Endpoint detection and response for small business buyers
Asked as “EDR platform”, and as “endpoint detection and response tool”, on behalf of a small B2B company. 50 first choices recorded across the direct, paraphrase, budget and scale prompts, twelve models each.
Standing · first-choice share
44%
Clear leader
44Huntress Managed EDR36Microsoft Defender for Cloud10SentinelOne Singularity10others
44% of first choices, clear leader.
By buyer segment
The same question asked on behalf of a different buyer. Each standing is computed within its segment; they sit side by side and are never added together.
The standing
Share is the count of first choices across the direct, paraphrase, budget and scale prompts, over all twelve models, for a small B2B company. Ordered by share.
ProductFirst-choice shareNegative rateLabelsQuadrant
Show the three products at 0%, ordered by negative rate
Bars are the share of first choices, 0 to 100Every product with at least 10 labels here. Every product name links to its product page.
Head to head
Microsoft Defender for Endpoint vs Bitdefender GravityZone EDRMicrosoft Defender for Endpoint vs CrowdStrike Falcon InsightMicrosoft Defender for Endpoint vs Huntress Managed EDR
Head-to-head pages are published for mid-market buyers, so these open on mid-market figures, not small business.All twenty-one head-to-head pages: the top seven products, each against each
Microsoft Defender for Endpoint vs Microsoft Defender for CloudMicrosoft Defender for Endpoint vs SentinelOne SingularityMicrosoft Defender for Endpoint vs CrowdStrikeBitdefender GravityZone EDR vs CrowdStrike Falcon InsightBitdefender GravityZone EDR vs Huntress Managed EDRBitdefender GravityZone EDR vs Microsoft Defender for CloudBitdefender GravityZone EDR vs SentinelOne SingularityBitdefender GravityZone EDR vs CrowdStrikeCrowdStrike Falcon Insight vs Huntress Managed EDRCrowdStrike Falcon Insight vs Microsoft Defender for CloudCrowdStrike Falcon Insight vs SentinelOne SingularityCrowdStrike Falcon Insight vs CrowdStrikeHuntress Managed EDR vs Microsoft Defender for CloudHuntress Managed EDR vs SentinelOne SingularityHuntress Managed EDR vs CrowdStrikeMicrosoft Defender for Cloud vs SentinelOne SingularityMicrosoft Defender for Cloud vs CrowdStrikeSentinelOne Singularity vs CrowdStrike
Recommended versus criticized
Every product with at least 10 labels here, on both axes. The 30% line names a quadrant, not the verdict above: that one needs more than 40%.
Criticized challengerCriticized default
Negative label rate →
01
02
03
04
05
06
07
08
09Accepted challengerEndorsed leader
0%First-choice share → · lines at 30% share and 25% negative60%
Key
01Huntress Managed EDR44%
Huntress Managed EDR44%02Microsoft Defender for Cloud36%
Microsoft Defender for Cloud36%03SentinelOne Singularity10%
SentinelOne Singularity10%04Bitdefender GravityZone EDR4%
Bitdefender GravityZone EDR4%05Sophos Intercept X2%
Sophos Intercept X2%06Microsoft Defender for Endpoint2%
Microsoft Defender for Endpoint2%07Cynet0%
Cynet0%08CrowdStrike Falcon Insight0%
CrowdStrike Falcon Insight0%09CrowdStrike0%
CrowdStrike0%What they warned about
Four of twelve models held their first choice under the paraphrase. Perplexity Sonar, Mistral Small, DeepSeek V4 Flash, Llama 4 Maverick, Qwen 3.7 Flash, Kimi K2, GLM 4.7 FlashX and MiniMax M2.5 changed. A high negative share on a product with few labels is a warning. A low share on a product with many labels is salience, not sentiment.
CrowdStrike Falcon Insight44%
18 of 41 labels negative · 9 of 12 models · 3 hard negative
“CrowdStrike Falcon enterprise offerings if your business is small and you do not have the required scale or staff; one source notes a 300-seat enterprise minimum” Perplexity Sonar, negative prompt
SentinelOne Singularity15%
8 of 55 labels negative · 8 of 12 models · 1 hard negative
“High resource usage ... steep learning curve, deployment complexity, false positives, and expensive” Grok 4.20, negative prompt
CrowdStrike44%
7 of 16 labels negative · 6 of 12 models · 1 hard negative
“Do not buy "Unmanaged EDR" from brands like CrowdStrike, Palo Alto, or Exabeat.” Qwen 3.7 Flash, direct prompt
Palo Alto Networks Cortex XDR62%
5 of 8 labels negative · 5 of 12 models · 2 hard negative
“Avoid buying a premium enterprise EDR (like full CrowdStrike or Cortex XDR) that you won't have the staff to actually monitor” DeepSeek V4 Flash, direct prompt
What they cite
Twelve of the twelve models returned a source list in this edition: four return the pages they cited and eight the search results they consulted.
Sites the answers cite
67 of 72 answers in this category came back with a source list, from 12 of 12 models: citations where the model returns them, or the search results it consulted. 871 links across 173 sites, every framing counted. Ranked by the number of answers carrying the site or page.
vendor site · Huntress51 answers · 78 citations · 12 models
47 answers · 70 citations · 10 models
vendor site · CyberPress42 answers · 45 citations · 10 models
36 answers · 42 citations · 9 models
vendor site · SentinelOne31 answers · 35 citations · 10 models
29 answers · 31 citations · 9 models
25 answers · 26 citations · 11 models
vendor site · Acronis17 answers · 20 citations · 7 models
17 answers · 18 citations · 7 models
vendor site · G216 answers · 17 citations · 10 models
16 answers · 16 citations · 8 models
15 answers · 16 citations · 9 models
Pages the answers cite
The ten pages named in the most answers, by full address. A page here is one the models returned with a recommendation, not one the index endorses.
47 answers · 12 models
42 answers · 10 models
40 answers · 9 models
36 answers · 9 models
31 answers · 10 models
30 answers · 10 models
29 answers · 9 models
25 answers · 11 models
16 answers · 8 models
15 answers · 6 models
Search against answers
Each company's standing in the answers beside its site's footprint in Google search, one row a site: the products the models named on it with their shares, and the share they add up to; monthly searches on Google, and DataForSEO's estimate of AI search demand (modeled from search signals, directional, not a count of queries to any assistant), for the most-searched of the company's and its products' names (the name is in each row's hover text); estimated monthly organic visits to the site; and its best position in Google's top ten for “best edr platform”, “edr platform”, “edr platforms”. US estimates from DataForSEO and Google's Ads Transparency Center. A small company's site, or a mid-sized company's site for its flagship, is marked company; a product on a large parent's site (Google, Microsoft) has no site figures. A column with no figures for this category is left out, and an empty cell means none were seen, not none exist. Two measurements side by side: neither is read as the cause of the other.
| Company and products | Share | Own site cited | Name searches, Google | AI search demand, est. | Organic visits | Paid search a month, est. | Google ads, last 30 days | Best Google position |
|---|---|---|---|---|---|---|---|---|
| Huntress huntress.com Huntress Managed EDR 44% | 44% | 353 | 33,100 | 4,338 | 352,368 company | $15,522 | 120 | |
| Microsoft Defender microsoft.com Microsoft Defender for Cloud 36%, Microsoft 0% | 36% | 659 | 2,240,000 | 403,136 | 145,358,109 company | $12,455 | 103 | 4 |
| SentinelOne sentinelone.com SentinelOne Singularity 10% | 10% | 499 | 33,100 | 1,675 | 446,702 company | $780 | 22 | 1 |
| Bitdefender parent site Bitdefender GravityZone EDR 4% | 4% | 64 | 90,500 | 3,261 | ||||
| Sophos sophos.com Sophos Intercept X 2% | 2% | 304 | 18,100 | 2,046 | 186,716 company | $1,427 | 65 | |
| Microsoft Defender parent site Microsoft Defender for Endpoint 2%, Microsoft Defender for Office 365 0% | 2% | 264 | 18,100 | 3,525 | ||||
| ThreatDown threatdown.com ThreatDown EDR 2% | 2% | 18 | 50 | 6 | 79,831 company | 8 | ||
| Cynet cynet.com | 0% | 46 | 2,400 | 147 | 13,782 | 43 | 4 | |
| CNiC Managed EDR cnicsolutions.com | 0% | 3 | ||||||
| ESET eset.com ESET PROTECT 0% | 0% | 111 | 18,100 | 1,812 | 637,959 company | $4,397 | 75 |
Google's top ten for the three searches hold 21 sites; 3 of them are among the sites the models cited here (acronis.com, learn.g2.com, sentinelone.com). The first result for “best edr platform” is gartner.com.
How they answered
Six framings of the same buying question, each sent to every model in a fresh session with search on. One row per model, so a row shows whether it held its answer under rewording, what it named when cost was the constraint, and what it argued against. Computed from the raw judge labels.ShowHide
How they answered
Six framings of the same buying question, each sent to every model in a fresh session with search on. One row per model, so a row shows whether it held its answer under rewording, what it named when cost was the constraint, and what it argued against. Computed from the raw judge labels.
ShowHideModelDirect“What is the best EDR platform for a small B2B company?”Paraphrase“Which endpoint detection and response tool would you recommend to a small business that sells to other businesses?”Comparative“What are the top EDR platforms for a small team and how do they differ?”Budget-constrained“What is the best EDR platform for a small company with a tight budget?”Scale-constrained“We are a 30 person company evaluating a EDR platform. What should we look at?”Negative“Which EDR platforms should a small business avoid or be cautious about?”
Claude Haiku 4.5Huntress Managed EDRHuntress Managed EDRHeldHuntress Managed EDRagainst: Trellix EDRBitdefender GravityZone EDRno first choiceagainst: CrowdStrike, SentinelOne Singularity
Five alternatives
Bitdefender GravityZone EDR, CrowdStrike, Cynet, Microsoft Defender for Cloud, SentinelOne SingularityTwo alternatives
Microsoft Defender for Cloud, ThreatDown EDRFour alternatives
CrowdStrike Falcon Insight, Cynet, Microsoft Defender for Cloud, SentinelOne SingularityThree alternatives
Huntress Managed EDR, Microsoft Defender for Cloud, SentinelOne SingularityGPT-5.4 miniMicrosoft Defender for CloudMicrosoft Defender for CloudHeldMicrosoft Defender for EndpointMicrosoft Defender for Cloudagainst: CrowdStrike, SentinelOne Singularityno first choiceagainst: CrowdStrike, Microsoft Defender for Endpoint
Three alternatives
CrowdStrike Falcon Insight, SentinelOne Singularity, Sophos Intercept XFour alternatives
Bitdefender GravityZone EDR, CrowdStrike Falcon Insight, Microsoft Defender Suite for Microsoft 365 Business Premium, Sophos MDRFour alternatives
Bitdefender GravityZone EDR, CrowdStrike Falcon Insight, SentinelOne Singularity, Sophos Intercept XOne alternative
Huntress Managed EDRGemini 3.5 FlashHuntress Managed EDR, Microsoft Defender for CloudHuntress Managed EDR, Microsoft Defender for CloudHeldagainst: CrowdStrike Falcon InsightHuntress Managed EDR, Microsoft Defender for Cloudagainst: CrowdStrike Falcon InsightMicrosoft Defender for CloudHuntress Managed EDRagainst: CrowdStrike, CrowdStrike Falcon Insight, Kaspersky Endpoint Detection and Response (EDR) Expert, Palo Alto Networks Cortex XDR, SentinelOne Singularity, Symantec Endpoint Security, Trellix/McAfee, VMware Carbon Black
Two alternatives
Bitdefender GravityZone EDR, SentinelOne SingularityOne alternative
SentinelOne SingularityTwo alternatives
SentinelOne Singularity, Sophos Intercept XThree alternatives
Bitdefender GravityZone EDR, Huntress Managed EDR, LimaCharlieThree alternatives
CrowdStrike Falcon Insight, Microsoft Defender for Cloud, SentinelOne SingularityPerplexity SonarHuntress Managed EDR, Microsoft Defender for Cloudagainst: CrowdStrike Falcon InsightSentinelOne SingularityChangedMicrosoft Defender for CloudHuntress Managed EDR, Microsoft Defender for Cloudno first choiceagainst: CrowdStrike Falcon Insight
One alternative
SentinelOne SingularityTwo alternatives
Huntress Managed EDR, Microsoft Defender for EndpointFour alternatives
CrowdStrike Falcon Insight, Huntress Managed EDR, SentinelOne Singularity, Sophos Intercept XTwo alternatives
SentinelOne Singularity, ThreatDown EDRGrok 4.20Huntress Managed EDRHuntress Managed EDRHeldagainst: CrowdStrikeMicrosoft Defender for CloudMicrosoft Defender for Cloudagainst: Wazuh, Windows Defender AntivirusMicrosoft Defender for Endpointagainst: CrowdStrike Falcon Insightagainst: CrowdStrike Falcon Insight, Datto EDR, SentinelOne Singularity, Sophos Intercept X, ThreatDown EDR
Two alternatives
CrowdStrike, MicrosoftTwo alternatives
Microsoft Defender for Cloud, SentinelOne SingularityFive alternatives
Bitdefender GravityZone EDR, CrowdStrike Falcon Insight, Huntress Managed EDR, SentinelOne Singularity, Sophos Intercept XFour alternatives
Bitdefender GravityZone EDR, CrowdStrike Falcon Insight, ESET PROTECT, Huntress Managed EDRThree alternatives
Bitdefender GravityZone EDR, SentinelOne Singularity, Sophos Intercept XMistral SmallHuntress Managed EDRSentinelOne SingularityChangedMicrosoft Defender for CloudThreatDown EDRno first choiceagainst: CrowdStrike Falcon Insight, Palo Alto Networks Cortex XDR, SentinelOne Singularity, Sophos Intercept X
Two alternatives
CrowdStrike, SentinelOne SingularityOne alternative
Microsoft Defender for EndpointThree alternatives
CrowdStrike Falcon Insight, Cynet, SentinelOne SingularityThree alternatives
Bitdefender GravityZone EDR, Huntress Managed EDR, Microsoft Defender for EndpointDeepSeek V4 FlashHuntress Managed EDRagainst: CrowdStrike Falcon Insight, Palo Alto Networks Cortex XDRHuntress Managed EDR, Microsoft Defender for CloudChangedagainst: CrowdStrike Falcon InsightHuntress Managed EDRagainst: CrowdStrike Falcon InsightHuntress Managed EDRHuntress Managed EDRagainst: CrowdStrike Falcon Insight, Datto EDR, SentinelOne Singularity
Three alternatives
Cynet, Microsoft Defender for Cloud, SentinelOne SingularityOne alternative
SentinelOne SingularityFour alternatives
Cynet, Microsoft Defender for Cloud, SentinelOne Singularity, Sophos Intercept XThree alternatives
CrowdStrike Falcon Insight, Cynet, Microsoft Defender for CloudThree alternatives
Bitdefender GravityZone EDR, CrowdStrike Falcon Insight, ESET PROTECTLlama 4 MaverickHuntress Managed EDRBitdefender GravityZone EDR, SentinelOne SingularityChangedno first choiceMicrosoft Defender for Cloudno first choicenothing named
Two alternatives
Bitdefender GravityZone EDR, ThreatDown EDRQwen 3.7 FlashHuntress Managed EDR, Microsoft Defender for Cloudagainst: CrowdStrike, Exabeam, Palo Alto Networks Cortex XDRHuntress Managed EDRChangedHuntress Managed EDRagainst: CrowdStrike Falcon InsightMicrosoft Defender for CloudHuntress Managed EDRagainst: Microsoft Defender XDR, Splunkagainst: Arctic Wolf, CrowdStrike Falcon Insight, Microsoft Defender for Endpoint, SentinelOne Singularity, Trellix EDR
Two alternatives
SentinelOne Singularity, Sophos Intercept XTwo alternatives
Microsoft Defender for Cloud, SentinelOne SingularityTwo alternatives
Microsoft Defender for Cloud, SentinelOne SingularityTwo alternatives
Huntress Managed EDR, SentinelOne SingularityFive alternatives
Bitdefender GravityZone EDR, CrowdStrike, Microsoft Defender for Office 365, SentinelOne Singularity, Trend MicroKimi K2Microsoft Defender for Cloud, SentinelOne SingularityHuntress Managed EDRChangedHuntress Managed EDR, SentinelOne Singularityagainst: Bitdefender GravityZone EDRMicrosoft Defender for CloudMicrosoft Defender for Cloudagainst: CrowdStrike Falcon Insight, Microsoft Defender for Endpoint, SentinelOne Singularity
Three alternatives
CrowdStrike Falcon Insight, Huntress Managed EDR, ThreatDown EDRTwo alternatives
CrowdStrike Falcon Insight, Microsoft Defender for CloudThree alternatives
CrowdStrike Falcon Insight, Microsoft Defender for Cloud, Sophos Intercept XThree alternatives
Bitdefender GravityZone EDR, CrowdStrike Falcon Insight, Huntress Managed EDRFour alternatives
CNiC Managed EDR, CrowdStrike, Cynet, SentinelOne SingularityGLM 4.7 FlashXMicrosoft Defender for CloudHuntress Managed EDRChangedMicrosoft Defender for CloudMicrosoft Defender for Cloud, Sophos Intercept Xagainst: CrowdStrike Falcon Insightno first choiceagainst: CrowdStrike, Datto EDR, Sangfor Endpoint Detection and Response, VMware Carbon Black
Three alternatives
CrowdStrike Falcon Insight, Huntress Managed EDR, SentinelOne SingularityFive alternatives
Bitdefender GravityZone EDR, CrowdStrike Falcon Insight, ESET PROTECT, Microsoft Defender for Cloud, SentinelOne SingularitySix alternatives
Bitdefender GravityZone EDR, CNiC Managed EDR, CrowdStrike Falcon Insight, Huntress Managed EDR, SentinelOne Singularity, Sophos Intercept XFour alternatives
Bitdefender GravityZone EDR, Elastic Security, SentinelOne Singularity, WazuhMiniMax M2.5Huntress Managed EDRSentinelOne SingularityChangedCNiC Managed EDR, Huntress Managed EDR, Microsoft Defender for CloudHuntress Managed EDRno first choiceagainst: CrowdStrike Falcon Insight, Palo Alto Networks Cortex XDR
Four alternatives
Bitdefender GravityZone EDR, CrowdStrike Falcon Insight, Microsoft Defender for Endpoint, SentinelOne SingularityThree alternatives
Bitdefender GravityZone EDR, Huntress Managed EDR, Microsoft Defender for EndpointFour alternatives
Bitdefender GravityZone EDR, CrowdStrike Falcon Insight, SentinelOne Singularity, Sophos Intercept XTwo alternatives
CrowdStrike Falcon Insight, Microsoft Defender for EndpointBold is the first choiceAlternatives are counted; the count opens them.What the answer argued against
The record
One row per call: the version string exactly as returned, whether the model searched, sources cited, and latency.
Seventy-two rows: every prompt, every model, every answer.
| Prompt | Model | Version string | Time (UTC) | Searched | Sources | Latency |
|---|---|---|---|---|---|---|
| Direct recommendation | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-09-17 14:10 | yes | 9 | 9 s |
| Direct recommendation | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-09-17 13:34 | yes | 3 | 5 s |
| Direct recommendation | Gemini 3.5 Flash | gemini-3.5-flash | 2026-09-17 11:32 | yes | 11 | 19 s |
| Direct recommendation | Perplexity Sonar | sonar | 2026-09-17 09:23 | yes | 19 | 6 s |
| Direct recommendation | Grok 4.20 | spacexai/grok-4.1-fast-non-reasoning via vertex (asked for grok-4.20-non-reasoning; the API answered as this version) | 2026-09-17 12:12 | yes | 26 | 15 s |
| Direct recommendation | Mistral Small | mistral/mistral-small via mistral | 2026-09-17 09:44 | yes | 5 | 4 s |
| Direct recommendation | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via fireworks | 2026-09-17 11:19 | yes | 11 | 16 s |
| Direct recommendation | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-09-17 12:38 | yes | 5 | 3 s |
| Direct recommendation | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-09-17 11:07 | yes | 10 | 51 s |
| Direct recommendation | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-09-17 12:19 | yes | 7 | 19 s |
| Direct recommendation | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-09-17 10:32 | yes | 19 | 38 s |
| Direct recommendation | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-09-17 09:45 | yes | 12 | 35 s |
| Paraphrase | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-09-17 11:33 | yes | 15 | 9 s |
| Paraphrase | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-09-17 13:10 | yes | 3 | 7 s |
| Paraphrase | Gemini 3.5 Flash | gemini-3.5-flash | 2026-09-17 10:14 | yes | 9 | 20 s |
| Paraphrase | Perplexity Sonar | sonar | 2026-09-17 10:35 | yes | 20 | 5 s |
| Paraphrase | Grok 4.20 | spacexai/grok-4.1-fast-non-reasoning via vertex (asked for grok-4.20-non-reasoning; the API answered as this version) | 2026-09-17 10:58 | yes | 34 | 16 s |
| Paraphrase | Mistral Small | mistral/mistral-small via mistral | 2026-09-17 10:09 | yes | 5 | 3 s |
| Paraphrase | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via fireworks | 2026-09-17 12:32 | yes | 14 | 23 s |
| Paraphrase | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-09-17 12:40 | yes | 5 | 3 s |
| Paraphrase | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-09-17 13:01 | yes | 15 | 98 s |
| Paraphrase | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-09-17 11:05 | yes | 15 | 40 s |
| Paraphrase | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-09-17 10:59 | yes | 7 | 108 s |
| Paraphrase | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-09-17 10:56 | yes | 7 | 41 s |
| Comparative | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-09-17 13:42 | yes | 9 | 9 s |
| Comparative | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-09-17 10:37 | yes | 7 | 15 s |
| Comparative | Gemini 3.5 Flash | gemini-3.5-flash | 2026-09-17 09:43 | yes | 10 | 24 s |
| Comparative | Perplexity Sonar | sonar | 2026-09-17 09:53 | yes | 20 | 8 s |
| Comparative | Grok 4.20 | spacexai/grok-4.1-fast-non-reasoning via vertex (asked for grok-4.20-non-reasoning; the API answered as this version) | 2026-09-17 10:48 | yes | 17 | 12 s |
| Comparative | Mistral Small | mistral/mistral-small via mistral | 2026-09-17 13:11 | yes | 5 | 10 s |
| Comparative | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-09-17 14:14 | yes | 24 | 72 s |
| Comparative | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-09-17 13:51 | yes | 5 | 4 s |
| Comparative | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-09-17 12:46 | yes | 9 | 41 s |
| Comparative | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-09-17 10:22 | yes | 8 | 39 s |
| Comparative | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-09-17 13:51 | yes | 13 | 200 s |
| Comparative | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-09-17 10:53 | yes | 8 | 45 s |
| Budget constrained | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-09-17 09:24 | yes | 9 | 8 s |
| Budget constrained | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-09-17 09:55 | yes | 5 | 5 s |
| Budget constrained | Gemini 3.5 Flash | gemini-3.5-flash | 2026-09-17 12:54 | yes | 22 | 21 s |
| Budget constrained | Perplexity Sonar | sonar | 2026-09-17 14:02 | yes | 20 | 5 s |
| Budget constrained | Grok 4.20 | spacexai/grok-4.1-fast-non-reasoning via vertex (asked for grok-4.20-non-reasoning; the API answered as this version) | 2026-09-17 12:12 | yes | 31 | 18 s |
| Budget constrained | Mistral Small | mistral/mistral-small via mistral | 2026-09-17 13:39 | yes | 5 | 6 s |
| Budget constrained | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via fireworks | 2026-09-17 13:12 | yes | 20 | 23 s |
| Budget constrained | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-09-17 13:07 | yes | 5 | 2 s |
| Budget constrained | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-09-17 10:07 | yes | 5 | 53 s |
| Budget constrained | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-09-17 12:07 | yes | 6 | 21 s |
| Budget constrained | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-09-17 11:30 | yes | 21 | 95 s |
| Budget constrained | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-09-17 12:13 | yes | 5 | 27 s |
| Scale constrained | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-09-17 13:13 | no | 0 | 8 s |
| Scale constrained | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-09-17 12:18 | no | 0 | 8 s |
| Scale constrained | Gemini 3.5 Flash | gemini-3.5-flash | 2026-09-17 13:34 | yes | 13 | 23 s |
| Scale constrained | Perplexity Sonar | sonar | 2026-09-17 10:46 | yes | 20 | 17 s |
| Scale constrained | Grok 4.20 | spacexai/grok-4.1-fast-non-reasoning via vertex (asked for grok-4.20-non-reasoning; the API answered as this version) | 2026-09-17 11:18 | yes | 19 | 11 s |
| Scale constrained | Mistral Small | mistral/mistral-small via mistral | 2026-09-17 12:22 | no | 0 | 6 s |
| Scale constrained | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via fireworks | 2026-09-17 12:21 | yes | 9 | 17 s |
| Scale constrained | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-09-17 12:02 | yes | 5 | 2 s |
| Scale constrained | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-09-17 13:45 | no | 0 | 40 s |
| Scale constrained | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-09-17 11:19 | yes | 14 | 29 s |
| Scale constrained | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-09-17 11:03 | yes | 14 | 48 s |
| Scale constrained | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-09-17 09:36 | no | 0 | 11 s |
| Negative framing | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-09-17 10:46 | yes | 15 | 9 s |
| Negative framing | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-09-17 13:18 | yes | 3 | 5 s |
| Negative framing | Gemini 3.5 Flash | gemini-3.5-flash | 2026-09-17 10:30 | yes | 13 | 25 s |
| Negative framing | Perplexity Sonar | sonar | 2026-09-17 13:10 | yes | 20 | 7 s |
| Negative framing | Grok 4.20 | spacexai/grok-4.1-fast-non-reasoning via vertex (asked for grok-4.20-non-reasoning; the API answered as this version) | 2026-09-17 14:06 | yes | 46 | 20 s |
| Negative framing | Mistral Small | mistral/mistral-small via mistral | 2026-09-17 13:42 | yes | 5 | 6 s |
| Negative framing | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via fireworks | 2026-09-17 11:33 | yes | 26 | 30 s |
| Negative framing | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-09-17 10:48 | yes | 5 | 3 s |
| Negative framing | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-09-17 11:33 | yes | 13 | 63 s |
| Negative framing | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-09-17 11:48 | yes | 17 | 40 s |
| Negative framing | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-09-17 12:37 | yes | 26 | 117 s |
| Negative framing | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-09-17 14:03 | yes | 13 | 41 s |
Normalization in this category
Every judgment call made between the raw labels and the numbers above, listed so it is visible and reversible.
ShowHide
Category-scoped readings
Acronis read as Acronis Cyber Protect
Bitdefender read as Bitdefender GravityZone EDR
Bitdefender GravityZone read as Bitdefender GravityZone EDR
Bitdefender GravityZone (Business Security) read as Bitdefender GravityZone EDR
Bitdefender GravityZone Business Security Premium read as Bitdefender GravityZone EDR
CNiC read as CNiC Managed EDR
Carbon Black read as VMware Carbon Black
Cortex XDR read as Palo Alto Networks Cortex XDR
CrowdStrike Falcon read as CrowdStrike Falcon Insight
CrowdStrike Falcon (including Falcon Go SMB tier) read as CrowdStrike Falcon Insight
CrowdStrike Falcon Complete read as CrowdStrike Falcon Insight
CrowdStrike Falcon Complete Next-Gen MDR read as CrowdStrike Falcon Insight
CrowdStrike Falcon Go read as CrowdStrike Falcon Insight
CrowdStrike Falcon Go / Falcon Complete read as CrowdStrike Falcon Insight
CrowdStrike Falcon Go / Falcon Pro read as CrowdStrike Falcon Insight
CrowdStrike Falcon Pro/Enterprise read as CrowdStrike Falcon Insight
CrowdStrike Falcon enterprise offerings read as CrowdStrike Falcon Insight
Cynet 360 read as Cynet
Defender for Endpoint read as Microsoft Defender for Endpoint
ESET PROTECT Entry read as ESET PROTECT
ESET PROTECT Platform read as ESET PROTECT
Elastic read as Elastic Security
Huntress read as Huntress Managed EDR
Kaspersky read as Kaspersky Endpoint Detection and Response (EDR) Expert
Microsoft Defender read as Microsoft Defender for Endpoint
Microsoft Defender for Business / Defender for Endpoint read as Microsoft Defender for Endpoint
Palo Alto read as Palo Alto Networks Cortex XDR
Palo Alto Cortex XDR read as Palo Alto Networks Cortex XDR
Palo Alto Networks read as Palo Alto Networks Cortex XDR
SentinelOne read as SentinelOne Singularity
SentinelOne Singularity read as SentinelOne Singularity
SentinelOne Singularity (Complete tier) read as SentinelOne Singularity
SentinelOne Singularity (Core/Control tiers) read as SentinelOne Singularity
SentinelOne Singularity (SMB tier) read as SentinelOne Singularity
SentinelOne Singularity Complete read as SentinelOne Singularity
SentinelOne Singularity Core read as SentinelOne Singularity
SentinelOne Singularity Endpoint read as SentinelOne Singularity
Sophos read as Sophos Intercept X
Sophos Endpoint (Intercept X) read as Sophos Intercept X
Symantec Enterprise read as Symantec Endpoint Security
ThreatDown read as ThreatDown EDR
ThreatDown (formerly Malwarebytes EDR) read as ThreatDown EDR
Trellix read as Trellix EDR
Trellix (formerly McAfee Enterprise) read as Trellix EDR
Trend Micro Vision One read as Trend Micro
Unresolved, counted raw
Microsoft Defender Suite for Microsoft 365 Business Premium
Sangfor Endpoint Detection and Response (EDR)
Discontinued, still offered
No shut-down product was recommended here.