Endpoint protection for enterprise buyers
Asked as “endpoint protection platform”, and as “business antivirus and endpoint security tool”, on behalf of an enterprise B2B company. 56 first choices recorded across the direct, paraphrase, budget and scale prompts, twelve models each.
Standing · first-choice share
46%
Clear leader
46Microsoft Defender for Endpoint30CrowdStrike Falcon09SentinelOne Singularity14others
46% of first choices, clear leader.
By buyer segment
The same question asked on behalf of a different buyer. Each standing is computed within its segment; they sit side by side and are never added together.
The standing
Share is the count of first choices across the direct, paraphrase, budget and scale prompts, over all twelve models, for an enterprise B2B company. Ordered by share.
ProductFirst-choice shareNegative rateLabelsQuadrant
Show the six products at 0%, ordered by negative rate
Bars are the share of first choices, 0 to 100Every product with at least 10 labels here. Every product name links to its product page.
Head to head
Bitdefender GravityZone vs Microsoft Defender for EndpointBitdefender GravityZone vs Microsoft Defender for CloudBitdefender GravityZone vs Sophos Intercept X
Head-to-head pages are published for mid-market buyers, so these open on mid-market figures, not enterprise.All twenty-eight head-to-head pages: the top eight products, each against each
Bitdefender GravityZone vs SentinelOne Singularity EndpointBitdefender GravityZone vs CrowdStrike FalconBitdefender GravityZone vs SentinelOne SingularityBitdefender GravityZone vs ESET PROTECTMicrosoft Defender for Endpoint vs Microsoft Defender for CloudMicrosoft Defender for Endpoint vs Sophos Intercept XMicrosoft Defender for Endpoint vs SentinelOne Singularity EndpointMicrosoft Defender for Endpoint vs CrowdStrike FalconMicrosoft Defender for Endpoint vs SentinelOne SingularityMicrosoft Defender for Endpoint vs ESET PROTECTMicrosoft Defender for Cloud vs Sophos Intercept XMicrosoft Defender for Cloud vs SentinelOne Singularity EndpointMicrosoft Defender for Cloud vs CrowdStrike FalconMicrosoft Defender for Cloud vs SentinelOne SingularityMicrosoft Defender for Cloud vs ESET PROTECTSophos Intercept X vs SentinelOne Singularity EndpointSophos Intercept X vs CrowdStrike FalconSophos Intercept X vs SentinelOne SingularitySophos Intercept X vs ESET PROTECTSentinelOne Singularity Endpoint vs CrowdStrike FalconSentinelOne Singularity Endpoint vs SentinelOne SingularitySentinelOne Singularity Endpoint vs ESET PROTECTCrowdStrike Falcon vs SentinelOne SingularityCrowdStrike Falcon vs ESET PROTECTSentinelOne Singularity vs ESET PROTECT
Recommended versus criticized
Every product with at least 10 labels here, on both axes. The 30% line names a quadrant, not the verdict above: that one needs more than 40%.
Criticized challengerCriticized default
Negative label rate →
01
02
03
04
05
06
07
08
09
10
11Accepted challengerEndorsed leader
0%First-choice share → · lines at 30% share and 25% negative60%
Key
01Microsoft Defender for Endpoint46%
Microsoft Defender for Endpoint46%02CrowdStrike Falcon30%
CrowdStrike Falcon30%03SentinelOne Singularity9%
SentinelOne Singularity9%04CrowdStrike5%
CrowdStrike5%05SentinelOne Singularity Endpoint2%
SentinelOne Singularity Endpoint2%06Palo Alto Networks Cortex XDR0%
Palo Alto Networks Cortex XDR0%07Sophos Intercept X0%
Sophos Intercept X0%08Bitdefender GravityZone0%
Bitdefender GravityZone0%09Trend Micro Apex One0%
Trend Micro Apex One0%10ESET PROTECT0%
ESET PROTECT0%11Trellix Endpoint Security Suite0%
Trellix Endpoint Security Suite0%What they warned about
Four of twelve models held their first choice under the paraphrase. Claude Haiku 4.5, Gemini 3.5 Flash, Perplexity Sonar, Mistral Small, DeepSeek V4 Flash, Llama 4 Maverick, Kimi K2 and GLM 4.7 FlashX changed. A high negative share on a product with few labels is a warning. A low share on a product with many labels is salience, not sentiment.
CrowdStrike Falcon13%
6 of 47 labels negative · 5 of 12 models
“offer strong security capabilities but typically come with per-endpoint per-year costs ranging from $18 to $35, which can add significant and less predictable expenses at scale” Mistral Small, budget prompt
CrowdStrike27%
4 of 15 labels negative · 4 of 12 models
“The July 2024 faulty content update took out ~8.5 million Windows systems globally... created real single-vendor dependency / systemic risk” DeepSeek V4 Flash, negative prompt
Symantec Endpoint Security38%
3 of 8 labels negative · 3 of 12 models · 2 hard negative
“Verdict: Avoid unless you are a premier Broadcom strategic partner with guaranteed white-glove support.” Gemini 3.5 Flash, negative prompt
ESET PROTECT27%
4 of 15 labels negative · 3 of 12 models · 1 hard negative
“MITRE detection at 55.9%—middling at best... Not ideal for high-velocity SOCs in large orgs.” Grok 4.20, negative prompt
What they cite
Twelve of the twelve models returned a source list in this edition: four return the pages they cited and eight the search results they consulted.
Sites the answers cite
65 of 72 answers in this category came back with a source list, from 12 of 12 models: citations where the model returns them, or the search results it consulted. 958 links across 266 sites, every framing counted. Ranked by the number of answers carrying the site or page.
35 answers · 55 citations · 10 models
29 answers · 38 citations · 10 models
vendor site · Deel22 answers · 25 citations · 10 models
vendor site · Microsoft17 answers · 27 citations · 9 models
vendor site · Huntress17 answers · 26 citations · 8 models
17 answers · 23 citations · 9 models
vendor site · Venn17 answers · 17 citations · 8 models
vendor site · SentinelOne16 answers · 25 citations · 7 models
16 answers · 18 citations · 6 models
vendor site · CrowdStrike15 answers · 21 citations · 8 models
vendor site · Sophos14 answers · 15 citations · 8 models
vendor site · Palo Alto Networks13 answers · 16 citations · 7 models
Pages the answers cite
The ten pages named in the most answers, by full address. A page here is one the models returned with a recommendation, not one the index endorses.
31 answers · 9 models
24 answers · 9 models
22 answers · 10 models
21 answers · 10 models
17 answers · 8 models
15 answers · 5 models
12 answers · 7 models
12 answers · 6 models
11 answers · 7 models
11 answers · 6 models
Search against answers
Each company's standing in the answers beside its site's footprint in Google search, one row a site: the products the models named on it with their shares, and the share they add up to; monthly searches on Google, and DataForSEO's estimate of AI search demand (modeled from search signals, directional, not a count of queries to any assistant), for the most-searched of the company's and its products' names (the name is in each row's hover text); estimated monthly organic visits to the site; and its best position in Google's top ten for “best endpoint protection platform”, “endpoint protection platform”, “endpoint protection platforms”. US estimates from DataForSEO and Google's Ads Transparency Center. A small company's site, or a mid-sized company's site for its flagship, is marked company; a product on a large parent's site (Google, Microsoft) has no site figures. A column with no figures for this category is left out, and an empty cell means none were seen, not none exist. Two measurements side by side: neither is read as the cause of the other.
| Company and products | Share | Own site cited | Name searches, Google | AI search demand, est. | Organic visits | Paid search a month, est. | Google ads, last 30 days | Best Google position |
|---|---|---|---|---|---|---|---|---|
| Microsoft Defender parent site Microsoft Defender for Endpoint 46% | 46% | 264 | 18,100 | 3,525 | ||||
| CrowdStrike parent site CrowdStrike Falcon 30% | 30% | 201 | 74,000 | 5,130 | ||||
| SentinelOne sentinelone.com SentinelOne Singularity 9% | 9% | 499 | 33,100 | 1,675 | 446,702 company | $780 | 22 | 2 |
| CrowdStrike crowdstrike.com | 5% | 302 | 74,000 | 5,130 | 715,209 | $13,967 | 119 | 5 |
| SentinelOne parent site SentinelOne Singularity Endpoint 2% | 2% | 80 | 33,100 | 1,675 | ||||
| Microsoft microsoft.com | 2% | 294 | 2,240,000 | 403,136 | 145,358,109 | $12,455 | 103 | |
| CrowdStrike Falcon with Flex Licensing | 2% | |||||||
| Trend Micro trendmicro.com Trend Micro Vision One™ – XDR 2%, Trend Micro Apex One 0%, Trend Vision One 0%, Trend Micro Vision One / Apex One 0% | 2% | 107 | 18,100 | 1,728 | 588,295 company | $541 | 112 | |
| Webroot Business Endpoint Protection webroot.com | 2% | 13 | ||||||
| Palo Alto Networks parent site Palo Alto Networks Cortex XDR 0% | 0% | 251 | 40,500 | 1,088 |
Google's top ten for the three searches hold 21 sites; 4 of them are among the sites the models cited here (crowdstrike.com, gartner.com, sentinelone.com, venn.com). The first result for “best endpoint protection platform” is gartner.com.
How they answered
Six framings of the same buying question, each sent to every model in a fresh session with search on. One row per model, so a row shows whether it held its answer under rewording, what it named when cost was the constraint, and what it argued against. Computed from the raw judge labels.ShowHide
How they answered
Six framings of the same buying question, each sent to every model in a fresh session with search on. One row per model, so a row shows whether it held its answer under rewording, what it named when cost was the constraint, and what it argued against. Computed from the raw judge labels.
ShowHideModelDirect“What is the best endpoint protection platform for an enterprise B2B company?”Paraphrase“Which business antivirus and endpoint security tool would you recommend to a large B2B company with thousands of employees?”Comparative“What are the top enterprise-grade endpoint protection platforms and how do they differ?”Budget-constrained“What is the best endpoint protection platform for a large company that needs predictable total cost across thousands of users?”Scale-constrained“We are a 5,000 person company with SSO, SOC 2 and procurement review requirements evaluating an endpoint protection platform. What should we look at?”Negative“Which endpoint protection platforms should a large enterprise avoid or be cautious about?”
Claude Haiku 4.5CrowdStrike Falcon, SentinelOne SingularityCrowdStrike Falcon, Microsoft Defender for EndpointChangedno first choiceCrowdStrike Falcon with Flex Licensingno first choiceagainst: CrowdStrike Falcon
Two alternatives
Microsoft Defender for Endpoint, Palo Alto Networks Cortex XDRThree alternatives
Bitdefender GravityZone, Kaspersky Endpoint Security, Palo Alto Networks Cortex XDROne alternative
Microsoft Defender for EndpointGPT-5.4 miniMicrosoft Defender for EndpointMicrosoft Defender for EndpointHeldCrowdStrike Falcon, Microsoft Defender for Endpoint, SentinelOne Singularityagainst: VMware Carbon BlackMicrosoft Defender for Endpointagainst: SentinelOne Singularityno first choicenothing named
Eight alternatives
Bitdefender GravityZone, Check Point Harmony Endpoint, CrowdStrike, Fortinet, Palo Alto Networks Cortex XDR, SentinelOne Singularity Endpoint, Sophos Intercept X, TrendAITwo alternatives
CrowdStrike Falcon, SentinelOne SingularityThree alternatives
Palo Alto Networks Cortex XDR, Sophos Intercept X, Trend Micro Vision One / Apex OneOne alternative
CrowdStrike FalconGemini 3.5 FlashCrowdStrike Falcon, Microsoft Defender for EndpointCrowdStrike Falcon, Microsoft Defender for Endpoint, SentinelOne SingularityChangedCrowdStrike FalconMicrosoft Defender for Endpoint, SentinelOne Singularityagainst: CrowdStrike Falcon, Palo Alto Networks Cortex XDRno first choiceagainst: Check Point Harmony Endpoint, Cisco Secure Endpoint, CrowdStrike, Cybereason, Fortinet, Microsoft Defender for Endpoint, Symantec Endpoint Security, Trellix Endpoint Security Suite
Three alternatives
Palo Alto Networks Cortex XDR, SentinelOne Singularity, Trend Micro Apex OneTwo alternatives
Bitdefender GravityZone, Palo Alto Networks Cortex XDRFive alternatives
Broadcom Symantec CBX, Microsoft Defender for Endpoint, Palo Alto Networks Cortex XDR, SentinelOne Singularity Endpoint, Sophos Intercept XPerplexity SonarCrowdStrike FalconMicrosoft Defender for EndpointChangedCrowdStrike FalconMicrosoft Defender for Endpointagainst: CrowdStrike, Palo Alto Networks Cortex XDRMicrosoft Defender for Endpointagainst: ESET PROTECT, Huntress Managed EDR
Three alternatives
Microsoft Defender for Endpoint, Palo Alto Networks Cortex XDR, SentinelOne Singularity EndpointThree alternatives
Bitdefender GravityZone, CrowdStrike Falcon, SentinelOne SingularitySix alternatives
Bitdefender GravityZone, Microsoft Defender for Endpoint, Palo Alto Networks Cortex XDR, SentinelOne Singularity, Sophos Intercept X, Trend Micro Apex OneTwo alternatives
Trellix XDR, Trend Vision OneTwo alternatives
CrowdStrike, SentinelOne Singularity EndpointGrok 4.20CrowdStrike FalconCrowdStrike FalconHeldCrowdStrike Falconagainst: Bitdefender GravityZone, ESET PROTECT, Trellix Endpoint Security SuiteMicrosoft Defender for EndpointCrowdStrike, SentinelOne Singularity Endpointagainst: Cisco Secure Endpoint, ESET PROTECT, Symantec Endpoint Security, Trellix Endpoint Security Suite, WatchGuard, WithSecure
Three alternatives
Microsoft Defender for Endpoint, SentinelOne Singularity, Sophos Intercept XOne alternative
Microsoft Defender for EndpointFive alternatives
Microsoft Defender for Endpoint, Palo Alto Networks Cortex XDR, SentinelOne Singularity Endpoint, Sophos Intercept X, Trend Vision OneTwo alternatives
CrowdStrike Falcon, SentinelOne SingularityTwo alternatives
Microsoft, Palo Alto Networks Cortex XDRMistral SmallCrowdStrike Falcon, Microsoft Defender for EndpointCrowdStrike FalconChangedCrowdStrike Falcon, SentinelOne SingularityMicrosoft Defender for Endpointagainst: CrowdStrike Falcon, SentinelOne SingularityCrowdStrikeagainst: McAfee, Sophos Intercept X, Xcitium
Three alternatives
Bitdefender GravityZone, ESET PROTECT, SentinelOne SingularityTwo alternatives
Microsoft Defender for Endpoint, SentinelOne SingularityThree alternatives
Bitdefender GravityZone, ESET Endpoint Security, Microsoft Defender for EndpointThree alternatives
Microsoft Defender for Endpoint, Palo Alto Networks Cortex XDR, SentinelOne Singularity EndpointDeepSeek V4 FlashCrowdStrike, MicrosoftCrowdStrike FalconChangedCrowdStrike Falcon, Microsoft Defender for Endpoint, SentinelOne SingularityMicrosoft Defender for Endpointagainst: SentinelOne Singularityno first choiceagainst: CrowdStrike, Microsoft Defender for Endpoint, SentinelOne Singularity Endpoint
Three alternatives
Palo Alto Networks Cortex XDR, SentinelOne Singularity Endpoint, Sophos Intercept XThree alternatives
Microsoft Defender for Endpoint, Palo Alto Networks Cortex XDR, SentinelOne SingularityFive alternatives
Bitdefender GravityZone, ESET PROTECT, Palo Alto Networks Cortex XDR, Sophos Intercept X, Trend Micro Vision One / Apex OneOne alternative
CrowdStrike FalconLlama 4 Maverickno first choiceMicrosoft Defender for Endpoint, Webroot Business Endpoint ProtectionChangedno first choiceMicrosoft Defender for Endpointno first choiceagainst: Bitdefender GravityZone Small Business Security, CrowdStrike Falcon, Microsoft Defender for Endpoint
Six alternatives
Carbon Black Enterprise EDR, CrowdStrike Falcon, Palo Alto Networks Cortex XDR, SentinelOne Singularity, Trellix XDR, Trend Vision OneQwen 3.7 FlashCrowdStrike FalconCrowdStrike FalconHeldCrowdStrike Falcon, Microsoft Defender for Endpoint, SentinelOne SingularityMicrosoft Defender for Endpointno first choiceagainst: Kaspersky Business for Enterprise, Norton, Symantec Endpoint Security
Three alternatives
Microsoft Defender XDR, SentinelOne Singularity Endpoint, Sophos Intercept XFour alternatives
Microsoft Defender for Endpoint, Palo Alto Networks Cortex XDR, SentinelOne Singularity Endpoint, Sophos Intercept XThree alternatives
Bitdefender GravityZone, ESET PROTECT, Palo Alto Networks Cortex XDRTwo alternatives
Bitdefender GravityZone, CrowdStrike FalconKimi K2Microsoft Defender for Endpoint, Trend Micro Vision One™ – XDRMicrosoft Defender for EndpointChangedCrowdStrike FalconMicrosoft Defender for Endpoint, SentinelOne SingularityMicrosoft Defender for Endpointagainst: CrowdStrike, Kaspersky Endpoint Security, Legacy McAfee, Legacy Symantec/Broadcom Endpoint Protection, Norton
Two alternatives
CrowdStrike Falcon, SentinelOne SingularitySix alternatives
Bitdefender GravityZone, Microsoft Defender for Endpoint, Palo Alto Networks Cortex XDR, SentinelOne Singularity, Sophos Intercept X, Trend Micro Apex OneOne alternative
CrowdStrike FalconTwo alternatives
CrowdStrike Falcon, SentinelOne SingularityGLM 4.7 FlashXCrowdStrike Falcon, Microsoft Defender for EndpointCrowdStrike FalconChangedCrowdStrike Falcon, SentinelOne SingularityMicrosoft Defender for Endpointno first choiceagainst: Bitdefender GravityZone, ESET PROTECT, Kaspersky Endpoint Security
Six alternatives
Bitdefender GravityZone, Cynet 360, Palo Alto Networks Cortex XDR, SentinelOne Singularity, Sophos Intercept X, Symantec Endpoint SecurityThree alternatives
Bitdefender GravityZone, Microsoft Defender for Endpoint, SentinelOne Singularity EndpointSeven alternatives
Bitdefender GravityZone, ESET PROTECT, Microsoft Defender for Endpoint, Palo Alto Networks Cortex XDR, Sophos Intercept X, ThreatLocker Zero Trust Platform, Trend Micro Apex OneOne alternative
CrowdStrike FalconMiniMax M2.5CrowdStrike Falcon, Microsoft Defender for EndpointCrowdStrike Falcon, Microsoft Defender for EndpointHeldno first choiceMicrosoft Defender for Endpointagainst: CrowdStrike Falcon, SentinelOne Singularity EndpointCrowdStrike Falcon, SentinelOne Singularityagainst: Sophos Intercept X, Trellix Endpoint Security Suiteagainst: CrowdStrike Falcon, Malwarebytes ThreatDown, NetSecurity, Rapid7, SenseOn, VMware Carbon Black
Two alternatives
Sophos Intercept X, Trend Micro Apex OneOne alternative
SentinelOne Singularity EndpointOne alternative
Microsoft Defender for EndpointBold is the first choiceAlternatives are counted; the count opens them.What the answer argued against
The record
One row per call: the version string exactly as returned, whether the model searched, sources cited, and latency.
Seventy-two rows: every prompt, every model, every answer.
| Prompt | Model | Version string | Time (UTC) | Searched | Sources | Latency |
|---|---|---|---|---|---|---|
| Direct recommendation | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-09-17 13:07 | yes | 9 | 8 s |
| Direct recommendation | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-09-17 12:35 | yes | 2 | 6 s |
| Direct recommendation | Gemini 3.5 Flash | gemini-3.5-flash | 2026-09-17 09:52 | yes | 9 | 17 s |
| Direct recommendation | Perplexity Sonar | sonar | 2026-09-17 11:09 | yes | 20 | 6 s |
| Direct recommendation | Grok 4.20 | spacexai/grok-4.1-fast-non-reasoning via vertex (asked for grok-4.20-non-reasoning; the API answered as this version) | 2026-09-17 09:57 | yes | 19 | 10 s |
| Direct recommendation | Mistral Small | mistral/mistral-small via mistral | 2026-09-17 10:15 | yes | 11 | 10 s |
| Direct recommendation | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via fireworks | 2026-09-17 13:21 | yes | 10 | 14 s |
| Direct recommendation | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-09-17 11:15 | yes | 5 | 3 s |
| Direct recommendation | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-09-17 10:34 | yes | 5 | 40 s |
| Direct recommendation | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-09-17 12:19 | yes | 10 | 17 s |
| Direct recommendation | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-09-17 14:13 | yes | 15 | 48 s |
| Direct recommendation | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-09-17 12:20 | yes | 10 | 38 s |
| Paraphrase | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-09-17 11:10 | no | 0 | 4 s |
| Paraphrase | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-09-17 09:52 | yes | 4 | 5 s |
| Paraphrase | Gemini 3.5 Flash | gemini-3.5-flash | 2026-09-17 11:50 | yes | 10 | 21 s |
| Paraphrase | Perplexity Sonar | sonar | 2026-09-17 11:36 | yes | 20 | 7 s |
| Paraphrase | Grok 4.20 | spacexai/grok-4.1-fast-non-reasoning via vertex (asked for grok-4.20-non-reasoning; the API answered as this version) | 2026-09-17 10:37 | yes | 31 | 16 s |
| Paraphrase | Mistral Small | mistral/mistral-small via mistral | 2026-09-17 12:39 | yes | 5 | 4 s |
| Paraphrase | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via fireworks | 2026-09-17 12:47 | yes | 15 | 17 s |
| Paraphrase | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-09-17 13:25 | yes | 5 | 4 s |
| Paraphrase | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-09-17 09:45 | no | 0 | 39 s |
| Paraphrase | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-09-17 12:45 | yes | 15 | 21 s |
| Paraphrase | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-09-17 10:08 | yes | 9 | 36 s |
| Paraphrase | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-09-17 10:01 | yes | 5 | 24 s |
| Comparative | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-09-17 13:52 | yes | 9 | 8 s |
| Comparative | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-09-17 14:01 | yes | 7 | 17 s |
| Comparative | Gemini 3.5 Flash | gemini-3.5-flash | 2026-09-17 11:39 | yes | 16 | 30 s |
| Comparative | Perplexity Sonar | sonar | 2026-09-17 10:47 | yes | 20 | 8 s |
| Comparative | Grok 4.20 | spacexai/grok-4.1-fast-non-reasoning via vertex (asked for grok-4.20-non-reasoning; the API answered as this version) | 2026-09-17 10:43 | yes | 31 | 20 s |
| Comparative | Mistral Small | mistral/mistral-small via mistral | 2026-09-17 09:43 | yes | 6 | 13 s |
| Comparative | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via fireworks | 2026-09-17 12:01 | yes | 18 | 24 s |
| Comparative | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-09-17 10:48 | yes | 5 | 2 s |
| Comparative | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-09-17 12:13 | yes | 10 | 34 s |
| Comparative | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-09-17 12:34 | yes | 14 | 33 s |
| Comparative | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-09-17 13:37 | yes | 28 | 132 s |
| Comparative | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-09-17 12:59 | yes | 5 | 49 s |
| Budget constrained | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-09-17 10:16 | yes | 17 | 9 s |
| Budget constrained | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-09-17 12:50 | yes | 3 | 6 s |
| Budget constrained | Gemini 3.5 Flash | gemini-3.5-flash | 2026-09-17 11:09 | yes | 15 | 24 s |
| Budget constrained | Perplexity Sonar | sonar | 2026-09-17 11:00 | yes | 20 | 8 s |
| Budget constrained | Grok 4.20 | spacexai/grok-4.1-fast-non-reasoning via vertex (asked for grok-4.20-non-reasoning; the API answered as this version) | 2026-09-17 13:57 | yes | 42 | 18 s |
| Budget constrained | Mistral Small | mistral/mistral-small via mistral | 2026-09-17 13:32 | yes | 5 | 5 s |
| Budget constrained | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via fireworks | 2026-09-17 12:53 | yes | 17 | 26 s |
| Budget constrained | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-09-17 13:44 | yes | 5 | 2 s |
| Budget constrained | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-09-17 13:52 | yes | 10 | 39 s |
| Budget constrained | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-09-17 12:53 | yes | 10 | 43 s |
| Budget constrained | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-09-17 10:42 | yes | 34 | 109 s |
| Budget constrained | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-09-17 13:51 | yes | 23 | 56 s |
| Scale constrained | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-09-17 10:08 | no | 0 | 8 s |
| Scale constrained | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-09-17 12:00 | no | 0 | 10 s |
| Scale constrained | Gemini 3.5 Flash | gemini-3.5-flash | 2026-09-17 14:12 | no | 0 | 19 s |
| Scale constrained | Perplexity Sonar | sonar | 2026-09-17 12:31 | yes | 19 | 10 s |
| Scale constrained | Grok 4.20 | spacexai/grok-4.1-fast-non-reasoning via vertex (asked for grok-4.20-non-reasoning; the API answered as this version) | 2026-09-17 10:10 | yes | 20 | 11 s |
| Scale constrained | Mistral Small | mistral/mistral-small via mistral | 2026-09-17 13:50 | no | 0 | 10 s |
| Scale constrained | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via fireworks | 2026-09-17 12:43 | yes | 29 | 32 s |
| Scale constrained | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-09-17 12:18 | yes | 5 | 3 s |
| Scale constrained | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-09-17 11:18 | no | 0 | 39 s |
| Scale constrained | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-09-17 12:25 | yes | 24 | 44 s |
| Scale constrained | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-09-17 12:22 | yes | 30 | 54 s |
| Scale constrained | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-09-17 13:28 | yes | 5 | 28 s |
| Negative framing | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-09-17 13:12 | yes | 34 | 13 s |
| Negative framing | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-09-17 13:42 | yes | 3 | 7 s |
| Negative framing | Gemini 3.5 Flash | gemini-3.5-flash | 2026-09-17 13:05 | yes | 18 | 30 s |
| Negative framing | Perplexity Sonar | sonar | 2026-09-17 13:04 | yes | 20 | 8 s |
| Negative framing | Grok 4.20 | spacexai/grok-4.1-fast-non-reasoning via vertex (asked for grok-4.20-non-reasoning; the API answered as this version) | 2026-09-17 10:38 | yes | 25 | 18 s |
| Negative framing | Mistral Small | mistral/mistral-small via mistral | 2026-09-17 12:49 | yes | 15 | 9 s |
| Negative framing | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via fireworks | 2026-09-17 10:03 | yes | 27 | 26 s |
| Negative framing | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-09-17 11:52 | yes | 5 | 5 s |
| Negative framing | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-09-17 11:26 | yes | 15 | 66 s |
| Negative framing | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-09-17 14:00 | yes | 24 | 34 s |
| Negative framing | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-09-17 12:26 | yes | 10 | 49 s |
| Negative framing | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-09-17 10:15 | yes | 16 | 71 s |
Normalization in this category
Every judgment call made between the raw labels and the numbers above, listed so it is visible and reversible.
ShowHide
Category-scoped readings
Bitdefender read as Bitdefender GravityZone
Bitdefender GravityZone Business Security read as Bitdefender GravityZone
Bitdefender GravityZone SBS read as Bitdefender GravityZone Small Business Security
Broadcom read as Symantec Endpoint Security
Broadcom (Symantec) Endpoint Security Complete (SESC) read as Symantec Endpoint Security
Broadcom Symantec Endpoint Security read as Symantec Endpoint Security
Check Point read as Check Point Harmony Endpoint
Check Point (Harmony Endpoint) read as Check Point Harmony Endpoint
Cisco read as Cisco Secure Endpoint
Cisco (Secure Endpoint) read as Cisco Secure Endpoint
Cisco (Secure Endpoint/Hypershield) read as Cisco Secure Endpoint
CrowdStrike Falcon EPP read as CrowdStrike Falcon
Cynet read as Cynet 360
ESET read as ESET PROTECT
Huntress read as Huntress Managed EDR
Kaspersky read as Kaspersky Endpoint Security
Kaspersky Endpoint Security for Business read as Kaspersky Endpoint Security
Malwarebytes Enterprise read as Malwarebytes ThreatDown
Microsoft Defender for Endpoint P2 read as Microsoft Defender for Endpoint
Palo Alto read as Palo Alto Networks Cortex XDR
Palo Alto Networks read as Palo Alto Networks Cortex XDR
Palo Alto Networks (Cortex XDR) read as Palo Alto Networks Cortex XDR
SentinelOne read as SentinelOne Singularity Endpoint
Sophos read as Sophos Intercept X
Sophos Endpoint read as Sophos Intercept X
Sophos Intercept X Endpoint read as Sophos Intercept X
Symantec (Broadcom) read as Symantec Endpoint Security
Symantec Endpoint Security Complete (SESC) read as Symantec Endpoint Security
ThreatLocker read as ThreatLocker Zero Trust Platform
Trellix read as Trellix Endpoint Security Suite
Trellix (MVISION) read as Trellix Endpoint Security Suite
Trellix (formerly McAfee Enterprise & FireEye) read as Trellix Endpoint Security Suite
Trellix (formerly McAfee Enterprise) read as Trellix Endpoint Security Suite
Trend Micro read as Trend Micro Apex One
Trend Micro (Trend Vision One) read as Trend Micro Apex One
Unresolved, counted raw
Broadcom Symantec CBX (incorporating Carbon Black)
Carbon Black Enterprise EDR
CrowdStrike Falcon with Flex Licensing
Group‑IB EDR
IBM QRadar EDR & MaaS360
Kaspersky Business for Enterprise
Legacy McAfee (now Trellix)
Legacy Symantec/Broadcom Endpoint Protection
NetSecurity
ThreatLocker Protect
Discontinued, still offered
No shut-down product was recommended here.