AI SOC agents for small business buyers
Asked as “AI SOC agent”, and as “AI SOC analyst for alert triage”, on behalf of a small B2B company. 51 first choices recorded across the direct, paraphrase, budget and scale prompts, fourteen models each. Added to the November 2026 Edition.
Standing · first-choice share
33%
Contested · Huntress Managed EDR 18%
33Dropzone AI18Huntress Managed EDR16UnderDefense Agentic AI SOC33others
33% of first choices, contested.
Since October 2026▲+14Since October 2026: 19% → 33%, +14 points. Past the 11-point floor: movement.Dropzone AI held the lead, +14 points on 19%, past the floor.
By buyer segment
The same question asked on behalf of a different buyer. Each standing is computed within its segment; they sit side by side and are never added together.
Small business
Dropzone AI33%Contested▲+14Since October 2026: 19% → 33%, +14 points. Past the 11-point floor: movement.This pageMid-marketDropzone AI35%Contested▲+11Since October 2026: 24% → 35%, +11 points. Past the 11-point floor: movement.Standing →EnterpriseDropzone AI31%Contested▲+17Since October 2026: 14% → 31%, +17 points. Past the 11-point floor: movement.Standing →
Dropzone AI33%Contested▲+14Since October 2026: 19% → 33%, +14 points. Past the 11-point floor: movement.This pageMid-marketDropzone AI35%Contested▲+11Since October 2026: 24% → 35%, +11 points. Past the 11-point floor: movement.Standing →EnterpriseDropzone AI31%Contested▲+17Since October 2026: 14% → 31%, +17 points. Past the 11-point floor: movement.Standing →The standing
Share is the count of first choices across the direct, paraphrase, budget and scale prompts, over all fourteen models, for a small B2B company. Ordered by share.
ProductFirst-choice shareNegative rateLabelsQuadrantSince October 2026
01Dropzone AI33%9%43endorsed leader▲+14Since October 2026: 19% → 33%, +14 points. Past the 11-point floor: movement.19% → 33%
Dropzone AI33%9%43endorsed leader▲+14Since October 2026: 19% → 33%, +14 points. Past the 11-point floor: movement.19% → 33%02
Huntress Managed EDR18%3%39accepted challenger▲+6Since October 2026: 12% → 18%, +6 points. Inside the 11-point floor: within noise.12% → 18%
Huntress Managed EDR18%3%39accepted challenger▲+6Since October 2026: 12% → 18%, +6 points. Inside the 11-point floor: within noise.12% → 18%03
UnderDefense Agentic AI SOC16%9%34accepted challenger▲+1Since October 2026: 15% → 16%, +1 point. Inside the 11-point floor: within noise.15% → 16%
UnderDefense Agentic AI SOC16%9%34accepted challenger▲+1Since October 2026: 15% → 16%, +1 point. Inside the 11-point floor: within noise.15% → 16%04
Wazuh4%17%18accepted challenger=heldSince October 2026: 4% → 4%, ±0 points. Inside the 11-point floor: within noise.4% → 4%
Wazuh4%17%18accepted challenger=heldSince October 2026: 4% → 4%, ±0 points. Inside the 11-point floor: within noise.4% → 4%05
Intezer AI SOC2%11%27accepted challenger▼−6Since October 2026: 8% → 2%, −6 points. Inside the 11-point floor: within noise.8% → 2%
Intezer AI SOC2%11%27accepted challenger▼−6Since October 2026: 8% → 2%, −6 points. Inside the 11-point floor: within noise.8% → 2%06
SentinelOne Purple AI2%17%12accepted challenger▲+2Since October 2026: 0% → 2%, +2 points. Inside the 11-point floor: within noise.0% → 2%
SentinelOne Purple AI2%17%12accepted challenger▲+2Since October 2026: 0% → 2%, +2 points. Inside the 11-point floor: within noise.0% → 2%07Torq AI SOC Platform2%40%25criticized challenger▲+2Since October 2026: 0% → 2%, +2 points. Inside the 11-point floor: within noise.0% → 2%
Show the five products at 0%, ordered by negative rate
12
Splunk Enterprise Security0%36%11criticized challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%
Splunk Enterprise Security0%36%11criticized challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%09Microsoft Security Copilot0%36%25criticized challenger▼−2Since October 2026: 2% → 0%, −2 points. Inside the 11-point floor: within noise.2% → 0%
11
CrowdStrike Charlotte AI0%33%18criticized challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%
CrowdStrike Charlotte AI0%33%18criticized challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%08
Prophet Security0%26%19criticized challenger▼−2Since October 2026: 2% → 0%, −2 points. Inside the 11-point floor: within noise.2% → 0%
Prophet Security0%26%19criticized challenger▼−2Since October 2026: 2% → 0%, −2 points. Inside the 11-point floor: within noise.2% → 0%10
Microsoft Sentinel0%20%10accepted challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%
Microsoft Sentinel0%20%10accepted challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%The floor is 11 points of share, measured: how far the models move a leader on their own when the same questions are asked twice with nothing changed. A larger change is movement; a smaller one can't be told apart from repeat variation, and both are shown. Each index measures its own floor from its own repeat, over its own categories, so the floor differs from one index to the next. Both editions asked the same fourteen models. How the floor is measured
Bars are the share of first choices, 0 to 100Every product with at least 10 labels here. Every product name links to its product page.
Head to head
Dropzone AI vs UnderDefense Agentic AI SOCDropzone AI vs Prophet SecurityDropzone AI vs Huntress Managed EDR
Head-to-head pages are published for mid-market buyers, so these open on mid-market figures, not small business.All twenty-one head-to-head pages: the top seven products, each against each
Dropzone AI vs CrowdStrike Charlotte AIDropzone AI vs Microsoft Security CopilotDropzone AI vs Radiant SecurityUnderDefense Agentic AI SOC vs Prophet SecurityUnderDefense Agentic AI SOC vs Huntress Managed EDRUnderDefense Agentic AI SOC vs CrowdStrike Charlotte AIUnderDefense Agentic AI SOC vs Microsoft Security CopilotUnderDefense Agentic AI SOC vs Radiant SecurityProphet Security vs Huntress Managed EDRProphet Security vs CrowdStrike Charlotte AIProphet Security vs Microsoft Security CopilotProphet Security vs Radiant SecurityHuntress Managed EDR vs CrowdStrike Charlotte AIHuntress Managed EDR vs Microsoft Security CopilotHuntress Managed EDR vs Radiant SecurityCrowdStrike Charlotte AI vs Microsoft Security CopilotCrowdStrike Charlotte AI vs Radiant SecurityMicrosoft Security Copilot vs Radiant Security
Recommended versus criticized
Every product with at least 10 labels here, on both axes. The 30% line names a quadrant, not the verdict above: that one needs more than 40%.
Criticized challengerCriticized default
Negative label rate →
010203040506T07
08M09
101112Accepted challengerEndorsed leader
0%First-choice share → · lines at 30% share and 25% negative50%
Key
01Dropzone AI33%
Dropzone AI33%02Huntress Managed EDR18%
Huntress Managed EDR18%03UnderDefense Agentic AI SOC16%
UnderDefense Agentic AI SOC16%04Wazuh4%
Wazuh4%05Intezer AI SOC2%
Intezer AI SOC2%06SentinelOne Purple AI2%
SentinelOne Purple AI2%07Torq AI SOC Platform2%
08Prophet Security0%
Prophet Security0%09Microsoft Security Copilot0%
10Microsoft Sentinel0%
Microsoft Sentinel0%11CrowdStrike Charlotte AI0%
CrowdStrike Charlotte AI0%12Splunk Enterprise Security0%
Splunk Enterprise Security0%What they warned about
Two of fourteen models held their first choice under the paraphrase. Claude Haiku 4.5, GPT-5.4 mini, Gemini 3.5 Flash, Perplexity Sonar, Mistral Small, DeepSeek V4 Flash, Qwen 3.7 Flash, Kimi K2, GLM 4.7 FlashX, MiniMax M2.5, GPT-6 Luna and Muse Glimmer 30B changed. A high negative share on a product with few labels is a warning. A low share on a product with many labels is salience, not sentiment.
Microsoft Security Copilot
36%
9 of 25 labels negative · 7 of 14 models · 3 hard negative
“this is a platform-native AI solution that only receives recommendations if you're already heavily invested in Microsoft's security ecosystem” MiniMax M2.5, negative prompt
Torq AI SOC Platform
40%
10 of 25 labels negative · 7 of 14 models · 3 hard negative
“AI models consistently flag concerns for small business use cases, likely due to enterprise-focused pricing or complexity.” MiniMax M2.5, negative prompt
CrowdStrike Charlotte AI33%
6 of 18 labels negative · 4 of 14 models · 4 hard negative
“45% negative label share, 5 of 11 labels negative · 5 of 14 models ... "Avoid enterprise-focused tools: ... Microsoft Security Copilot are ecosystem-dependent and priced for larger orgs. Skip t"” Muse Glimmer 30B, negative prompt
Dropzone AI9%
4 of 43 labels negative · 4 of 14 models
“enterprise-grade autonomous AI agents (such as Dropzone AI, Prophet Security, or ReliaQuest) often carry enterprise price tags ($30,000–$100,000+ per year)” Gemini 3.5 Flash, budget prompt
What they cite
Fourteen of the fourteen models returned a source list in this edition: five return the pages they cited and nine the search results they consulted.
Sites the answers cite
74 of 84 answers in this category came back with a source list, from 14 of 14 models: citations where the model returns them, or the search results it consulted. 860 links across 199 sites, every framing counted. Ranked by the number of answers carrying the site or page. 65 of the 252 answers across every segment cited this index's own page for the category; the method page measures whether that reading tilts an answer.
vendor site · UnderDefense49 answers · 109 citations · 12 models
publisher (Gane)33 answers · 39 citations · 10 models
vendor site · G233 answers · 37 citations · 11 models
vendor site · GitHub31 answers · 49 citations · 11 models
vendor site · Stellar Cyber20 answers · 28 citations · 8 models
vendor site · Swimlane19 answers · 20 citations · 8 models
17 answers · 21 citations · 9 models
vendor site · Intezer15 answers · 29 citations · 8 models
15 answers · 23 citations · 9 models
vendor site · Simbian14 answers · 15 citations · 6 models
12 answers · 15 citations · 7 models
vendor site · Panther12 answers · 15 citations · 6 models
Pages the answers cite
The ten pages named in the most answers, by full address. A page here is one the models returned with a recommendation, not one the index endorses.
33 answers · 11 models
30 answers · 10 models
29 answers · 9 models
23 answers · 10 models
18 answers · 6 models
12 answers · 8 models
10 answers · 7 models
10 answers · 8 models
9 answers · 6 models
9 answers · 5 models
Search against answers
Each company's standing in the answers beside its site's footprint in Google search, one row a site: the products the models named on it with their shares, and the share they add up to; monthly searches on Google, and DataForSEO's estimate of AI search demand (modeled from search signals, directional, not a count of queries to any assistant), for the most-searched of the company's and its products' names (the name is in each row's hover text); estimated monthly organic visits to the site; and its best position in Google's top ten for “ai soc agent”, “ai soc agents”, “best ai soc agent”. US estimates from DataForSEO and Google's Ads Transparency Center. A small company's site, or a mid-sized company's site for its flagship, is marked company; a product on a large parent's site (Google, Microsoft) has no site figures. A column with no figures for this category is left out, and an empty cell means none were seen, not none exist. Two measurements side by side: neither is read as the cause of the other.
| Company and products | Share | Own site cited | Name searches, Google | AI search demand, est. | Organic visits | Paid search a month, est. | Google ads, last 30 days | Best Google position |
|---|---|---|---|---|---|---|---|---|
| Dropzone AI dropzone.ai | 33% | 139 | 1,300 | 32 | 1,652 | 3 | ||
| Huntress huntress.com Huntress Managed EDR 18% | 18% | 353 | 33,100 | 4,338 | 352,368 company | $15,522 | 120 | |
| UnderDefense MAXI underdefense.com UnderDefense Agentic AI SOC 16%, UnderDefense MAXI 2% | 18% | 70 | 10 | 0 | 11,823 | 10 | 1 | |
| Wazuh wazuh.com | 4% | 118 | 9,900 | 446 | 7,214 | 3 | ||
| Blumira blumira.com | 4% | 108 | 1,300 | 12 | 8,060 | 10 | ||
| Intezer AI SOC intezer.com | 2% | 75 | 40 | 0 | 1,595 | 1 | ||
| SentinelOne parent site SentinelOne Purple AI 2% | 2% | 44 | 33,100 | 1,675 | ||||
| Radiant Security radiantsecurity.ai | 2% | 36 | 880 | 13 | 1,415 | 0 | ||
| Simbian AI-SOC Agent simbian.ai | 2% | 13 | 375 | |||||
| Darktrace darktrace.com | 2% | 217 | 8,100 | 447 | 65,093 | 29 |
Google's top ten for the three searches hold 24 sites; 2 of them are among the sites the models cited here (stellarcyber.ai, underdefense.com). The first result for “ai soc agent” is prophetsecurity.ai.
How they answered
Six framings of the same buying question, each sent to every model in a fresh session with search on. One row per model, so a row shows whether it held its answer under rewording, what it named when cost was the constraint, and what it argued against. Computed from the raw judge labels.ShowHide
How they answered
Six framings of the same buying question, each sent to every model in a fresh session with search on. One row per model, so a row shows whether it held its answer under rewording, what it named when cost was the constraint, and what it argued against. Computed from the raw judge labels.
ShowHideModelDirect“What is the best AI SOC agent for a small B2B company?”Paraphrase“Which AI SOC analyst for alert triage would you recommend to a small business that sells to other businesses?”Comparative“What are the top AI SOC agents for a small team and how do they differ?”Budget-constrained“What is the best AI SOC agent for a small company with a tight budget?”Scale-constrained“We are a 30 person company evaluating an AI SOC agent. What should we look at?”Negative“Which AI SOC agents should a small business avoid or be cautious about?”
Claude Haiku 4.5Helxon VORXOCDropzone AIChangedStellar Cyber Open XDRUnderDefense Agentic AI SOCagainst: Elastic Security, Wazuhno first choicenothing named
Two alternatives
AiSOC, Huntress Managed SOCTwo alternatives
Stellar Cyber Open XDR, Torq AI SOC PlatformFour alternatives
Conifers CognitiveSOC, Dropzone AI, Exaforce, UnderDefense Agentic AI SOCTwo alternatives
Blumira, Huntress Managed EDRGPT-5.4 miniSentinelOne Purple AIMicrosoft Security Copilot's Security Alert Triage AgentChangedCrowdStrike Charlotte AIVigil SOCagainst: ReliaQuest GreyMatter, UnderDefense Agentic AI SOCno first choicenothing named
Three alternatives
CrowdStrike Charlotte AI, Google Security Operations, Palo Alto Networks Cortex AgentiXTwo alternatives
CrowdStrike, SentinelOne Purple AIFive alternatives
Dropzone AI, Exabeam AI, Palo Alto Networks Cortex AgentiX, SentinelOne Purple AI, Simbian AI-SOC AgentTwo alternatives
AiSOC, SentoraGemini 3.5 FlashDropzone AI, Intezer AI SOCDropzone AIChangedDropzone AI, Prophet SecurityBlumira, Huntress Managed EDR, Vigilagainst: Dropzone AI, Prophet Security, ReliaQuest GreyMatterno first choicenothing named
Six alternatives
CrowdStrike Charlotte AI, Huntress Managed EDR, Microsoft Security Copilot + Sentinel, Prophet Security, SentinelOne Purple AI, Simbian AI-SOC AgentThree alternatives
Intezer AI SOC, Microsoft Security Copilot, Prophet SecurityFive alternatives
CrowdStrike Charlotte AI, Intezer AI SOC, Microsoft Security Copilot, Tines, Torq AI SOC PlatformTwo alternatives
Shuffle, WazuhPerplexity SonarHuntress Managed Detection and Responseagainst: Google Security Operations, Palo Alto Cortex, Splunk Enterprise SecurityDropzone AIChangedagainst: Prophet SecurityUnderDefense Agentic AI SOCagainst: Palo Alto Cortex AgentiXUnderDefense MAXIagainst: Google Security Operations, Palo Alto Networks Cortex XSIAM, Splunk Enterprise Security, Torq AI SOC Platformno first choiceagainst: 7AI, Dropzone AI, Exaforce, Intezer AI SOC, Microsoft Security Copilot, Prophet Security
Four alternatives
Dropzone AI, Microsoft Defender XDR, Torq AI SOC Platform, UnderDefense Agentic AI SOCTwo alternatives
Charlotte AI, Microsoft Security CopilotEight alternatives
CrowdStrike Charlotte AI, Dropzone AI, Intezer AI SOC, Microsoft Security Copilot, Prophet Security, SentinelOne Purple AI, Simbian AI-SOC Agent, Torq AI SOC PlatformThree alternatives
AirMDR, Intezer AI SOC, Microsoft Security CopilotGrok 4.20Dropzone AIagainst: Palo Alto Networks Cortex XSIAM, Splunk SOARDropzone AIHeldDropzone AI, UnderDefense Agentic AI SOCagainst: CrowdStrike Charlotte AI, Darktrace, Microsoft Security Copilot, Palo Alto, Torq AI SOC Platform, Vectra AI, WazuhWazuhagainst: Dropzone AI, Elastic Security, Intezer AI SOC, Microsoft Sentinel, OSSEC, Prophet Security, Security Copilot, UnderDefense Agentic AI SOCno first choiceagainst: CrowdStrike Falcon, Radiant Security, Tines, Torq AI SOC Platform
Four alternatives
Huntress Managed EDR, Intezer AI SOC, Microsoft Security Copilot, SentinelOne Purple AIThree alternatives
Huntress Managed EDR, Microsoft Security Copilot, UnderDefense Agentic AI SOCTwo alternatives
Huntress Managed EDR, Intezer AI SOCOne alternative
Huntress Managed EDRMistral SmallDropzone AI, Huntress Managed EDRDropzone AIChangedDropzone AIDropzone AI, Huntress Managed EDRno first choicenothing named
Two alternatives
Splunk Enterprise Security, UnderDefense Agentic AI SOCTwo alternatives
Huntress Managed EDR, Intezer AI SOCSix alternatives
Huntress Managed EDR, Prophet Security, Splunk Enterprise Security, Tines, Torq AI SOC Platform, UnderDefense MAXIFour alternatives
Microsoft Sentinel, Security Copilot, UnderDefense Agentic AI SOC, WazuhFour alternatives
CrowdStrike, Microsoft Sentinel, Secureworks, Splunk Enterprise SecurityDeepSeek V4 FlashHuntress Managed EDRDropzone AIChangedagainst: CrowdStrike Charlotte AI, Microsoft Security Copilot, Prophet SecurityDropzone AI, UnderDefense Agentic AI SOCagainst: Torq AI SOC PlatformHuntress Managed EDRno first choiceagainst: CrowdStrike Charlotte AI, Microsoft Security Copilot, SentinelOne Purple AI
Four alternatives
Dropzone AI, Intezer AI SOC, UnderDefense Agentic AI SOC, WazuhFour alternatives
Huntress Managed EDR, Intezer AI SOC, UnderDefense Agentic AI SOC, WazuhTwo alternatives
Prophet Security, Radiant SecurityTwo alternatives
UnderDefense Agentic AI SOC, WazuhLlama 4 Maverickno first choiceno first choiceHeldUnderDefense Agentic AI SOCUnderDefense Agentic AI SOCno first choiceagainst: Dropzone AI, Huntress Managed EDR, Intezer AI SOC, UnderDefense Agentic AI SOC
Two alternatives
Huntress Managed EDR, Intezer AI SOCTwo alternatives
Huntress Managed EDR, Intezer AI SOCQwen 3.7 FlashDropzone AIDarktraceChangedagainst: Microsoft SentinelDarktraceHuntress Managed EDRno first choiceagainst: Microsoft Security Copilot, Splunk Enterprise Security
Two alternatives
Huntress Managed EDR, UnderDefense Agentic AI SOCOne alternative
Aika LabsThree alternatives
Microsoft Sentinel with Copilot, Palo Alto Networks Cortex XSOAR, Swimlane TurbineThree alternatives
Microsoft Sentinel, StackStorm, WazuhKimi K2UnderDefense Agentic AI SOCRadiant SecurityChangedagainst: Palo Alto Cortex, ServiceNowHuntress Managed EDRagainst: Microsoft Security Copilot, Torq AI SOC PlatformBlumiraDropzone AI, Torq AI SOC Platformagainst: Microsoft Security Copilot, Torq AI SOC Platform
Seven alternatives
Blumira, Dropzone AI, Huntress Managed EDR, Intezer AI SOC, Microsoft Sentinel, Security Copilot, WazuhTwo alternatives
Dropzone AI, Intezer AI SOCFour alternatives
Dropzone AI, Intezer AI SOC, Prophet Security, UnderDefense Agentic AI SOCThree alternatives
Huntress Managed EDR, Microsoft Sentinel, WazuhThree alternatives
Microsoft Security Copilot, Stellar Cyber Open XDR, Vectra AIGLM 4.7 FlashXSimbian AI-SOC Agentagainst: Google Security Operations, Splunk Enterprise Security, Swimlane Turbine, Torq AI SOC PlatformDropzone AIChangedDropzone AI, Huntress Managed EDR, UnderDefense Agentic AI SOCUnderDefense Agentic AI SOCno first choicenothing named
Two alternatives
SentinelOne Singularity Endpoint, TinesTwo alternatives
CrowdStrike Charlotte AI, Microsoft Security CopilotTen alternatives
Argus, Elastic Security, Intezer AI SOC, Mate Security, Microsoft Security Copilot, SentinelOne Singularity Endpoint, Tines, Torq AI SOC Platform, Vigil SOC, WazuhThree alternatives
Blumira, Huntress Managed EDR, WazuhMiniMax M2.5Dropzone AI, UnderDefense Agentic AI SOCUnderDefense Agentic AI SOCChangedConifers CognitiveSOC, UnderDefense MAXIagainst: CrowdStrike Charlotte AIHuntress Managed EDR, Wazuhno first choiceagainst: CrowdStrike Charlotte AI, Microsoft Security Copilot, Torq AI SOC Platform
Two alternatives
Huntress Managed EDR, Intezer AI SOCThree alternatives
Huntress Managed EDR, Radiant Security, TodylFour alternatives
Dropzone AI, Intezer AI SOC, Microsoft Security Copilot, Torq AI SOC PlatformFive alternatives
Dropzone AI, Elastic Security, Microsoft Sentinel, Security Copilot, UnderDefense Agentic AI SOCGPT-6 LunaDropzone AIHuntress Managed EDRChangedMicrosoft Security CopilotMicrosoft Defender for Cloudno first choicenothing named
Two alternatives
Huntress Managed EDR, Microsoft Security CopilotTwo alternatives
Dropzone AI, Microsoft's Security Alert Triage AgentFive alternatives
CrowdStrike Charlotte AI, Dropzone AI, Prophet Security, Qevlar AI, SentinelOne Purple AIOne alternative
Huntress Managed EDRMuse Glimmer 30BDropzone AI, UnderDefense Agentic AI SOCagainst: Elastic Security, WazuhDropzone AIChangedUnderDefense Agentic AI SOCagainst: Torq AI SOC PlatformHuntress Managed EDR, UnderDefense Agentic AI SOCno first choiceagainst: CrowdStrike Charlotte AI, Microsoft Security Copilot, SentinelOne Purple AI, Torq AI SOC Platform
Three alternatives
Blumira, Huntress Managed EDR, Intezer AI SOCTwo alternatives
Radiant Security, UnderDefense Agentic AI SOCFive alternatives
Dropzone AI, Huntress Managed EDR, Intezer AI SOC, Microsoft Security Copilot, Prophet SecurityTwo alternatives
Elastic Security, WazuhBold is the first choiceAlternatives are counted; the count opens them.What the answer argued against
The record
One row per call: the version string exactly as returned, whether the model searched, sources cited, and latency.
Eighty-four rows: every prompt, every model, every answer.
| Prompt | Model | Version string | Time (UTC) | Searched | Sources | Latency |
|---|---|---|---|---|---|---|
| Direct recommendation | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 15:31 | yes | 19 | 10 s |
| Direct recommendation | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 15:15 | yes | 4 | 6 s |
| Direct recommendation | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 13:12 | yes | 12 | 18 s |
| Direct recommendation | Perplexity Sonar | sonar | 2026-11-01 15:52 | yes | 10 | 4 s |
| Direct recommendation | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 16:46 | yes | 18 | 14 s |
| Direct recommendation | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 15:35 | yes | 5 | 4 s |
| Direct recommendation | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 12:10 | yes | 21 | 18 s |
| Direct recommendation | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 14:18 | yes | 5 | 2 s |
| Direct recommendation | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 11:59 | yes | 5 | 35 s |
| Direct recommendation | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 09:53 | yes | 9 | 18 s |
| Direct recommendation | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 12:51 | yes | 14 | 411 s |
| Direct recommendation | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 13:25 | yes | 5 | 23 s |
| Direct recommendation | GPT-6 Luna | gpt-6-luna | 2026-11-01 18:27 | yes | 3 | 13 s |
| Direct recommendation | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 11:44 | yes | 11 | 21 s |
| Paraphrase | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 12:52 | yes | 10 | 8 s |
| Paraphrase | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 14:03 | yes | 3 | 5 s |
| Paraphrase | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 14:46 | yes | 11 | 22 s |
| Paraphrase | Perplexity Sonar | sonar | 2026-11-01 08:58 | yes | 10 | 3 s |
| Paraphrase | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 14:59 | yes | 9 | 10 s |
| Paraphrase | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 18:29 | yes | 5 | 3 s |
| Paraphrase | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 11:19 | yes | 21 | 21 s |
| Paraphrase | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 19:12 | yes | 5 | 3 s |
| Paraphrase | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 09:42 | no | 0 | 37 s |
| Paraphrase | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 15:10 | yes | 25 | 44 s |
| Paraphrase | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 14:24 | yes | 25 | 51 s |
| Paraphrase | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 12:53 | yes | 5 | 28 s |
| Paraphrase | GPT-6 Luna | gpt-6-luna | 2026-11-01 17:21 | yes | 3 | 17 s |
| Paraphrase | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 12:04 | yes | 16 | 23 s |
| Comparative | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 13:38 | yes | 17 | 14 s |
| Comparative | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 12:00 | yes | 7 | 11 s |
| Comparative | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 11:29 | yes | 11 | 22 s |
| Comparative | Perplexity Sonar | sonar | 2026-11-01 15:08 | yes | 10 | 6 s |
| Comparative | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 17:54 | yes | 14 | 17 s |
| Comparative | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 12:19 | yes | 5 | 8 s |
| Comparative | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 14:52 | yes | 21 | 40 s |
| Comparative | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 18:56 | yes | 5 | 3 s |
| Comparative | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 12:43 | no | 0 | 34 s |
| Comparative | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 15:15 | yes | 25 | 53 s |
| Comparative | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 10:49 | yes | 14 | 60 s |
| Comparative | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 16:36 | yes | 10 | 37 s |
| Comparative | GPT-6 Luna | gpt-6-luna | 2026-11-01 08:40 | yes | 6 | 24 s |
| Comparative | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 12:46 | yes | 21 | 38 s |
| Budget constrained | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 09:01 | yes | 16 | 9 s |
| Budget constrained | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 08:36 | yes | 5 | 6 s |
| Budget constrained | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 08:45 | yes | 6 | 19 s |
| Budget constrained | Perplexity Sonar | sonar | 2026-11-01 08:57 | yes | 10 | 3 s |
| Budget constrained | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 17:03 | yes | 19 | 15 s |
| Budget constrained | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 10:24 | yes | 5 | 5 s |
| Budget constrained | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 11:53 | yes | 21 | 23 s |
| Budget constrained | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 13:49 | yes | 5 | 3 s |
| Budget constrained | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 12:11 | no | 0 | 29 s |
| Budget constrained | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 09:30 | yes | 18 | 29 s |
| Budget constrained | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 18:55 | yes | 15 | 227 s |
| Budget constrained | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 16:41 | yes | 5 | 28 s |
| Budget constrained | GPT-6 Luna | gpt-6-luna | 2026-11-01 14:13 | yes | 3 | 18 s |
| Budget constrained | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 16:28 | yes | 12 | 18 s |
| Scale constrained | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 15:58 | no | 0 | 6 s |
| Scale constrained | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 10:29 | no | 0 | 7 s |
| Scale constrained | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 14:49 | no | 0 | 18 s |
| Scale constrained | Perplexity Sonar | sonar | 2026-11-01 08:58 | yes | 10 | 7 s |
| Scale constrained | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 15:47 | yes | 10 | 16 s |
| Scale constrained | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 16:20 | no | 0 | 8 s |
| Scale constrained | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 10:18 | yes | 24 | 25 s |
| Scale constrained | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 18:50 | yes | 5 | 2 s |
| Scale constrained | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 10:17 | no | 0 | 28 s |
| Scale constrained | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 17:01 | yes | 15 | 28 s |
| Scale constrained | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 10:16 | yes | 15 | 17 s |
| Scale constrained | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 13:05 | no | 0 | 20 s |
| Scale constrained | GPT-6 Luna | gpt-6-luna | 2026-11-01 11:40 | yes | 3 | 18 s |
| Scale constrained | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 09:00 | yes | 13 | 27 s |
| Negative framing | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 10:39 | yes | 18 | 9 s |
| Negative framing | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 14:40 | yes | 3 | 7 s |
| Negative framing | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 09:43 | no | 0 | 16 s |
| Negative framing | Perplexity Sonar | sonar | 2026-11-01 12:43 | yes | 10 | 4 s |
| Negative framing | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 19:32 | yes | 15 | 19 s |
| Negative framing | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 17:17 | yes | 5 | 6 s |
| Negative framing | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 14:50 | yes | 22 | 46 s |
| Negative framing | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 13:21 | yes | 5 | 2 s |
| Negative framing | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 09:56 | yes | 14 | 40 s |
| Negative framing | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 10:54 | yes | 20 | 34 s |
| Negative framing | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 18:37 | yes | 23 | 212 s |
| Negative framing | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 09:57 | yes | 13 | 46 s |
| Negative framing | GPT-6 Luna | gpt-6-luna | 2026-11-01 10:02 | yes | 3 | 13 s |
| Negative framing | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 09:34 | yes | 19 | 30 s |
Normalization in this category
Every judgment call made between the raw labels and the numbers above, listed so it is visible and reversible.
ShowHide
Category-scoped readings
Huntress read as Huntress Managed EDR
Intezer read as Intezer AI SOC
Microsoft Security Copilot agents read as Microsoft Security Copilot
ReliaQuest read as ReliaQuest GreyMatter
SentinelOne read as SentinelOne Singularity
Simbian read as Simbian AI-SOC Agent
Simbian.ai read as Simbian AI-SOC Agent
Splunk read as Splunk Enterprise Security
Splunk Enterprise read as Splunk Enterprise Security
Stellar Cyber read as Stellar Cyber Open XDR
Swimlane read as Swimlane Turbine
Torq read as Torq AI SOC Platform
Torq (HyperSOC) read as Torq AI SOC Platform
Torq (Torq Socrates / HyperSOC) read as Torq AI SOC Platform
Torq HyperSOC read as Torq AI SOC Platform
UnderDefense read as UnderDefense Agentic AI SOC
Vectra read as Vectra AI
Unresolved, counted raw
Aika Labs
Artemis Security
Druce.ai
Exabeam AI
Helxon VORXOC
Huntress Managed Detection and Response (MDR)
Huntress Managed SOC
Mate Security
Microsoft Security Copilot's Security Alert Triage Agent
Secure.com
Sentora
Swimlane AI-SOC
Discontinued, still offered
No shut-down product was recommended here.