Zero trust network access for enterprise buyers
Asked as “ZTNA solution”, and as “zero trust remote access tool to replace a VPN”, on behalf of an enterprise B2B company. 42 first choices recorded across the direct, paraphrase, budget and scale prompts, twelve models each.
Standing · first-choice share
57%
Clear leader
57Zscaler Private Access31Cloudflare One05Palo Alto Networks Prisma Access07others
57% of first choices, clear leader.
By buyer segment
The same question asked on behalf of a different buyer. Each standing is computed within its segment; they sit side by side and are never added together.
The standing
Share is the count of first choices across the direct, paraphrase, budget and scale prompts, over all twelve models, for an enterprise B2B company. Ordered by share.
ProductFirst-choice shareNegative rateLabelsQuadrant
Show the six products at 0%, ordered by negative rate
Bars are the share of first choices, 0 to 100Every product with at least 10 labels here. Every product name links to its product page.
Head to headHead-to-head pages are published for mid-market buyers, so these open on mid-market figures, not enterprise.
All twenty-one head-to-head pages: the top seven products, each against each
Cloudflare One vs NordLayerCloudflare One vs Zscaler Private AccessCloudflare One vs Check Point Harmony SASETwingate vs Cato NetworksTwingate vs OpenVPN CloudConnexaTwingate vs NordLayerTwingate vs Zscaler Private AccessTwingate vs Check Point Harmony SASECato Networks vs OpenVPN CloudConnexaCato Networks vs NordLayerCato Networks vs Zscaler Private AccessCato Networks vs Check Point Harmony SASEOpenVPN CloudConnexa vs NordLayerOpenVPN CloudConnexa vs Zscaler Private AccessOpenVPN CloudConnexa vs Check Point Harmony SASENordLayer vs Zscaler Private AccessNordLayer vs Check Point Harmony SASEZscaler Private Access vs Check Point Harmony SASE
Recommended versus criticized
Every product with at least 10 labels here, on both axes. The 30% line names a quadrant, not the verdict above: that one needs more than 40%.
Criticized challengerCriticized default
Negative label rate →
01
02
03
04
05
06
07
08
09Accepted challengerEndorsed leader
0%First-choice share → · lines at 30% share and 25% negative70%
Key
01Zscaler Private Access57%
Zscaler Private Access57%02Cloudflare One31%
Cloudflare One31%03Palo Alto Networks Prisma Access5%
Palo Alto Networks Prisma Access5%04Fortinet Universal ZTNA0%
Fortinet Universal ZTNA0%05Netskope Private Access0%
Netskope Private Access0%06Akamai Enterprise Application Access0%
Akamai Enterprise Application Access0%07Twingate0%
Twingate0%08Tailscale0%
Tailscale0%09Check Point Harmony SASE0%
Check Point Harmony SASE0%What they warned about
Seven of twelve models held their first choice under the paraphrase. Claude Haiku 4.5, GPT-5.4 mini, Gemini 3.5 Flash, Mistral Small and MiniMax M2.5 changed. A high negative share on a product with few labels is a warning. A low share on a product with many labels is salience, not sentiment.
Zscaler Private Access20%
12 of 61 labels negative · 9 of 12 models · 1 hard negative
“Authentication bypass via flawed SAML signature validation, allowing forged tokens... complaints about unsuitability for large-scale deployments.” Grok 4.20, negative prompt
Palo Alto Networks Prisma Access14%
7 of 49 labels negative · 7 of 12 models
“they layer on costs tied to data egress, bandwidth consumption, regional routing, and traffic inspection volume” DeepSeek V4 Flash, budget prompt
Check Point Harmony SASE40%
6 of 15 labels negative · 5 of 12 models · 1 hard negative
“Hard-coded encryption keys exposing customer data in logs, plus authentication bypasses and privilege escalation risks.” Grok 4.20, negative prompt
Netskope Private Access26%
7 of 27 labels negative · 5 of 12 models · 1 hard negative
“Cross-tenant vulnerabilities enabling compromise via leaked enrollment tokens. Lacks consistent innovation in some areas per Gartner critiques.” Grok 4.20, negative prompt
What they cite
Twelve of the twelve models returned a source list in this edition: four return the pages they cited and eight the search results they consulted.
Sites the answers cite
67 of 72 answers in this category came back with a source list, from 12 of 12 models: citations where the model returns them, or the search results it consulted. 1090 links across 239 sites, every framing counted. Ranked by the number of answers carrying the site or page.
vendor site · Portnox36 answers · 43 citations · 11 models
34 answers · 34 citations · 10 models
29 answers · 31 citations · 10 models
29 answers · 29 citations · 9 models
26 answers · 28 citations · 11 models
24 answers · 28 citations · 9 models
22 answers · 35 citations · 10 models
vendor site · Venn19 answers · 25 citations · 10 models
vendor site · Cloudflare18 answers · 31 citations · 8 models
vendor site · Guideflow18 answers · 18 citations · 9 models
vendor site · Akamai16 answers · 18 citations · 6 models
vendor site · Zscaler15 answers · 27 citations · 7 models
Pages the answers cite
The ten pages named in the most answers, by full address. A page here is one the models returned with a recommendation, not one the index endorses.
34 answers · 10 models
29 answers · 9 models
28 answers · 9 models
26 answers · 10 models
23 answers · 11 models
21 answers · 9 models
18 answers · 9 models
14 answers · 6 models
13 answers · 4 models
12 answers · 7 models
Search against answers
Each company's standing in the answers beside its site's footprint in Google search, one row a site: the products the models named on it with their shares, and the share they add up to; monthly searches on Google, and DataForSEO's estimate of AI search demand (modeled from search signals, directional, not a count of queries to any assistant), for the most-searched of the company's and its products' names (the name is in each row's hover text); estimated monthly organic visits to the site; and its best position in Google's top ten for “best ztna solution”, “ztna solution”, “ztna solutions”. US estimates from DataForSEO and Google's Ads Transparency Center. A small company's site, or a mid-sized company's site for its flagship, is marked company; a product on a large parent's site (Google, Microsoft) has no site figures. A column with no figures for this category is left out, and an empty cell means none were seen, not none exist. Two measurements side by side: neither is read as the cause of the other.
| Company and products | Share | Own site cited | Name searches, Google | AI search demand, est. | Organic visits | Paid search a month, est. | Google ads, last 30 days | Best Google position |
|---|---|---|---|---|---|---|---|---|
| Zscaler zscaler.com Zscaler Private Access 57% | 57% | 166 | 60,500 | 3,104 | 103,886 company | $9,116 | 66 | 1 |
| Cloudflare parent site Cloudflare One 31% | 31% | 355 | 550,000 | 10,897 | ||||
| Palo Alto Networks parent site Palo Alto Networks Prisma Access 5% | 5% | 111 | 40,500 | 1,088 | ||||
| Microsoft parent site Microsoft Entra Private Access 2% | 2% | 51 | 2,240,000 | 403,136 | ||||
| Kitecyber kitecyber.com | 2% | 8 | 9 | |||||
| Zscaler parent site Zscaler Zero Trust Exchange 2% | 2% | 169 | 60,500 | 3,104 | ||||
| Fortinet parent site Fortinet Universal ZTNA 0% | 0% | 28 | 49,500 | 2,339 | ||||
| Netskope netskope.com Netskope Private Access 0% | 0% | 49 | 18,100 | 830 | 42,119 company | 27 | ||
| Akamai parent site Akamai Enterprise Application Access 0% | 0% | 15 | 27,100 | 1,614 | ||||
| Twingate twingate.com | 0% | 170 | 9,900 | 126 | 119,706 | 5 |
Google's top ten for the three searches hold 21 sites; 5 of them are among the sites the models cited here (aimultiple.com, cloudflare.com, portnox.com, venn.com, zscaler.com). The first result for “best ztna solution” is reddit.com.
How they answered
Six framings of the same buying question, each sent to every model in a fresh session with search on. One row per model, so a row shows whether it held its answer under rewording, what it named when cost was the constraint, and what it argued against. Computed from the raw judge labels.ShowHide
How they answered
Six framings of the same buying question, each sent to every model in a fresh session with search on. One row per model, so a row shows whether it held its answer under rewording, what it named when cost was the constraint, and what it argued against. Computed from the raw judge labels.
ShowHideModelDirect“What is the best ZTNA solution for an enterprise B2B company?”Paraphrase“Which zero trust remote access tool to replace a VPN would you recommend to a large B2B company with thousands of employees?”Comparative“What are the top enterprise-grade ZTNA solutions and how do they differ?”Budget-constrained“What is the best ZTNA solution for a large company that needs predictable total cost across thousands of users?”Scale-constrained“We are a 5,000 person company with SSO, SOC 2 and procurement review requirements evaluating a ZTNA solution. What should we look at?”Negative“Which ZTNA solutions should a large enterprise avoid or be cautious about?”
Claude Haiku 4.5Cloudflare One, Zscaler Zero Trust ExchangeCloudflare OneChangedThreatLocker Zero Trust Platformagainst: Check Point Harmony SASEKitecyberagainst: Zscaler Private Accessno first choiceagainst: Netskope Private Access, Palo Alto Networks Prisma Access, Zscaler Private Access
Two alternatives
Microsoft Entra Private Access, Palo Alto Networks Prisma AccessFive alternatives
Fortinet Universal ZTNA, Microsoft Entra ID, Okta Access Gateway, Palo Alto Networks Prisma Access, Zscaler Private AccessFive alternatives
Akamai Enterprise Application Access, Cloudflare One, Fortinet Universal ZTNA, Palo Alto Networks Prisma Access, Zscaler Private AccessGPT-5.4 miniZscaler Private AccessCloudflare OneChangedZscaler Private AccessCloudflare Oneagainst: Zscaler Private Accessno first choicenothing named
Two alternatives
Cloudflare One, Palo Alto Networks Prisma AccessTwo alternatives
Palo Alto Networks Prisma Access, Zscaler Private AccessThree alternatives
Cisco Secure Access, Cloudflare One, Palo Alto Networks Prisma AccessOne alternative
TailscaleGemini 3.5 FlashCloudflare OneCloudflare One, Zscaler Private AccessChangedno first choiceCloudflare Oneagainst: Check Point Harmony SASE, Palo Alto Networks Prisma Access, Zscaler Private Accessno first choiceagainst: Check Point Harmony SASE, Netskope Private Access, Zscaler Private Access
Four alternatives
Microsoft Entra Private Access, Netskope Private Access, Twingate, Zscaler Private AccessThree alternatives
Netskope Private Access, Palo Alto Networks Prisma Access, TwingateThree alternatives
Fortinet Universal ZTNA, Tailscale, TwingateSix alternatives
Banyan Security, Cloudflare One, Palo Alto Networks Prisma Access, Tailscale, Twingate, Zscaler Private AccessPerplexity SonarZscaler Private AccessZscaler Private AccessHeldZscaler Private AccessCloudflare Oneagainst: Palo Alto Networks Prisma Accessno first choiceagainst: Check Point Harmony SASE, NordLayer, Tailscale
Three alternatives
Cato Networks, Cloudflare One, Microsoft Entra Private AccessFour alternatives
Cloudflare One, Okta Access Gateway, Palo Alto Networks Prisma Access, TwingateFive alternatives
Cisco Secure Access, Cloudflare One, Fortinet Universal ZTNA, Netskope Private Access, Palo Alto Networks Prisma AccessOne alternative
Zscaler Private AccessGrok 4.20Zscaler Private AccessZscaler Private AccessHeldNetskope Private Access, Zscaler Private AccessZscaler Private Accessagainst: Cisco Duo, Cloudflare One, Netskope Private Access, Palo Alto Networks Prisma AccessZscaler Private Accessagainst: Check Point Harmony SASE, Juniper, Microsoft Entra ID, Netskope Private Access, Proofpoint, Twingate, Zscaler Private Access
Three alternatives
Cloudflare One, Netskope Private Access, Palo Alto Networks Prisma AccessThree alternatives
Cloudflare One, Netskope Private Access, Palo Alto Networks Prisma AccessThree alternatives
Akamai Enterprise Application Access, Cloudflare One, Palo Alto Networks Prisma AccessFour alternatives
Cloudflare One, Netskope Private Access, Okta Access Gateway, Palo Alto Networks Prisma AccessMistral SmallPalo Alto Networks Prisma Access, Zscaler Private AccessZscaler Private AccessChangedZscaler Private AccessZscaler Private Accessno first choicenothing named
Three alternatives
Cisco Secure Access, Cloudflare One, Fortinet Universal ZTNAThree alternatives
Citrix Secure Private Access, Cloudflare One, TwingateThree alternatives
Cloudflare One, Fortinet Universal ZTNA, Palo Alto Networks Prisma AccessTwo alternatives
Akamai Enterprise Application Access, Cloudflare OneDeepSeek V4 FlashZscaler Private AccessZscaler Private AccessHeldagainst: Tailscale, TwingateNetskope Private Access, Zscaler Private AccessCloudflare Oneagainst: Palo Alto Networks Prisma Access, Zscaler Private Accessno first choiceagainst: Barracuda, Cloudflare One, HashiCorp Boundary, OpenZiti, Tailscale, Twingate
Four alternatives
Cloudflare One, Microsoft Entra Private Access, Netskope Private Access, Palo Alto Networks Prisma AccessTwo alternatives
Microsoft Entra Private Access, Palo Alto Networks Prisma AccessThree alternatives
Cloudflare One, Microsoft Entra Private Access, Palo Alto Networks Prisma AccessOne alternative
Netskope Private AccessLlama 4 MaverickZscaler Private AccessZscaler Private AccessHeldno first choiceno first choiceno first choicenothing named
Two alternatives
OpenVPN CloudConnexa, Zero NetworksQwen 3.7 FlashZscaler Private AccessZscaler Private AccessHeldZscaler Private Accessagainst: Netskope Private AccessCloudflare Oneagainst: Palo Alto Networks Prisma Access, Zscaler Private Accessno first choiceagainst: Netskope Private Access, Zscaler Private Access
Four alternatives
Cloudflare One, Fortinet Universal ZTNA, Netskope Private Access, Palo Alto Networks Prisma AccessThree alternatives
Cloudflare One, Microsoft, TwingateFive alternatives
Appgate SDP, Cisco Secure Access, Cloudflare One, Fortinet Universal ZTNA, Palo Alto Networks Prisma AccessOne alternative
TwingateFour alternatives
Fortinet Universal ZTNA, Microsoft, Palo Alto Networks Prisma Access, Zscaler Private AccessKimi K2Zscaler Private AccessZscaler Private AccessHeldPalo Alto Networks Prisma Access, Zscaler Private AccessCloudflare One, Microsoft Entra Private Accessagainst: Palo Alto Networks Prisma Access, Zscaler Private AccessZscaler Private Accessnothing named
Three alternatives
Cloudflare One, Netskope ZTNA Next, Palo Alto Networks Prisma AccessTwo alternatives
Cloudflare One, Palo Alto Networks Prisma AccessSix alternatives
Akamai Enterprise Application Access, Cisco, Cloudflare One, Fortinet Universal ZTNA, Microsoft, Netskope Private AccessThree alternatives
Cloudflare One, Microsoft, Palo Alto Networks Prisma AccessGLM 4.7 FlashXZscaler Private AccessZscaler Private AccessHeldZscaler Private AccessCloudflare Oneagainst: NordLayer, Twingateno first choiceagainst: Check Point Harmony SASE, Fortinet Universal ZTNA, Netskope Private Access, Zscaler Private Access
Three alternatives
Cloudflare One, Netskope Private Access, Palo Alto Networks Prisma AccessTwo alternatives
Cloudflare One, Palo Alto Networks Prisma AccessNine alternatives
Akamai Enterprise Application Access, Cato Networks Universal ZTNA, Check Point Harmony SASE, Cisco Secure Access, Cloudflare One, Fortinet Universal ZTNA, Netskope Private Access, Okta Access Gateway, Palo Alto Networks Prisma AccessOne alternative
Zscaler Private AccessMiniMax M2.5Palo Alto Networks Prisma Access, Zscaler Private Accessno first choiceChangedZscaler Private AccessCloudflare Oneagainst: Zscaler Private AccessZscaler Private Accessnothing named
Three alternatives
Check Point Harmony SASE, Cisco Universal ZTNA, Cloudflare OneThree alternatives
Cloudflare One, Netskope Private Access, Palo Alto Networks Prisma AccessOne alternative
Microsoft Entra Private AccessTwo alternatives
Cloudflare One, Palo Alto Networks Prisma AccessBold is the first choiceAlternatives are counted; the count opens them.What the answer argued against
The record
One row per call: the version string exactly as returned, whether the model searched, sources cited, and latency.
Seventy-two rows: every prompt, every model, every answer.
| Prompt | Model | Version string | Time (UTC) | Searched | Sources | Latency |
|---|---|---|---|---|---|---|
| Direct recommendation | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-09-17 08:23 | yes | 13 | 10 s |
| Direct recommendation | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-09-17 09:11 | yes | 2 | 7 s |
| Direct recommendation | Gemini 3.5 Flash | gemini-3.5-flash | 2026-09-17 09:01 | yes | 17 | 27 s |
| Direct recommendation | Perplexity Sonar | sonar | 2026-09-17 08:27 | yes | 20 | 6 s |
| Direct recommendation | Grok 4.20 | spacexai/grok-4.1-fast-non-reasoning via vertex (asked for grok-4.20-non-reasoning; the API answered as this version) | 2026-09-17 08:53 | yes | 37 | 14 s |
| Direct recommendation | Mistral Small | mistral/mistral-small via mistral | 2026-09-17 08:52 | yes | 13 | 11 s |
| Direct recommendation | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via fireworks | 2026-09-17 09:04 | yes | 23 | 20 s |
| Direct recommendation | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-09-17 08:30 | yes | 5 | 2 s |
| Direct recommendation | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-09-17 09:05 | yes | 10 | 34 s |
| Direct recommendation | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-09-17 08:30 | yes | 18 | 32 s |
| Direct recommendation | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-09-17 08:49 | yes | 35 | 42 s |
| Direct recommendation | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-09-17 08:58 | yes | 9 | 33 s |
| Paraphrase | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-09-17 08:32 | no | 0 | 5 s |
| Paraphrase | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-09-17 09:04 | yes | 2 | 6 s |
| Paraphrase | Gemini 3.5 Flash | gemini-3.5-flash | 2026-09-17 08:57 | yes | 12 | 22 s |
| Paraphrase | Perplexity Sonar | sonar | 2026-09-17 09:03 | yes | 20 | 7 s |
| Paraphrase | Grok 4.20 | spacexai/grok-4.1-fast-non-reasoning via vertex (asked for grok-4.20-non-reasoning; the API answered as this version) | 2026-09-17 09:07 | yes | 35 | 14 s |
| Paraphrase | Mistral Small | mistral/mistral-small via mistral | 2026-09-17 08:19 | yes | 13 | 12 s |
| Paraphrase | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via fireworks | 2026-09-17 08:38 | yes | 19 | 17 s |
| Paraphrase | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-09-17 09:06 | yes | 5 | 3 s |
| Paraphrase | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-09-17 09:07 | yes | 5 | 42 s |
| Paraphrase | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-09-17 09:05 | yes | 15 | 28 s |
| Paraphrase | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-09-17 08:28 | yes | 30 | 183 s |
| Paraphrase | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-09-17 09:10 | no | 0 | 42 s |
| Comparative | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-09-17 08:21 | yes | 9 | 10 s |
| Comparative | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-09-17 09:04 | yes | 8 | 12 s |
| Comparative | Gemini 3.5 Flash | gemini-3.5-flash | 2026-09-17 09:10 | yes | 26 | 27 s |
| Comparative | Perplexity Sonar | sonar | 2026-09-17 08:33 | yes | 20 | 7 s |
| Comparative | Grok 4.20 | spacexai/grok-4.1-fast-non-reasoning via vertex (asked for grok-4.20-non-reasoning; the API answered as this version) | 2026-09-17 08:33 | yes | 36 | 15 s |
| Comparative | Mistral Small | mistral/mistral-small via mistral | 2026-09-17 09:04 | yes | 12 | 13 s |
| Comparative | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via fireworks | 2026-09-17 08:58 | yes | 22 | 23 s |
| Comparative | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-09-17 09:02 | yes | 5 | 3 s |
| Comparative | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-09-17 09:09 | yes | 5 | 27 s |
| Comparative | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-09-17 08:37 | yes | 23 | 81 s |
| Comparative | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-09-17 08:45 | yes | 19 | 199 s |
| Comparative | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-09-17 08:56 | yes | 10 | 27 s |
| Budget constrained | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-09-17 08:38 | yes | 18 | 11 s |
| Budget constrained | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-09-17 09:10 | yes | 5 | 7 s |
| Budget constrained | Gemini 3.5 Flash | gemini-3.5-flash | 2026-09-17 08:49 | yes | 18 | 30 s |
| Budget constrained | Perplexity Sonar | sonar | 2026-09-17 08:59 | yes | 20 | 8 s |
| Budget constrained | Grok 4.20 | spacexai/grok-4.1-fast-non-reasoning via vertex (asked for grok-4.20-non-reasoning; the API answered as this version) | 2026-09-17 08:22 | yes | 43 | 21 s |
| Budget constrained | Mistral Small | mistral/mistral-small via mistral | 2026-09-17 08:56 | yes | 5 | 5 s |
| Budget constrained | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via fireworks | 2026-09-17 08:38 | yes | 19 | 20 s |
| Budget constrained | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-09-17 08:51 | yes | 5 | 3 s |
| Budget constrained | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-09-17 08:21 | yes | 5 | 46 s |
| Budget constrained | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-09-17 08:39 | yes | 19 | 46 s |
| Budget constrained | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-09-17 08:46 | yes | 30 | 246 s |
| Budget constrained | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-09-17 08:24 | yes | 13 | 108 s |
| Scale constrained | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-09-17 08:59 | yes | 25 | 16 s |
| Scale constrained | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-09-17 08:31 | no | 0 | 12 s |
| Scale constrained | Gemini 3.5 Flash | gemini-3.5-flash | 2026-09-17 09:08 | yes | 8 | 30 s |
| Scale constrained | Perplexity Sonar | sonar | 2026-09-17 08:46 | yes | 20 | 9 s |
| Scale constrained | Grok 4.20 | spacexai/grok-4.1-fast-non-reasoning via vertex (asked for grok-4.20-non-reasoning; the API answered as this version) | 2026-09-17 08:22 | yes | 15 | 10 s |
| Scale constrained | Mistral Small | mistral/mistral-small via mistral | 2026-09-17 08:51 | no | 0 | 8 s |
| Scale constrained | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via fireworks | 2026-09-17 09:12 | yes | 20 | 28 s |
| Scale constrained | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-09-17 09:06 | yes | 5 | 4 s |
| Scale constrained | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-09-17 09:12 | no | 0 | 44 s |
| Scale constrained | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-09-17 08:43 | yes | 28 | 51 s |
| Scale constrained | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-09-17 08:42 | yes | 15 | 126 s |
| Scale constrained | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-09-17 08:17 | yes | 5 | 22 s |
| Negative framing | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-09-17 08:57 | yes | 19 | 14 s |
| Negative framing | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-09-17 08:54 | yes | 5 | 6 s |
| Negative framing | Gemini 3.5 Flash | gemini-3.5-flash | 2026-09-17 08:30 | yes | 21 | 26 s |
| Negative framing | Perplexity Sonar | sonar | 2026-09-17 09:10 | yes | 20 | 9 s |
| Negative framing | Grok 4.20 | spacexai/grok-4.1-fast-non-reasoning via vertex (asked for grok-4.20-non-reasoning; the API answered as this version) | 2026-09-17 09:07 | yes | 22 | 12 s |
| Negative framing | Mistral Small | mistral/mistral-small via mistral | 2026-09-17 08:44 | yes | 5 | 5 s |
| Negative framing | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via fireworks | 2026-09-17 08:37 | yes | 24 | 34 s |
| Negative framing | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-09-17 09:11 | yes | 5 | 3 s |
| Negative framing | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-09-17 08:59 | yes | 14 | 59 s |
| Negative framing | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-09-17 08:30 | yes | 27 | 47 s |
| Negative framing | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-09-17 08:19 | yes | 25 | 167 s |
| Negative framing | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-09-17 08:20 | yes | 9 | 29 s |
Normalization in this category
Every judgment call made between the raw labels and the numbers above, listed so it is visible and reversible.
ShowHide
Category-scoped readings
Akamai read as Akamai Enterprise Application Access
Appgate read as Appgate SDP
Cato read as Cato Networks Universal ZTNA
Cato Networks SASE Cloud read as Cato Networks Universal ZTNA
Check Point read as Check Point Harmony SASE
Check Point Harmony (formerly Perimeter 81) read as Check Point Harmony SASE
Cloudflare read as Cloudflare One
Cloudflare Access read as Cloudflare One
Cloudflare Access / Cloudflare One read as Cloudflare One
Cloudflare Access / Cloudflare Zero Trust read as Cloudflare One
Cloudflare One / Access read as Cloudflare One
Cloudflare One / Cloudflare Access read as Cloudflare One
Cloudflare One/Access read as Cloudflare One
Cloudflare Zero Trust / Cloudflare Access read as Cloudflare One
Cloudflare Zero Trust/Access read as Cloudflare One
Fortinet read as Fortinet Universal ZTNA
Fortinet (Agentless ZTNA portal) read as Fortinet Universal ZTNA
Fortinet (FortiSASE / FortiClient ZTNA) read as Fortinet Universal ZTNA
Fortinet (FortiSASE) read as Fortinet Universal ZTNA
Fortinet (SASE) read as Fortinet Universal ZTNA
Fortinet FortiClient (FortiGate Zero Trust) read as Fortinet Universal ZTNA
Fortinet FortiClient (ZTNA) read as Fortinet Universal ZTNA
Fortinet FortiClient Secure Access read as Fortinet Universal ZTNA
Fortinet FortiClient ZTNA read as Fortinet Universal ZTNA
Microsoft Entra read as Microsoft Entra ID
Microsoft Entra Internet Access + Private Access read as Microsoft Entra Private Access
Netskope read as Netskope Private Access
Okta read as Okta Access Gateway
Palo Alto read as Palo Alto Networks Prisma Access
Palo Alto Networks read as Palo Alto Networks Prisma Access
Palo Alto Networks (Prisma Access / ZTNA) read as Palo Alto Networks Prisma Access
Palo Alto Networks (Prisma Access) read as Palo Alto Networks Prisma Access
Zscaler read as Zscaler Private Access
Zscaler (ZIA) read as Zscaler Private Access
Zscaler (Zero Trust Exchange) read as Zscaler Private Access
Unresolved, counted raw
Citrix Secure Private Access
Netskope ZTNA Next
Discontinued, still offered
No shut-down product was recommended here.