Six of fourteen models named Microsoft Defender for Office 365 first on the direct prompt; one named Proofpoint Email Protection. Both were named by all fourteen models and Microsoft Defender for Office 365 carries 63 labels and Proofpoint Email Protection 57, so the shares are not directly comparable.
Named in three categories this edition.
Named in two categories this edition.
Share is the count of first choices across the direct, paraphrase, budget and scale prompts over all fourteen models, for a mid-market B2B company; rank is within the category; every quote names the model and the prompt it came from. Both figures come from the email security page.
Across every category in the November 2026 Edition, Microsoft Defender for Office 365 and Proofpoint Email Protection were named in the same answer 154 times, of the 193 answers naming Microsoft Defender for Office 365 and the 187 naming Proofpoint Email Protection. In those answers Proofpoint Email Protection took the first choice twenty-eight times and Microsoft Defender for Office 365 sixty.
| Model | Direct | Paraphrase | Comparative | Budget-constrained | Scale-constrained | Negative |
|---|---|---|---|---|---|---|
| Claude Haiku 4.5 | ||||||
| GPT-5.4 mini | ||||||
| Gemini 3.5 Flash | ||||||
| Perplexity Sonar | ||||||
| Grok 4.20 | ||||||
| Mistral Small | ||||||
| DeepSeek V4 Flash | ||||||
| Llama 4 Maverick | ||||||
| Qwen 3.7 Flash | ||||||
| Kimi K2 | ||||||
| GLM 4.7 FlashX | ||||||
| MiniMax M2.5 | ||||||
| GPT-6 Luna | ||||||
| Muse Glimmer 30B |
Bold names in an answer are the products the judge labeled a first choice; a model naming several gives each of them that label. The full answer text for every row is in the record.
Every negative label with a quote, up to three, then the highest-weighted positives, up to three. Five of six in this category shown.
“Microsoft 365 users experience 3x more email-related incidents than Google Workspace users” Grok 4.20 · negative prompt · soft negative
“Good value, but many orgs find native M365 needs supplementing.” DeepSeek V4 Flash · scale prompt · soft negative
“Integrated cloud-native solutions: Microsoft Defender for Office 365, Google Workspace security (native integration, no MX changes)” Kimi K2 · negative prompt · first choice
“Best for Microsoft 365 Users: Microsoft Defender for Office 365 (Plan 1) ... often the cheapest path to enterprise-grade features” Gemini 3.5 Flash · budget prompt · first choice
“If I had to pick one default answer: Microsoft Defender for Office 365 if you're Microsoft-centric and want the least friction.” GPT-5.4 mini · direct prompt · first choice
Every negative label with a quote, up to three, then the highest-weighted positives, up to three. Six of eight in this category shown.
“Pure "MX-Record Only" Secure Email Gateways (SEGs) for Cloud Email ... Traditional SEGs (like older implementations of Proofpoint, Mimecast, or Cisco)” Gemini 3.5 Flash · negative prompt · soft negative
“Unlike legacy Secure Email Gateways (SEGs) like Mimecast or Proofpoint Enterprise, ICES solutions deploy via cloud APIs in minutes” Gemini 3.5 Flash · paraphrase prompt · soft negative
“Use Caution with Proofpoint/Mimecast unless you have a dedicated security operations center (SOC) to manage their complexity.” Qwen 3.7 Flash · negative prompt · soft negative
“Proofpoint Essentials ~$3.03/user/mo is the most frequently recommended "best overall" for small business.” Muse Glimmer 30B · budget prompt · first choice
“Proofpoint is widely considered the gold standard for heavy-duty email security in large organizations.” Qwen 3.7 Flash · comparative prompt · first choice
“Start with Proofpoint, Microsoft Defender for Office 365, or IRONSCALES for a 500-person company” GLM 4.7 FlashX · scale prompt · first choice
Comparisons are drawn for the top eight products in each category, each against each. The output is the models' output; nothing here is a recommendation by the index.