagainst: Prisma AccessCloudflare Oneno first choiceagainst: Cato SASE Cloud, Fortinet FortiSASE, Netskope One, Zscaler Zero Trust Exchange
Two alternatives
Cato Networks, Fortinet FortiSASETwo alternatives
Cato SASE Cloud, Fortinet FortiSASEThree alternatives
Cisco Secure Connect, Netskope One, Zscaler Zero Trust ExchangeOne alternative
Zscaler Zero Trust ExchangeDeepSeek V4 FlashCloudflare Oneagainst: Zscaler Zero Trust ExchangeCloudflare OneHeldCloudflare Oneagainst: Netskope One, Zscaler Zero Trust ExchangeCloudflare OneCato Networksagainst: Netskope One, Palo Alto Networks Prisma SASE, Zscaler Zero Trust Exchangeagainst: Check Point Harmony SASE, Cloudflare One, Netskope One, Palo Alto Networks Prisma Access, Zscaler Zero Trust Exchange
Three alternatives
Cato Networks, Cisco Secure Access, Fortinet FortiSASEThree alternatives
Fortinet FortiSASE, Todyl Security Platform, Zscaler Zero Trust ExchangeTwo alternatives
Cato Networks, Fortinet FortiSASEThree alternatives
Cato Networks, Fortinet FortiSASE, TwingateThree alternatives
Cisco Meraki, Cisco Umbrella, Fortinet FortiSASELlama 4 MaverickCloudflare Oneno first choiceChangedCloudflare Oneagainst: Zscaler Zero Trust ExchangeCloudflare Oneno first choiceagainst: Cato SASE Cloud, Check Point Harmony SASE, Netskope One, Palo Alto Networks Prisma SASE, Zscaler Zero Trust Exchange
Three alternatives
Cato Networks, Check Point Harmony SASE, Fortinet FortiSASEFour alternatives
Cato Networks, Check Point Harmony SASE, Cisco Secure Access, Fortinet FortiSASEThree alternatives
Cisco Umbrella, Forcepoint ONE, Zscaler Zero Trust ExchangeQwen 3.7 FlashCato Networksagainst: Palo Alto Networks Prisma SASE, Zscaler Zero Trust ExchangeCloudflare OneChangedTwingateagainst: Zscaler Zero Trust ExchangeFortinet FortiSASEagainst: Cisco Secure Accessno first choiceagainst: Palo Alto Networks Prisma SASE, Zscaler Zero Trust Exchangeagainst: Check Point Harmony SASE, Cisco Secure Access, Fortinet FortiSASE, Netskope One, Palo Alto Networks Prisma SASE, Zscaler Zero Trust Exchange
Two alternatives
Cloudflare One, Fortinet FortiSASEThree alternatives
Fortinet FortiSASE, Twingate, Zscaler Zero Trust ExchangeThree alternatives
Check Point Harmony SASE, Cloudbrink, OpenVPN CloudConnexaThree alternatives
Cisco Meraki, Cloudflare One, Microsoft EntraFive alternatives
Cato Networks, Fortinet FortiCare, Skybox, Sophos Intercept X, Versa SASEKimi K2Cloudflare Oneagainst: Zscaler Zero Trust ExchangeCloudflare OneHeldCloudflare Oneagainst: Zscaler Zero Trust ExchangeCloudflare Oneno first choiceagainst: Cato SASE Cloud, Datto Secure Edge, Kaseya, Todyl Security Platform, Zscaler Zero Trust Exchange
One alternative
Check Point Harmony SASEFour alternatives
Cato SASE Cloud, Check Point Harmony SASE, Todyl Security Platform, TwingateFour alternatives
Cisco Secure Access, Netskope One, Todyl Security Platform, UmbrellaTwo alternatives
Cato SASE Cloud, Fortinet FortiSASEGLM 4.7 FlashXCloudflare OneCloudflare OneHeldZscaler Zero Trust Exchangeno first choiceno first choiceagainst: Fortinet FortiSASE, Netskope One, Palo Alto Networks Prisma SASE, Zscaler Zero Trust Exchange
Four alternatives
Check Point Harmony SASE, Cisco Secure Connect, Fortinet FortiSASE, TwingateTwo alternatives
Cisco Umbrella, Fortinet FortiSASEFive alternatives
Cisco Secure Access, Cloudflare One, Fortinet FortiSASE, Palo Alto Networks Prisma SASE, TwingateMiniMax M2.5Cisco Secure ConnectTwingateChangedCloudflare One, TwingateFortinet FortiSASEno first choicenothing named
One alternative
Todyl Security PlatformOne alternative
Cloudflare OneTwo alternatives
Cisco Secure Access, Todyl Security PlatformTwo alternatives
Cato Networks, Cloudflare OneGPT-6 LunaCato NetworksCato SASE CloudChangedCloudflare OneCloudflare Oneno first choiceagainst: Cloudflare One, Fortinet FortiSASE, Palo Alto Networks Prisma Access, Zscaler Zero Trust Exchange
Three alternatives
Cloudflare One, Fortinet FortiSASE, Netskope OneOne alternative
Cloudflare OneThree alternatives
Cato SASE Cloud, Check Point Harmony SASE, Fortinet FortiSASEOne alternative
TwingateMuse Glimmer 30BCloudflare OneCloudflare OneHeldCloudflare Oneagainst: Netskope One, Zscaler Zero Trust ExchangeCloudflare Oneagainst: Cisco Secure Access, Netskope One, Palo Alto Networks Prisma SASE, Zscaler Zero Trust ExchangeCloudflare Oneagainst: Check Point Harmony SASE, Cisco Catalyst SD-WAN, Cisco Secure Access, Fortinet FortiSASE, Palo Alto Networks Prisma SASEagainst: Cato SASE Cloud, Cisco Catalyst SD-WAN, Netskope One, Prisma Cloud, Zscaler Zero Trust Exchange
Three alternatives
Cisco Secure Access, Fortinet FortiSASE, Zscaler Zero Trust ExchangeThree alternatives
Cato Networks, Check Point Harmony SASE, Fortinet FortiSASEThree alternatives
Cato Networks – Cato SASE Cloud, Cisco Secure Access, Fortinet FortiSASETwo alternatives
Cato Networks, Check Point Harmony SASEBold is the first choiceAlternatives are counted; the count opens them.What the answer argued against
The record
One row per call: the version string exactly as returned, whether the model searched, sources cited, and latency.
Eighty-four rows: every prompt, every model, every answer.
| Prompt | Model | Version string | Time (UTC) | Searched | Sources | Latency |
|---|---|---|---|---|---|---|
| Direct recommendation | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 17:22 | no | 0 | 4 s |
| Direct recommendation | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 18:00 | yes | 4 | 5 s |
| Direct recommendation | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 10:35 | yes | 10 | 18 s |
| Direct recommendation | Perplexity Sonar | sonar | 2026-11-01 19:40 | yes | 10 | 4 s |
| Direct recommendation | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 17:56 | yes | 5 | 12 s |
| Direct recommendation | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 08:59 | yes | 5 | 3 s |
| Direct recommendation | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 15:34 | yes | 19 | 19 s |
| Direct recommendation | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 15:04 | yes | 5 | 3 s |
| Direct recommendation | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 14:47 | yes | 5 | 30 s |
| Direct recommendation | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 17:05 | yes | 15 | 37 s |
| Direct recommendation | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 19:34 | yes | 14 | 23 s |
| Direct recommendation | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 12:58 | yes | 5 | 22 s |
| Direct recommendation | GPT-6 Luna | gpt-6-luna | 2026-11-01 10:08 | yes | 3 | 13 s |
| Direct recommendation | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 15:37 | yes | 9 | 17 s |
| Paraphrase | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 14:00 | no | 0 | 5 s |
| Paraphrase | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 15:32 | yes | 3 | 5 s |
| Paraphrase | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 11:51 | no | 0 | 16 s |
| Paraphrase | Perplexity Sonar | sonar | 2026-11-01 17:35 | yes | 10 | 4 s |
| Paraphrase | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 19:29 | yes | 5 | 11 s |
| Paraphrase | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 14:33 | yes | 5 | 7 s |
| Paraphrase | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 09:28 | yes | 24 | 22 s |
| Paraphrase | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 13:27 | yes | 5 | 2 s |
| Paraphrase | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 12:14 | yes | 5 | 25 s |
| Paraphrase | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 18:48 | yes | 10 | 58 s |
| Paraphrase | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 18:28 | yes | 24 | 40 s |
| Paraphrase | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 08:41 | yes | 19 | 50 s |
| Paraphrase | GPT-6 Luna | gpt-6-luna | 2026-11-01 11:01 | yes | 2 | 19 s |
| Paraphrase | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 19:32 | yes | 13 | 16 s |
| Comparative | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 16:59 | yes | 18 | 15 s |
| Comparative | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 11:22 | yes | 4 | 7 s |
| Comparative | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 17:15 | yes | 9 | 25 s |
| Comparative | Perplexity Sonar | sonar | 2026-11-01 09:55 | yes | 10 | 6 s |
| Comparative | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 14:50 | yes | 5 | 14 s |
| Comparative | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 10:32 | yes | 5 | 8 s |
| Comparative | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 10:29 | yes | 25 | 33 s |
| Comparative | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 19:31 | yes | 5 | 3 s |
| Comparative | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 13:49 | yes | 23 | 35 s |
| Comparative | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 15:29 | yes | 20 | 40 s |
| Comparative | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 08:46 | yes | 10 | 53 s |
| Comparative | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 19:03 | yes | 10 | 31 s |
| Comparative | GPT-6 Luna | gpt-6-luna | 2026-11-01 12:02 | yes | 6 | 24 s |
| Comparative | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 15:31 | yes | 14 | 28 s |
| Budget constrained | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 19:28 | yes | 9 | 7 s |
| Budget constrained | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 16:34 | yes | 3 | 5 s |
| Budget constrained | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 19:29 | yes | 13 | 20 s |
| Budget constrained | Perplexity Sonar | sonar | 2026-11-01 18:11 | yes | 10 | 3 s |
| Budget constrained | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 18:27 | yes | 12 | 14 s |
| Budget constrained | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 14:00 | yes | 5 | 4 s |
| Budget constrained | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 13:19 | yes | 24 | 26 s |
| Budget constrained | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 09:07 | yes | 5 | 2 s |
| Budget constrained | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 17:29 | no | 0 | 30 s |
| Budget constrained | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 13:08 | yes | 14 | 27 s |
| Budget constrained | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 17:25 | yes | 24 | 40 s |
| Budget constrained | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 15:05 | yes | 5 | 70 s |
| Budget constrained | GPT-6 Luna | gpt-6-luna | 2026-11-01 14:35 | yes | 2 | 12 s |
| Budget constrained | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 12:11 | yes | 13 | 14 s |
| Scale constrained | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 11:09 | no | 0 | 7 s |
| Scale constrained | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 10:17 | no | 0 | 8 s |
| Scale constrained | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 16:12 | no | 0 | 17 s |
| Scale constrained | Perplexity Sonar | sonar | 2026-11-01 13:42 | yes | 10 | 8 s |
| Scale constrained | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 14:02 | yes | 5 | 18 s |
| Scale constrained | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 09:04 | no | 0 | 9 s |
| Scale constrained | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 14:57 | yes | 18 | 29 s |
| Scale constrained | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 13:59 | yes | 5 | 2 s |
| Scale constrained | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 10:57 | no | 0 | 34 s |
| Scale constrained | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 12:32 | yes | 10 | 21 s |
| Scale constrained | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 13:32 | yes | 15 | 47 s |
| Scale constrained | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 09:34 | yes | 10 | 52 s |
| Scale constrained | GPT-6 Luna | gpt-6-luna | 2026-11-01 11:08 | yes | 3 | 14 s |
| Scale constrained | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 19:44 | yes | 15 | 18 s |
| Negative framing | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 09:57 | yes | 16 | 11 s |
| Negative framing | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 13:29 | yes | 5 | 6 s |
| Negative framing | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 13:28 | no | 0 | 17 s |
| Negative framing | Perplexity Sonar | sonar | 2026-11-01 11:18 | yes | 10 | 4 s |
| Negative framing | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 18:11 | yes | 15 | 16 s |
| Negative framing | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 11:20 | yes | 5 | 4 s |
| Negative framing | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 11:40 | yes | 23 | 43 s |
| Negative framing | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 11:10 | yes | 5 | 3 s |
| Negative framing | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 12:34 | yes | 18 | 56 s |
| Negative framing | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 17:07 | yes | 25 | 60 s |
| Negative framing | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 11:12 | yes | 23 | 79 s |
| Negative framing | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 09:35 | yes | 5 | 59 s |
| Negative framing | GPT-6 Luna | gpt-6-luna | 2026-11-01 16:37 | yes | 4 | 16 s |
| Negative framing | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 16:53 | yes | 24 | 34 s |
Normalization in this category
Every judgment call made between the raw labels and the numbers above, listed so it is visible and reversible.
ShowHide
Category-scoped readings
Cato read as Cato SASE Cloud
Cato SASE Networks read as Cato SASE Cloud
Check Point read as Check Point Harmony SASE
Check Point Software Technologies read as Check Point Harmony SASE
Cisco read as Cisco Secure Access
Cisco (Secure Access + Catalyst SD-WAN) read as Cisco Secure Access
Cloudflare read as Cloudflare One
Forcepoint read as Forcepoint ONE
Fortinet read as Fortinet FortiSASE
Fortinet (FortiSASE) read as Fortinet FortiSASE
Netskope read as Netskope One
Palo Alto read as Palo Alto Networks Prisma SASE
Palo Alto (Prisma Access entry level) read as Palo Alto Networks Prisma SASE
Palo Alto Networks read as Palo Alto Networks Prisma SASE
Palo Alto Networks (Prisma Access) read as Palo Alto Networks Prisma SASE
Palo Alto Networks (Prisma SASE) read as Palo Alto Networks Prisma SASE
Todyl read as Todyl Security Platform
Zscaler read as Zscaler Zero Trust Exchange
Zscaler (Internet Access Essentials) read as Zscaler Zero Trust Exchange
Zscaler (ZIA + ZPA) read as Zscaler Zero Trust Exchange
Unresolved, counted raw
Cato Networks – Cato SASE Cloud
Check Point Horizon / Perimeter 81
Fortinet FortiCare
Fortinet Secure Access Service Edge
Fortinet's SASE solution
NETGEAR's Exium
Omega's Smart Secure Edge
Timus
Windscribe
Discontinued, still offered
No shut-down product was recommended here.