Extended detection and response for small business buyers
Asked as “XDR platform”, and as “extended detection and response solution”, on behalf of a small B2B company. 44 first choices recorded across the direct, paraphrase, budget and scale prompts, twelve models each.
Standing · first-choice share
57%
CoroClear leader
57Coro14Microsoft Defender XDR14Microsoft Defender for Cloud16others
57% of first choices, clear leader.
By buyer segment
The same question asked on behalf of a different buyer. Each standing is computed within its segment; they sit side by side and are never added together.
The standing
Share is the count of first choices across the direct, paraphrase, budget and scale prompts, over all twelve models, for a small B2B company. Ordered by share.
ProductFirst-choice shareNegative rateLabelsQuadrant
Show the five products at 0%, ordered by negative rate
Bars are the share of first choices, 0 to 100Every product with at least 10 labels here. Every product name links to its product page.
Head to head
Microsoft Defender XDR vs CoroMicrosoft Defender XDR vs SentinelOne SingularityMicrosoft Defender XDR vs CrowdStrike Falcon Insight XDR
Head-to-head pages are published for mid-market buyers, so these open on mid-market figures, not small business.All fifteen head-to-head pages: the top six products, each against each
Microsoft Defender XDR vs Bitdefender GravityZone XDRMicrosoft Defender XDR vs Sophos Intercept XCoro vs SentinelOne SingularityCoro vs CrowdStrike Falcon Insight XDRCoro vs Bitdefender GravityZone XDRCoro vs Sophos Intercept XSentinelOne Singularity vs CrowdStrike Falcon Insight XDRSentinelOne Singularity vs Bitdefender GravityZone XDRSentinelOne Singularity vs Sophos Intercept XCrowdStrike Falcon Insight XDR vs Bitdefender GravityZone XDRCrowdStrike Falcon Insight XDR vs Sophos Intercept XBitdefender GravityZone XDR vs Sophos Intercept X
One product takes 57% of first choices here, so the chart would put nine markers in one corner and one at the far edge. The two measurements it plots are columns in the standing above: share, and the negative label rate. Three products carry a negative rate above 25% in this category.
What they warned about
Seven of twelve models held their first choice under the paraphrase. Claude Haiku 4.5, Perplexity Sonar, DeepSeek V4 Flash, Qwen 3.7 Flash and Kimi K2 changed. A high negative share on a product with few labels is a warning. A low share on a product with many labels is salience, not sentiment.
CrowdStrike Falcon Insight XDR48%
22 of 46 labels negative · 10 of 12 models · 6 hard negative
“call out reliability issues where it "fails" smaller clients frequently. Add-ons inflate costs quickly, and it's not optimized for SMBs” Grok 4.20, negative prompt
Palo Alto Networks Cortex XDR71%
20 of 28 labels negative · 10 of 12 models · 6 hard negative
“notoriously steep learning curve and a highly complex user interface... should be avoided or approached with extreme caution” Gemini 3.5 Flash, negative prompt
Microsoft Defender XDR17%
8 of 46 labels negative · 8 of 12 models · 2 hard negative
“If your business has fewer than 300 users, avoid buying into the full enterprise-grade Microsoft Defender XDR” Gemini 3.5 Flash, negative prompt
SentinelOne Singularity22%
8 of 37 labels negative · 6 of 12 models · 2 hard negative
“Avoid: ... or SentinelOne Complete unless you have specific high-security requirements” Kimi K2, paraphrase prompt
What they cite
Twelve of the twelve models returned a source list in this edition: four return the pages they cited and eight the search results they consulted.
Sites the answers cite
65 of 72 answers in this category came back with a source list, from 12 of 12 models: citations where the model returns them, or the search results it consulted. 956 links across 198 sites, every framing counted. Ranked by the number of answers carrying the site or page.
vendor site · CyberPress60 answers · 105 citations · 11 models
44 answers · 71 citations · 10 models
39 answers · 43 citations · 11 models
vendor site · Palo Alto Networks29 answers · 30 citations · 12 models
vendor site · SentinelOne19 answers · 22 citations · 7 models
vendor site · G218 answers · 36 citations · 8 models
18 answers · 18 citations · 11 models
vendor site · Guideflow17 answers · 17 citations · 8 models
vendor site · Amazon16 answers · 17 citations · 8 models
16 answers · 16 citations · 9 models
15 answers · 20 citations · 7 models
vendor site · Huntress15 answers · 17 citations · 8 models
Pages the answers cite
The ten pages named in the most answers, by full address. A page here is one the models returned with a recommendation, not one the index endorses.
59 answers · 11 models
38 answers · 10 models
31 answers · 10 models
28 answers · 12 models
22 answers · 9 models
21 answers · 8 models
18 answers · 11 models
17 answers · 8 models
16 answers · 9 models
15 answers · 9 models
Search against answers
Each company's standing in the answers beside its site's footprint in Google search, one row a site: the products the models named on it with their shares, and the share they add up to; monthly searches on Google, and DataForSEO's estimate of AI search demand (modeled from search signals, directional, not a count of queries to any assistant), for the most-searched of the company's and its products' names (the name is in each row's hover text); estimated monthly organic visits to the site; and its best position in Google's top ten for “best xdr platform”, “xdr platform”, “xdr platforms”. US estimates from DataForSEO and Google's Ads Transparency Center. A small company's site, or a mid-sized company's site for its flagship, is marked company; a product on a large parent's site (Google, Microsoft) has no site figures. A column with no figures for this category is left out, and an empty cell means none were seen, not none exist. Two measurements side by side: neither is read as the cause of the other.
| Company and products | Share | Own site cited | Name searches, Google | AI search demand, est. | Organic visits | Paid search a month, est. | Google ads, last 30 days | Best Google position |
|---|---|---|---|---|---|---|---|---|
| Coro coro.net | 57% | 90 | 49,500 | 4,833 | 3,791 | 3 | ||
| Microsoft Defender parent site Microsoft Defender XDR 14%, Microsoft Defender for Business / Defender XDR 2%, Microsoft Defender for Endpoint 0% | 16% | 264 | 18,100 | 3,525 | ||||
| Microsoft Defender microsoft.com Microsoft Defender for Cloud 14% | 14% | 659 | 18,100 | 3,525 | 145,358,109 company | $12,455 | 103 | |
| Huntress huntress.com Huntress Managed EDR 5% | 5% | 353 | 33,100 | 4,338 | 352,368 company | $15,522 | 120 | |
| Cynet 360 AutoXDR cynet.com | 5% | 24 | 10 | 0 | 13,782 | 43 | 7 | |
| SentinelOne sentinelone.com SentinelOne Singularity 2% | 2% | 499 | 33,100 | 1,675 | 446,702 company | $780 | 22 | 1 |
| Sophos parent site Sophos Central 2%, Sophos MDR 0% | 2% | 155 | 18,100 | 2,046 | ||||
| Sophos sophos.com Sophos Intercept X 0% | 0% | 304 | 18,100 | 2,046 | 186,716 company | $1,427 | 65 | |
| Bitdefender parent site Bitdefender GravityZone XDR 0% | 0% | 42 | 90,500 | 3,261 | ||||
| Stellar Cyber Open XDR stellarcyber.ai | 0% | 101 | 0 | 3,048 | 31 | 6 |
Google's top ten for the three searches hold 22 sites; 3 of them are among the sites the models cited here (paloaltonetworks.com, reddit.com, sentinelone.com). The first result for “best xdr platform” is gartner.com.
How they answered
Six framings of the same buying question, each sent to every model in a fresh session with search on. One row per model, so a row shows whether it held its answer under rewording, what it named when cost was the constraint, and what it argued against. Computed from the raw judge labels.ShowHide
How they answered
Six framings of the same buying question, each sent to every model in a fresh session with search on. One row per model, so a row shows whether it held its answer under rewording, what it named when cost was the constraint, and what it argued against. Computed from the raw judge labels.
ShowHideModelDirect“What is the best XDR platform for a small B2B company?”Paraphrase“Which extended detection and response solution would you recommend to a small business that sells to other businesses?”Comparative“What are the top XDR platforms for a small team and how do they differ?”Budget-constrained“What is the best XDR platform for a small company with a tight budget?”Scale-constrained“We are a 30 person company evaluating a XDR platform. What should we look at?”Negative“Which XDR platforms should a small business avoid or be cautious about?”
Claude Haiku 4.5SentinelOne SingularitySophos CentralChangedSentinelOne SingularityCynet 360 AutoXDRno first choiceagainst: Microsoft Defender XDR, Palo Alto Networks Cortex XDR
Two alternatives
Coro, Microsoft Defender XDRThree alternatives
Cytellix, ESET PROTECT, Microsoft Defender XDRFour alternatives
Blumira, Coro, CrowdStrike Falcon Insight XDR, Microsoft Defender XDRFour alternatives
Blumira, Elastic Security, Microsoft Defender XDR, Sophos Intercept XGPT-5.4 miniMicrosoft Defender XDRagainst: Palo Alto Networks Cortex XDRMicrosoft Defender XDRHeldMicrosoft Defender XDRagainst: Trend Vision OneMicrosoft Defender XDRagainst: CrowdStrike Falcon Insight XDR, SentinelOne Singularityno first choiceagainst: CrowdStrike Falcon Insight XDR, Microsoft Defender XDR, Palo Alto Networks Cortex XDR
Two alternatives
CrowdStrike Falcon Insight XDR, SentinelOne SingularityTwo alternatives
CrowdStrike Falcon Insight XDR, Sophos MDRThree alternatives
CrowdStrike Falcon Insight XDR, Palo Alto Networks Cortex XDR, SentinelOne SingularityOne alternative
Sophos Intercept XGemini 3.5 FlashMicrosoft Defender for Cloudagainst: CrowdStrike Falcon Insight XDR, Palo Alto Networks Cortex XDRMicrosoft Defender for CloudHeldCoroagainst: CrowdStrike Falcon Insight XDR, Palo Alto Networks Cortex XDRMicrosoft Defender for Cloudagainst: CrowdStrike Falcon Insight XDR, Palo Alto Networks Cortex XDRHuntress Managed EDRagainst: CrowdStrike Falcon Insight XDR, Palo Alto Networksagainst: CrowdStrike Falcon Insight XDR, Microsoft Defender XDR, Palo Alto Networks Cortex XDR
Three alternatives
Coro, Guardz, Sophos Intercept XThree alternatives
Coro, SentinelOne Singularity, Sophos MDRFour alternatives
Cynet 360 AutoXDR, Microsoft Defender for Business / Defender XDR, SentinelOne Singularity, Sophos Intercept XFour alternatives
Coro, Huntress Managed EDR, Sophos Intercept X, WazuhThree alternatives
Coro, Microsoft Defender for Cloud, Sophos Intercept XPerplexity SonarCoroHuntress Managed EDRChangedCoroCoro, Microsoft Defender for Business / Defender XDRno first choiceagainst: Cisco XDR, CrowdStrike Falcon Insight XDR, Microsoft Defender XDR, Palo Alto Networks Cortex XDR, SentinelOne Singularity
Two alternatives
Cynet 360 AutoXDR, Microsoft Defender XDRTwo alternatives
CrowdStrike Falcon Insight XDR, Microsoft Defender for EndpointFour alternatives
CrowdStrike Falcon Insight XDR, Cynet 360 AutoXDR, Microsoft Defender XDR, Sophos Intercept XOne alternative
Huntress Managed EDRGrok 4.20CoroCoroHeldagainst: CrowdStrike Falcon Insight XDR, Palo Alto Networks Cortex XDRCoroagainst: CrowdStrike Falcon Insight XDR, Palo AltoCoroagainst: Palo Altono first choiceagainst: Cisco XDR, CrowdStrike Falcon Insight XDR, Microsoft Defender XDR, Palo Alto Networks Cortex XDR, SentinelOne Singularity, Trend Vision One
Four alternatives
Bitdefender GravityZone XDR, Huntress Managed EDR, Microsoft Defender XDR, SentinelOne SingularityThree alternatives
Bitdefender Managed XDR, Cynet 360 AutoXDR, Microsoft Defender XDRFive alternatives
Bitdefender GravityZone XDR, Cynet 360 AutoXDR, Microsoft Defender XDR, SentinelOne Singularity, Sophos Intercept XThree alternatives
Bitdefender GravityZone XDR, Huntress Managed EDR, Microsoft Defender XDRSix alternatives
Coro, CrowdStrike Falcon Insight XDR, Microsoft Defender XDR, Palo Alto Networks Cortex XDR, SentinelOne Singularity, Sophos Intercept XMistral SmallCoroCoroHeldagainst: Microsoft Defender XDR, Trend Vision OneCoroagainst: CrowdStrike Falcon Insight XDRCorono first choicenothing named
Four alternatives
Microsoft Defender XDR, Palo Alto Networks Cortex XDR, SentinelOne Singularity, Stellar Cyber Open XDRFive alternatives
Cisco XDR, CrowdStrike Falcon Insight XDR, Microsoft Defender XDR, Palo Alto Networks Cortex XDR, SentinelOne SingularityDeepSeek V4 FlashMicrosoft Defender for Cloudagainst: CrowdStrike Falcon Insight XDRCoroChangedagainst: CrowdStrike Falcon Insight XDR, Palo Alto Networks Cortex XDRCoro, Microsoft Defender XDRagainst: Palo Alto Networks Cortex XDRCynet 360 AutoXDRagainst: CrowdStrike Falcon Insight XDRCoroagainst: Palo Alto Networks Cortex XDRagainst: Bitdefender GravityZone XDR, CrowdStrike Falcon Insight XDR, Microsoft Sentinel, Palo Alto Networks Cortex XDR, Trend Vision One
Three alternatives
Coro, SentinelOne Singularity, Sophos Intercept XTwo alternatives
Microsoft Defender for Endpoint, SentinelOne SingularityFour alternatives
Bitdefender GravityZone XDR, CrowdStrike Falcon Insight XDR, SentinelOne Singularity, Stellar Cyber Open XDRThree alternatives
Coro, Huntress Managed EDR, Microsoft Defender for CloudOne alternative
Microsoft Defender XDRLlama 4 MaverickCoroCoroHeldCoroCoroCoronothing named
Three alternatives
Bitdefender GravityZone XDR, CrowdStrike Falcon Insight XDR, Microsoft Defender XDROne alternative
Sophos Intercept XOne alternative
Microsoft Defender XDRQwen 3.7 FlashCoroagainst: CrowdStrike Falcon Insight XDR, SentinelOne SingularityMicrosoft Defender for CloudChangedMicrosoft Defender XDRagainst: Palo Alto Networks Cortex XDRCorono first choiceagainst: Cisco XDR, Elastic Security, FireEye, IBM QRadar, Palo Alto Networks Cortex XDR, ReliaQuest GreyMatter, SentinelOne Singularity, Sophos Intercept X, Stellar Cyber Open XDR, Trellix XDR, Trend Vision One
Three alternatives
Coro, SentinelOne Singularity, Sophos Intercept XThree alternatives
CrowdStrike Falcon Insight XDR, Huntress Managed EDR, SentinelOne SingularityOne alternative
Bitdefender GravityZone XDRThree alternatives
Huntress Managed EDR, Microsoft Defender XDR, SentinelOne SingularityKimi K2Microsoft Defender XDRCoroChangedagainst: CrowdStrike Falcon Insight XDR, SentinelOne SingularityCoro, Sophos Intercept XCoro, Microsoft Defender XDRMicrosoft Defender XDRagainst: CrowdStrike Falcon Insight XDR, Palo Alto Networks Cortex XDR, SentinelOne Singularity, Trend Vision One
Five alternatives
Coro, CrowdStrike Falcon Insight XDR, Huntress Managed EDR, SentinelOne Singularity, Sophos MDRThree alternatives
Huntress Managed EDR, Microsoft Defender for Endpoint, Sophos Intercept XThree alternatives
Cynet 360 AutoXDR, Microsoft Defender XDR, SentinelOne SingularityThree alternatives
Bitdefender GravityZone XDR, CrowdStrike Falcon Insight XDR, Huntress Managed EDRFive alternatives
Bitdefender GravityZone XDR, CrowdStrike Falcon Insight XDR, SentinelOne Singularity, Sophos Intercept X, Stellar Cyber Open XDRGLM 4.7 FlashXCoroCoroHeldagainst: ESET PROTECTCoroCoroagainst: CrowdStrike Falcon Insight XDR, Palo Altono first choiceagainst: Palo Alto Networks Cortex XDRagainst: CrowdStrike Falcon Insight XDR, Microsoft Defender XDR, Palo Alto Networks Cortex XDR, SentinelOne Singularity, WithSecure Elements XDR
Four alternatives
CrowdStrike Falcon Insight XDR, Microsoft Defender XDR, Palo Alto Networks Cortex XDR, Trend Vision OneTwo alternatives
CrowdStrike Falcon Insight XDR, SentinelOne SingularityEight alternatives
Bitdefender GravityZone XDR, CrowdStrike Falcon Insight XDR, Microsoft Defender XDR, Palo Alto Networks Cortex XDR, SentinelOne Singularity, Sophos Intercept X, Stellar Cyber Open XDR, Trend Vision OneThree alternatives
Blumira, Microsoft Defender XDR, Sophos Intercept XTwo alternatives
Coro, Microsoft Defender XDRMiniMax M2.5CoroCoroHeldCoroCoro, Microsoft Defender for CloudCoroagainst: CrowdStrike Falcon Insight XDR, Microsoft Defender XDR, Palo Alto Networks Cortex XDR
Four alternatives
Bitdefender GravityZone XDR, CrowdStrike Falcon Insight XDR, Microsoft Defender for Cloud, SentinelOne SingularityFour alternatives
CrowdStrike Falcon Insight XDR, Microsoft Defender XDR, SentinelOne Singularity, Trend Vision OneOne alternative
Bitdefender GravityZone XDROne alternative
Microsoft Defender XDRBold is the first choiceAlternatives are counted; the count opens them.What the answer argued against
The record
One row per call: the version string exactly as returned, whether the model searched, sources cited, and latency.
Seventy-two rows: every prompt, every model, every answer.
| Prompt | Model | Version string | Time (UTC) | Searched | Sources | Latency |
|---|---|---|---|---|---|---|
| Direct recommendation | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-09-17 13:22 | yes | 9 | 8 s |
| Direct recommendation | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-09-17 10:58 | no | 0 | 6 s |
| Direct recommendation | Gemini 3.5 Flash | gemini-3.5-flash | 2026-09-17 11:42 | yes | 14 | 24 s |
| Direct recommendation | Perplexity Sonar | sonar | 2026-09-17 11:40 | yes | 19 | 4 s |
| Direct recommendation | Grok 4.20 | spacexai/grok-4.1-fast-non-reasoning via vertex (asked for grok-4.20-non-reasoning; the API answered as this version) | 2026-09-17 12:29 | yes | 31 | 17 s |
| Direct recommendation | Mistral Small | mistral/mistral-small via mistral | 2026-09-17 13:50 | yes | 5 | 3 s |
| Direct recommendation | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via fireworks | 2026-09-17 12:02 | yes | 15 | 20 s |
| Direct recommendation | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-09-17 11:45 | yes | 5 | 3 s |
| Direct recommendation | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-09-17 13:46 | yes | 5 | 23 s |
| Direct recommendation | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-09-17 12:57 | yes | 12 | 27 s |
| Direct recommendation | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-09-17 12:30 | yes | 17 | 52 s |
| Direct recommendation | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-09-17 11:17 | yes | 5 | 21 s |
| Paraphrase | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-09-17 13:14 | yes | 9 | 7 s |
| Paraphrase | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-09-17 11:05 | no | 0 | 3 s |
| Paraphrase | Gemini 3.5 Flash | gemini-3.5-flash | 2026-09-17 11:33 | yes | 9 | 22 s |
| Paraphrase | Perplexity Sonar | sonar | 2026-09-17 11:40 | yes | 20 | 4 s |
| Paraphrase | Grok 4.20 | spacexai/grok-4.1-fast-non-reasoning via vertex (asked for grok-4.20-non-reasoning; the API answered as this version) | 2026-09-17 09:23 | yes | 31 | 15 s |
| Paraphrase | Mistral Small | mistral/mistral-small via mistral | 2026-09-17 14:15 | yes | 5 | 5 s |
| Paraphrase | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via fireworks | 2026-09-17 13:03 | yes | 27 | 56 s |
| Paraphrase | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-09-17 13:45 | yes | 5 | 3 s |
| Paraphrase | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-09-17 13:23 | yes | 10 | 33 s |
| Paraphrase | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-09-17 13:49 | yes | 13 | 23 s |
| Paraphrase | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-09-17 09:25 | yes | 29 | 153 s |
| Paraphrase | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-09-17 13:35 | yes | 14 | 52 s |
| Comparative | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-09-17 10:08 | yes | 9 | 10 s |
| Comparative | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-09-17 10:08 | yes | 6 | 8 s |
| Comparative | Gemini 3.5 Flash | gemini-3.5-flash | 2026-09-17 10:28 | yes | 20 | 25 s |
| Comparative | Perplexity Sonar | sonar | 2026-09-17 11:13 | yes | 20 | 7 s |
| Comparative | Grok 4.20 | spacexai/grok-4.1-fast-non-reasoning via vertex (asked for grok-4.20-non-reasoning; the API answered as this version) | 2026-09-17 10:39 | yes | 46 | 22 s |
| Comparative | Mistral Small | mistral/mistral-small via mistral | 2026-09-17 09:24 | yes | 8 | 13 s |
| Comparative | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via fireworks | 2026-09-17 13:45 | yes | 13 | 20 s |
| Comparative | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-09-17 10:27 | yes | 5 | 4 s |
| Comparative | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-09-17 12:43 | no | 0 | 40 s |
| Comparative | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-09-17 12:15 | yes | 19 | 37 s |
| Comparative | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-09-17 13:36 | yes | 12 | 109 s |
| Comparative | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-09-17 12:18 | yes | 12 | 76 s |
| Budget constrained | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-09-17 09:35 | yes | 9 | 8 s |
| Budget constrained | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-09-17 11:48 | yes | 4 | 4 s |
| Budget constrained | Gemini 3.5 Flash | gemini-3.5-flash | 2026-09-17 12:28 | yes | 26 | 24 s |
| Budget constrained | Perplexity Sonar | sonar | 2026-09-17 11:11 | yes | 20 | 6 s |
| Budget constrained | Grok 4.20 | spacexai/grok-4.1-fast-non-reasoning via vertex (asked for grok-4.20-non-reasoning; the API answered as this version) | 2026-09-17 13:50 | yes | 38 | 17 s |
| Budget constrained | Mistral Small | mistral/mistral-small via mistral | 2026-09-17 09:49 | yes | 5 | 3 s |
| Budget constrained | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via fireworks | 2026-09-17 10:36 | yes | 16 | 20 s |
| Budget constrained | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-09-17 11:31 | yes | 5 | 2 s |
| Budget constrained | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-09-17 14:09 | yes | 5 | 24 s |
| Budget constrained | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-09-17 10:33 | yes | 7 | 21 s |
| Budget constrained | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-09-17 09:54 | yes | 21 | 48 s |
| Budget constrained | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-09-17 10:11 | yes | 16 | 26 s |
| Scale constrained | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-09-17 09:51 | no | 0 | 8 s |
| Scale constrained | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-09-17 14:15 | no | 0 | 10 s |
| Scale constrained | Gemini 3.5 Flash | gemini-3.5-flash | 2026-09-17 10:40 | yes | 11 | 25 s |
| Scale constrained | Perplexity Sonar | sonar | 2026-09-17 11:14 | yes | 20 | 8 s |
| Scale constrained | Grok 4.20 | spacexai/grok-4.1-fast-non-reasoning via vertex (asked for grok-4.20-non-reasoning; the API answered as this version) | 2026-09-17 10:16 | yes | 16 | 11 s |
| Scale constrained | Mistral Small | mistral/mistral-small via mistral | 2026-09-17 13:57 | no | 0 | 6 s |
| Scale constrained | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via fireworks | 2026-09-17 13:19 | yes | 18 | 22 s |
| Scale constrained | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-09-17 11:34 | yes | 5 | 3 s |
| Scale constrained | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-09-17 13:29 | no | 0 | 39 s |
| Scale constrained | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-09-17 10:33 | yes | 15 | 60 s |
| Scale constrained | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-09-17 09:55 | yes | 11 | 106 s |
| Scale constrained | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-09-17 12:01 | yes | 5 | 14 s |
| Negative framing | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-09-17 13:02 | yes | 18 | 11 s |
| Negative framing | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-09-17 12:14 | yes | 3 | 6 s |
| Negative framing | Gemini 3.5 Flash | gemini-3.5-flash | 2026-09-17 11:23 | yes | 19 | 21 s |
| Negative framing | Perplexity Sonar | sonar | 2026-09-17 14:03 | yes | 20 | 8 s |
| Negative framing | Grok 4.20 | spacexai/grok-4.1-fast-non-reasoning via vertex (asked for grok-4.20-non-reasoning; the API answered as this version) | 2026-09-17 11:41 | yes | 15 | 8 s |
| Negative framing | Mistral Small | mistral/mistral-small via mistral | 2026-09-17 12:35 | yes | 5 | 4 s |
| Negative framing | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via fireworks | 2026-09-17 11:04 | yes | 26 | 29 s |
| Negative framing | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-09-17 10:43 | yes | 5 | 3 s |
| Negative framing | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-09-17 11:24 | yes | 21 | 100 s |
| Negative framing | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-09-17 09:35 | yes | 21 | 36 s |
| Negative framing | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-09-17 12:55 | yes | 32 | 99 s |
| Negative framing | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-09-17 09:27 | yes | 19 | 39 s |
Normalization in this category
Every judgment call made between the raw labels and the numbers above, listed so it is visible and reversible.
ShowHide
Category-scoped readings
Bitdefender read as Bitdefender GravityZone XDR
Bitdefender GravityZone read as Bitdefender GravityZone XDR
CrowdStrike read as CrowdStrike Falcon Insight XDR
CrowdStrike Falcon read as CrowdStrike Falcon Insight XDR
CrowdStrike Falcon (Falcon Complete / Enterprise) read as CrowdStrike Falcon Insight XDR
CrowdStrike Falcon (Standard Enterprise Tiers) read as CrowdStrike Falcon Insight XDR
CrowdStrike Falcon Enterprise read as CrowdStrike Falcon Insight XDR
CrowdStrike Falcon Go read as CrowdStrike Falcon Insight XDR
CrowdStrike Falcon Pro read as CrowdStrike Falcon Insight XDR
CrowdStrike Falcon XDR read as CrowdStrike Falcon Insight XDR
CrowdStrike XDR read as CrowdStrike Falcon Insight XDR
Cynet read as Cynet 360 AutoXDR
Cynet 360 read as Cynet 360 AutoXDR
Cynet All-in-One (AutoXDR) read as Cynet 360 AutoXDR
Cynet XDR read as Cynet 360 AutoXDR
ESET (ESET PROTECT) read as ESET PROTECT
Elastic read as Elastic Security
Fortinet read as Fortinet FortiXDR
Huntress read as Huntress Managed EDR
Microsoft Defender read as Microsoft Defender XDR
Microsoft Defender (Enterprise E5) read as Microsoft Defender XDR
Palo Alto Cortex read as Palo Alto Networks Cortex XDR
Rapid7 read as Rapid7 InsightIDR
ReliaQuest read as ReliaQuest GreyMatter
SentinelOne read as SentinelOne Singularity
SentinelOne (Singularity Complete) read as SentinelOne Singularity
SentinelOne (Singularity) read as SentinelOne Singularity
Sophos read as Sophos Intercept X
Stellar Cyber read as Stellar Cyber Open XDR
Stellar Cyber (Open XDR) read as Stellar Cyber Open XDR
Trellix read as Trellix XDR
Trend Micro read as Trend Vision One
Unresolved, counted raw
Bitdefender Managed XDR
Cytellix
Defendify MDR
Discontinued, still offered
No shut-down product was recommended here.