# In 110 of 136 categories, the product the models put first changes with the size of the company asking.

Gane Index, November 2026 Edition. Page: https://www.gane.ai/index/it/research/buyer-size

Every category is asked on behalf of three buyers: a small B2B company, a mid-market B2B company, an enterprise B2B company. Each buyer gets its own standing, computed within its segment and never pooled. This page reads the 136 standings side by side: twenty-six categories have one leader for every buyer, seventy-six change leader once across the three, and thirty-four have a different leader for each.

| Category | Small business | Mid-market | Enterprise |
|---|---|---|---|
| AI security | Microsoft Defender for Cloud (32%) | Microsoft Defender for Cloud (12%) | Check Point AI Security (12%) |
| AI SOC agents | Dropzone AI (33%) | Dropzone AI (35%) | Dropzone AI (31%) |
| API security | Cloudflare API Shield (33%) | Salt Security (16%) | Salt Security (44%) |
| ASM | Intruder (35%) | Intruder (29%) | Cortex Xpanse (44%) |
| BAS | Vanta (20%) | Cymulate (35%) | Cymulate (27%) |
| Business continuity | SafetyCulture (29%) | SafetyCulture (14%) | Fusion Risk Management (33%) |
| Client-side protection | Microsoft Defender for Cloud (19%) | cside (18%) | Feroot Security (16%) |
| Comms archiving | Google Vault (20%) | Smarsh Enterprise Archive (18%) | Smarsh Enterprise Archive (42%) |
| Compliance automation | Vanta (34%) | Vanta (30%) | Vanta (37%) |
| Cyber risk quant | FairCRQ (35%) | CyberSaint CyberStrong (13%) | SAFE Security (48%) |
| DLP | Microsoft Purview DLP (51%) | Microsoft Purview DLP (48%) | Microsoft Purview DLP (68%) |
| DSPM | Microsoft Purview (30%) | Microsoft Purview (25%) | Varonis Data Security Platform (20%) |
| Deception | Thinkst Canary (53%) | Thinkst Canary (56%) | Acalvio ShadowPlex (61%) |
| DRP | SOCRadar Extended Threat Intelligence (27%) | SOCRadar Extended Threat Intelligence (34%) | ZeroFox (37%) |
| Email security | Microsoft Defender for Office 365 (43%) | Microsoft Defender for Office 365 (45%) | Proofpoint Email Protection (41%) |
| EDR | Microsoft Defender for Cloud (56%) | Microsoft Defender for Endpoint (38%) | CrowdStrike Falcon Insight (47%) |
| Enterprise browsers | Microsoft Edge for Business (31%) | Microsoft Edge for Business (39%) | Chrome Enterprise (38%) |
| XDR | Microsoft Defender XDR (36%) | Microsoft Defender XDR (48%) | Microsoft Defender XDR (58%) |
| GRC | Vanta (30%) | Hyperproof (22%) | ServiceNow Integrated Risk Management (25%) |
| Insider risk | Microsoft Purview Insider Risk Management (50%) | Microsoft Purview Insider Risk Management (45%) | Microsoft Purview Insider Risk Management (57%) |
| MDR | Huntress Managed EDR (83%) | Arctic Wolf Managed Detection and Response (31%) | CrowdStrike Falcon Complete (33%) |
| NDR | Sophos NDR (16%) | Vectra AI Platform (24%) | Vectra AI Platform (24%) |
| OT/IoT security | Microsoft Defender for IoT (49%) | Microsoft Defender for IoT (38%) | Claroty xDome (36%) |
| PTaaS | Stingrai (22%) | Cobalt (46%) | NetSPI (30%) |
| SSPM | Wing Security (29%) | Wing Security (28%) | AppOmni (54%) |
| Awareness training | KnowBe4 (23%) | KnowBe4 (56%) | KnowBe4 (79%) |
| SIEM | Blumira (25%) | Microsoft Sentinel (48%) | Microsoft Sentinel (47%) |
| SOAR | Tines (41%) | Tines (47%) | Cortex XSOAR (55%) |
| TPRM | UpGuard (38%) | UpGuard (44%) | ProcessUnity (25%) |
| Threat intel | MISP (19%) | MISP (21%) | Recorded Future Intelligence Cloud (62%) |
| Vuln management | Intruder (45%) | Rapid7 InsightVM (33%) | Tenable Vulnerability Management (54%) |
| AI IT agents | Freshdesk (20%) | Freshservice (24%) | ServiceNow Now Assist (49%) |
| AIOps | Site24x7 (30%) | Site24x7 (23%) | BigPanda (28%) |
| APM | New Relic (60%) | New Relic (61%) | Dynatrace (55%) |
| Business phones | Zoom Phone (28%) | RingCentral RingEX (47%) | RingCentral RingEX (57%) |
| DCIM | NetBox (41%) | Sunbird DCIM (26%) | Nlyte DCIM (38%) |
| DEX | Uniswap (16%) | Nexthink Infinity (18%) | Nexthink Infinity (45%) |
| Endpoint protection | Microsoft Defender for Cloud (49%) | Microsoft Defender for Cloud (25%) | Microsoft Defender for Endpoint (53%) |
| EA tools | Archi (31%) | SAP LeanIX (23%) | SAP LeanIX (50%) |
| Incidents | incident.io (39%) | incident.io (47%) | PagerDuty (53%) |
| Infra monitoring | Site24x7 (27%) | Datadog (29%) | Datadog (45%) |
| ITAM | Snipe-IT (46%) | Snipe-IT (29%) | ServiceNow IT Asset Management (63%) |
| IT documentation | Hudu (27%) | Hudu (29%) | Confluence (24%) |
| IT financial mgmt | QuickBooks Online (13%) | IBM Apptio (22%) | IBM Apptio (50%) |
| ITSM | Freshservice (51%) | Freshservice (52%) | ServiceNow ITSM (66%) |
| Logs | Better Stack (29%) | Datadog Log Management (31%) | Splunk (45%) |
| M365 management | Microsoft 365 Admin Center (26%) | AdminDroid 365 (22%) | CoreView ONE (37%) |
| Observability | Grafana (38%) | Grafana (32%) | Datadog (38%) |
| Patching | Action1 (54%) | Action1 (35%) | Microsoft Intune (20%) |
| Process mining | Microsoft Power Automate Process Mining (21%) | Microsoft Power Automate Process Mining (29%) | Celonis Process Intelligence Platform (68%) |
| RMM | NinjaOne RMM (40%) | NinjaOne RMM (62%) | NinjaOne RMM (50%) |
| Remote support | Zoho Assist (28%) | Splashtop Remote Support (35%) | BeyondTrust Remote Support (27%) |
| RPA | Microsoft Power Automate (81%) | Microsoft Power Automate (63%) | UiPath (74%) |
| SaaS management | Substly (22%) | Torii (26%) | Zylo (69%) |
| Telemetry pipelines | OpenTelemetry Collector (40%) | OpenTelemetry Collector (45%) | Cribl Stream (40%) |
| UEM | Microsoft Intune (36%) | Microsoft Intune (54%) | Microsoft Intune (86%) |
| Video conferencing | Zoom Workplace (46%) | Zoom Workplace (60%) | Microsoft (64%) |
| Virtual desktops | V2 Cloud (32%) | Azure Virtual Desktop (23%) | Citrix DaaS (24%) |
| Uptime monitoring | UptimeRobot (41%) | UptimeRobot (31%) | Datadog Synthetic Monitoring (25%) |
| Backup and DR | Acronis Cyber Protect (30%) | Veeam Data Platform (40%) | Veeam Data Platform (38%) |
| FinOps | Vantage (65%) | Vantage (55%) | IBM Apptio Cloudability (54%) |
| Cloud hosting | DigitalOcean Droplets (55%) | Microsoft Azure (29%) | Amazon Web Services (45%) |
| CSPM | Microsoft Defender for Cloud (33%) | Wiz (45%) | Wiz (64%) |
| CNAPP | Microsoft Defender for Cloud (30%) | Wiz (36%) | Wiz (51%) |
| Colocation | TierPoint (13%) | Flexential (18%) | Equinix (66%) |
| Container security | Trivy (38%) | Trivy (24%) | Prisma Cloud (31%) |
| Enterprise storage | HPE MSA Storage (26%) | Dell PowerStore (28%) | Pure Storage FlashArray (36%) |
| IaC | Terraform (49%) | Terraform (58%) | Terraform (62%) |
| Managed Kubernetes | DigitalOcean Kubernetes (62%) | Google Kubernetes Engine (52%) | Google Kubernetes Engine (57%) |
| Object storage | Backblaze B2 (49%) | Backblaze B2 (55%) | Amazon S3 (43%) |
| Server virtualization | Proxmox VE (74%) | Proxmox VE (44%) | Nutanix AHV (43%) |
| AI coding | GitHub Copilot (73%) | GitHub Copilot (80%) | GitHub Copilot (86%) |
| API gateways | Zuplo (29%) | Kong Gateway (63%) | Apigee (42%) |
| API management | Kong Gateway (27%) | Kong Gateway (47%) | Apigee (46%) |
| ASPM | Aikido Security (81%) | Aikido Security (40%) | ArmorCode (32%) |
| App shielding | Appdome (23%) | Appdome (36%) | Appdome (51%) |
| Artifact registries | GitHub Packages (50%) | Sonatype Nexus Repository (28%) | JFrog Artifactory (51%) |
| CI/CD | GitHub Actions (88%) | GitHub Actions (70%) | GitLab CI/CD (54%) |
| CPaaS | Twilio (39%) | Twilio (46%) | Twilio (60%) |
| DAST | OWASP ZAP (51%) | Invicti (33%) | Invicti (58%) |
| Error monitoring | Sentry (76%) | Sentry (76%) | Sentry (61%) |
| Feature flags | ConfigCat (41%) | LaunchDarkly (24%) | LaunchDarkly (56%) |
| Developer portals | Port (69%) | Port (57%) | Port (44%) |
| Secure code training | SecureFlag (25%) | Secure Code Warrior Learning Platform (38%) | Secure Code Warrior Learning Platform (62%) |
| SCA | Snyk Open Source (38%) | Snyk Open Source (34%) | Sonatype Lifecycle (30%) |
| Source control | GitHub (86%) | GitHub (78%) | GitHub (68%) |
| SAST | Semgrep AppSec Platform (82%) | Semgrep AppSec Platform (71%) | Checkmarx One (53%) |
| AI governance | Strac (43%) | Credo AI (19%) | IBM watsonx.governance (29%) |
| Data catalogs | Secoda (19%) | Atlan (35%) | Collibra (38%) |
| Data masking | DataVeil (18%) | DATPROF Privacy (22%) | Perforce Delphix (27%) |
| Data observability | Metaplane (40%) | Metaplane (23%) | Monte Carlo (43%) |
| Data virtualization | Starburst Galaxy (25%) | Denodo (31%) | Denodo (84%) |
| Data warehouses | Google BigQuery (69%) | Snowflake (62%) | Snowflake (70%) |
| EDI | TrueCommerce EDI (26%) | Cleo Integration Cloud (29%) | IBM Sterling B2B Integrator (37%) |
| Embedded analytics | Metabase (34%) | Metabase (30%) | Sisense (30%) |
| Enterprise AI | ChatGPT (45%) | Microsoft 365 Copilot (33%) | Microsoft 365 Copilot (53%) |
| ETL | Airbyte (35%) | Airbyte (40%) | Fivetran (45%) |
| Document processing | Nanonets (42%) | Nanonets (31%) | ABBYY Vantage (38%) |
| LLM gateways | Portkey (36%) | LiteLLM (36%) | Bifrost (23%) |
| MFT | Files.com (56%) | Files.com (33%) | Files.com (15%) |
| Managed databases | Supabase (29%) | Amazon RDS (51%) | Amazon Aurora (43%) |
| Master data | Pimcore (29%) | Profisee MDM (28%) | Informatica MDM (46%) |
| ML platforms | Google Vertex AI (20%) | Databricks Mosaic AI (24%) | Databricks Mosaic AI (49%) |
| NoSQL | MongoDB (81%) | MongoDB (74%) | MongoDB (53%) |
| Proxy and web data | Decodo (49%) | Decodo (57%) | Bright Data (47%) |
| Streaming | Confluent Cloud (28%) | Confluent Cloud (47%) | Confluent Cloud (66%) |
| Time series DBs | TimescaleDB (62%) | TimescaleDB (64%) | TimescaleDB (57%) |
| Vector databases | pgvector (35%) | Qdrant (34%) | Pinecone (45%) |
| Orchestration | Make (33%) | Prefect (25%) | Apache Airflow (29%) |
| Password managers | 1Password (45%) | 1Password (53%) | 1Password (47%) |
| Certificate management | Sectigo Certificate Manager (35%) | Sectigo Certificate Manager (43%) | Keyfactor Command (28%) |
| CIAM | Clerk (23%) | Auth0 (34%) | Auth0 (38%) |
| IGA | Microsoft Entra ID Governance (27%) | Microsoft Entra ID Governance (30%) | SailPoint Identity Security Cloud (59%) |
| ITDR | Huntress Managed ITDR (77%) | Huntress Managed ITDR (42%) | Microsoft Defender for Identity (37%) |
| Identity verification | iDenfy (23%) | Sumsub (21%) | Persona (16%) |
| MFA | Cisco Duo (37%) | Cisco Duo (43%) | Microsoft Entra ID (54%) |
| NHI management | JumpCloud (20%) | JumpCloud (22%) | CyberArk Identity Security Platform (20%) |
| PAM | KeeperPAM (39%) | Delinea Secret Server (39%) | CyberArk Privileged Access Manager (51%) |
| Secrets | Doppler (43%) | HashiCorp Vault (32%) | HashiCorp Vault (68%) |
| Workforce identity | JumpCloud (55%) | Microsoft Entra ID (46%) | Microsoft Entra ID (53%) |
| Bot management | Cloudflare Bot Management (82%) | Cloudflare Bot Management (60%) | Cloudflare Bot Management (36%) |
| CDN | Cloudflare (91%) | Cloudflare (93%) | Cloudflare (69%) |
| Data center networking | Arista Networks (22%) | Arista Networks (42%) | Arista Networks (52%) |
| DDI and IPAM | phpIPAM (23%) | BlueCat Micetro (15%) | Infoblox Universal DDI (60%) |
| DDoS | Cloudflare (100%) | Cloudflare (94%) | Cloudflare (68%) |
| DNS filtering | DNSFilter (40%) | DNSFilter (52%) | Cisco Umbrella (52%) |
| Load balancers | HAProxy (19%) | HAProxy (32%) | F5 BIG-IP (23%) |
| Managed DNS | Cloudflare DNS (80%) | Cloudflare DNS (95%) | Cloudflare DNS (61%) |
| Microsegmentation | Zero Networks Segment (30%) | ColorTokens Xshield (36%) | Illumio Segmentation (77%) |
| NAC | Portnox Cloud (41%) | Portnox Cloud (46%) | Cisco Identity Services Engine (39%) |
| Network monitoring | Paessler PRTG Network Monitor (44%) | Zabbix (27%) | LogicMonitor (15%) |
| Firewalls | Fortinet FortiGate (72%) | Fortinet FortiGate (71%) | Palo Alto Networks NGFW (44%) |
| SASE | Cloudflare One (68%) | Cato Networks (30%) | Palo Alto Networks Prisma SASE (24%) |
| SD-WAN | Fortinet Secure SD-WAN (40%) | Fortinet Secure SD-WAN (67%) | Cisco Catalyst SD-WAN (45%) |
| WAF | Cloudflare WAF (94%) | Cloudflare WAF (85%) | Cloudflare WAF (60%) |
| ZTNA | Cloudflare One (53%) | Cloudflare One (36%) | Zscaler Private Access (63%) |

26 categories with one leader for every buyer; 76 where the leader changes once; 34 with a different leader for each buyer.

Published under CC BY 4.0. The output is the models' output; nothing here is a recommendation by the index.