GRC platforms for enterprise buyers
Asked as “GRC platform”, and as “governance, risk and compliance tool”, on behalf of an enterprise B2B company. 59 first choices recorded across the direct, paraphrase, budget and scale prompts, fourteen models each.
Standing · first-choice share
25%
Contested · MetricStream 15%
25ServiceNow Integrated Risk Management15MetricStream10Centraleyes49others
25% of first choices, contested.
Since October 2026↗new leaderNew leader since October 2026: ServiceNow Integrated Risk Management (25%) replaces MetricStream (24% then, 15% now), 10 points clear, inside the 11-point floor.ServiceNow Integrated Risk Management leads at 25%, replacing MetricStream, which led at 24% and stands at 15% now: 10 points clear, inside the floor, so the swap reads as unsettled.
By buyer segment
The same question asked on behalf of a different buyer. Each standing is computed within its segment; they sit side by side and are never added together.
Small business
Vanta30%Contested=heldSince October 2026: 30% → 30%, ±0 points. Inside the 11-point floor: within noise.Standing →Mid-market
Hyperproof22%Contested▲+3Since October 2026: 19% → 22%, +3 points. Inside the 11-point floor: within noise.Standing →Enterprise
ServiceNow Integrated Risk Management25%Contested↗new leaderNew leader since October 2026: ServiceNow Integrated Risk Management (25%) replaces MetricStream (24% then, 15% now), 10 points clear, inside the 11-point floor.This page
Vanta30%Contested=heldSince October 2026: 30% → 30%, ±0 points. Inside the 11-point floor: within noise.Standing →Mid-marketHyperproof22%Contested▲+3Since October 2026: 19% → 22%, +3 points. Inside the 11-point floor: within noise.Standing →EnterpriseServiceNow Integrated Risk Management25%Contested↗new leaderNew leader since October 2026: ServiceNow Integrated Risk Management (25%) replaces MetricStream (24% then, 15% now), 10 points clear, inside the 11-point floor.This pageThe standing
Share is the count of first choices across the direct, paraphrase, budget and scale prompts, over all fourteen models, for an enterprise B2B company. Ordered by share.
ProductFirst-choice shareNegative rateLabelsQuadrantSince October 2026
01ServiceNow Integrated Risk Management25%28%69criticized challenger▲+13Since October 2026: 12% → 25%, +13 points. Past the 11-point floor: movement.12% → 25%
ServiceNow Integrated Risk Management25%28%69criticized challenger▲+13Since October 2026: 12% → 25%, +13 points. Past the 11-point floor: movement.12% → 25%02
MetricStream15%25%67criticized challenger▼−9Since October 2026: 24% → 15%, −9 points. Inside the 11-point floor: within noise.24% → 15%
MetricStream15%25%67criticized challenger▼−9Since October 2026: 24% → 15%, −9 points. Inside the 11-point floor: within noise.24% → 15%03
Centraleyes10%0%11accepted challenger▲+10Since October 2026: 0% → 10%, +10 points. Inside the 11-point floor: within noise.0% → 10%
Centraleyes10%0%11accepted challenger▲+10Since October 2026: 0% → 10%, +10 points. Inside the 11-point floor: within noise.0% → 10%04
IBM OpenPages8%19%31accepted challenger▲+6Since October 2026: 2% → 8%, +6 points. Inside the 11-point floor: within noise.2% → 8%
IBM OpenPages8%19%31accepted challenger▲+6Since October 2026: 2% → 8%, +6 points. Inside the 11-point floor: within noise.2% → 8%05
Archer7%39%56criticized challenger▲+5Since October 2026: 2% → 7%, +5 points. Inside the 11-point floor: within noise.2% → 7%
Archer7%39%56criticized challenger▲+5Since October 2026: 2% → 7%, +5 points. Inside the 11-point floor: within noise.2% → 7%06Vanta5%33%24criticized challenger▼−3Since October 2026: 8% → 5%, −3 points. Inside the 11-point floor: within noise.8% → 5%
Vanta5%33%24criticized challenger▼−3Since October 2026: 8% → 5%, −3 points. Inside the 11-point floor: within noise.8% → 5%07
Drata5%35%23criticized challenger▼−1Since October 2026: 6% → 5%, −1 point. Inside the 11-point floor: within noise.6% → 5%
Drata5%35%23criticized challenger▼−1Since October 2026: 6% → 5%, −1 point. Inside the 11-point floor: within noise.6% → 5%08
LogicGate Risk Cloud3%0%15accepted challenger▲+3Since October 2026: 0% → 3%, +3 points. Inside the 11-point floor: within noise.0% → 3%
LogicGate Risk Cloud3%0%15accepted challenger▲+3Since October 2026: 0% → 3%, +3 points. Inside the 11-point floor: within noise.0% → 3%09
LogicGate3%11%19accepted challenger▲+1Since October 2026: 2% → 3%, +1 point. Inside the 11-point floor: within noise.2% → 3%
LogicGate3%11%19accepted challenger▲+1Since October 2026: 2% → 3%, +1 point. Inside the 11-point floor: within noise.2% → 3%10
Optro2%0%25accepted challenger=heldSince October 2026: 2% → 2%, ±0 points. Inside the 11-point floor: within noise.2% → 2%
Optro2%0%25accepted challenger=heldSince October 2026: 2% → 2%, ±0 points. Inside the 11-point floor: within noise.2% → 2%11
AuditBoard2%9%23accepted challenger=heldSince October 2026: 2% → 2%, ±0 points. Inside the 11-point floor: within noise.2% → 2%
AuditBoard2%9%23accepted challenger=heldSince October 2026: 2% → 2%, ±0 points. Inside the 11-point floor: within noise.2% → 2%12
Diligent One2%0%14accepted challenger▲+2Since October 2026: 0% → 2%, +2 points. Inside the 11-point floor: within noise.0% → 2%
Diligent One2%0%14accepted challenger▲+2Since October 2026: 0% → 2%, +2 points. Inside the 11-point floor: within noise.0% → 2%Show the three products at 0%, ordered by negative rate
13
OneTrust GRC0%19%37accepted challenger▼−6Since October 2026: 6% → 0%, −6 points. Inside the 11-point floor: within noise.6% → 0%
OneTrust GRC0%19%37accepted challenger▼−6Since October 2026: 6% → 0%, −6 points. Inside the 11-point floor: within noise.6% → 0%14
Riskonnect0%15%13accepted challenger▼−4Since October 2026: 4% → 0%, −4 points. Inside the 11-point floor: within noise.4% → 0%
Riskonnect0%15%13accepted challenger▼−4Since October 2026: 4% → 0%, −4 points. Inside the 11-point floor: within noise.4% → 0%15
Workiva0%8%12accepted challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%
Workiva0%8%12accepted challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%The floor is 11 points of share, measured: how far the models move a leader on their own when the same questions are asked twice with nothing changed. A larger change is movement; a smaller one can't be told apart from repeat variation, and both are shown. Each index measures its own floor from its own repeat, over its own categories, so the floor differs from one index to the next. Both editions asked the same fourteen models. How the floor is measured
Bars are the share of first choices, 0 to 100Every product with at least 10 labels here. Every product name links to its product page.
For buyers
Head to headHead-to-head pages are published for mid-market buyers, so these open on mid-market figures, not enterprise.
All twenty-eight head-to-head pages: the top eight products, each against each
Hyperproof vs DrataHyperproof vs LogicGateHyperproof vs CompylHyperproof vs OnspringVanta vs LogicGate Risk CloudVanta vs SprintoVanta vs DrataVanta vs LogicGateVanta vs CompylVanta vs OnspringLogicGate Risk Cloud vs SprintoLogicGate Risk Cloud vs DrataLogicGate Risk Cloud vs LogicGateLogicGate Risk Cloud vs CompylLogicGate Risk Cloud vs OnspringSprinto vs DrataSprinto vs LogicGateSprinto vs CompylSprinto vs OnspringDrata vs LogicGateDrata vs CompylDrata vs OnspringLogicGate vs CompylLogicGate vs OnspringCompyl vs Onspring
Recommended versus criticized
Every product with at least 10 labels here, on both axes. The 30% line names a quadrant, not the verdict above: that one needs more than 40%.
Criticized challengerCriticized default
Negative label rate →
010203040506070809101112131415Accepted challengerEndorsed leader
0%First-choice share → · lines at 30% share and 25% negative40%
Key
01ServiceNow Integrated Risk Management25%
ServiceNow Integrated Risk Management25%02MetricStream15%
MetricStream15%03Centraleyes10%
Centraleyes10%04IBM OpenPages8%
IBM OpenPages8%05Archer7%
Archer7%06Vanta5%
Vanta5%07Drata5%
Drata5%08LogicGate Risk Cloud3%
LogicGate Risk Cloud3%09LogicGate3%
LogicGate3%10Optro2%
Optro2%11AuditBoard2%
AuditBoard2%12Diligent One2%
Diligent One2%13OneTrust GRC0%
OneTrust GRC0%14Riskonnect0%
Riskonnect0%15Workiva0%
Workiva0%What they warned about
One of fourteen models held their first choice under the paraphrase. Claude Haiku 4.5, Gemini 3.5 Flash, Perplexity Sonar, Grok 4.20, Mistral Small, DeepSeek V4 Flash, Llama 4 Maverick, Qwen 3.7 Flash, Kimi K2, GLM 4.7 FlashX, MiniMax M2.5, GPT-6 Luna and Muse Glimmer 30B changed. A high negative share on a product with few labels is a warning. A low share on a product with many labels is salience, not sentiment.
Archer39%
22 of 56 labels negative · 11 of 14 models · 6 hard negative
“Long, complex, costly implementations with configuration changes often requiring technical support and restricted data sharing and reporting” Claude Haiku 4.5, negative prompt
MetricStream25%
17 of 67 labels negative · 11 of 14 models · 3 hard negative
“MetricStream — Can exceed $750K–$1M+ annually for large enterprises; opaque pricing.” DeepSeek V4 Flash, budget prompt
ServiceNow Integrated Risk Management28%
19 of 69 labels negative · 11 of 14 models · 3 hard negative
“Organizations report turning off ServiceNow for GRC entirely and returning to manual processes while seeking alternatives.” MiniMax M2.5, negative prompt
Drata35%
8 of 23 labels negative · 6 of 14 models · 3 hard negative
“"Compliance Automation" Tools (e.g., Vanta, Drata, Scytale) ... large enterprises often find them insufficient as a primary governance solution” Qwen 3.7 Flash, negative prompt
What they cite
Fourteen of the fourteen models returned a source list in this edition: five return the pages they cited and nine the search results they consulted.
Sites the answers cite
75 of 84 answers in this category came back with a source list, from 14 of 14 models: citations where the model returns them, or the search results it consulted. 875 links across 219 sites, every framing counted. Ranked by the number of answers carrying the site or page. 20 of the 252 answers across every segment cited this index's own page for the category; the method page measures whether that reading tilts an answer.
vendor site · RiskWatch26 answers · 29 citations · 11 models
25 answers · 26 citations · 9 models
vendor site · MetricStream22 answers · 30 citations · 11 models
vendor site · SureCloud21 answers · 30 citations · 9 models
17 answers · 18 citations · 10 models
vendor site · Vanta16 answers · 18 citations · 8 models
vendor site · G215 answers · 22 citations · 8 models
15 answers · 19 citations · 8 models
15 answers · 15 citations · 6 models
vendor site · Sprinto15 answers · 15 citations · 9 models
vendor site · ServiceNow14 answers · 17 citations · 6 models
vendor site · LinkedIn12 answers · 20 citations · 6 models
Pages the answers cite
The ten pages named in the most answers, by full address. A page here is one the models returned with a recommendation, not one the index endorses.
24 answers · 9 models
20 answers · 10 models
16 answers · 10 models
15 answers · 6 models
14 answers · 8 models
11 answers · 7 models
11 answers · 11 models
10 answers · 7 models
10 answers · 7 models
10 answers · 7 models
Search against answers
Each company's standing in the answers beside its site's footprint in Google search, one row a site: the products the models named on it with their shares, and the share they add up to; monthly searches on Google, and DataForSEO's estimate of AI search demand (modeled from search signals, directional, not a count of queries to any assistant), for the most-searched of the company's and its products' names (the name is in each row's hover text); estimated monthly organic visits to the site; and its best position in Google's top ten for “best grc platform”, “grc platform”, “grc platforms”. US estimates from DataForSEO and Google's Ads Transparency Center. A small company's site, or a mid-sized company's site for its flagship, is marked company; a product on a large parent's site (Google, Microsoft) has no site figures. A column with no figures for this category is left out, and an empty cell means none were seen, not none exist. Two measurements side by side: neither is read as the cause of the other.
| Company and products | Share | Own site cited | Name searches, Google | AI search demand, est. | Organic visits | Paid search a month, est. | Google ads, last 30 days | Best Google position |
|---|---|---|---|---|---|---|---|---|
| ServiceNow parent site ServiceNow Integrated Risk Management 25% | 25% | 200 | 135,000 | 13,451 | ||||
| MetricStream metricstream.com | 15% | 199 | 1,000 | 35 | 94,301 | $211 | 8 | 3 |
| Centraleyes centraleyes.com | 10% | 42 | ||||||
| IBM parent site IBM OpenPages 8% | 8% | 68 | 201,000 | 34,098 | ||||
| Archer archerirm.com | 7% | 251 | 165,000 | 33,983 | 4,603 | 9 | ||
| ZenGRC zengrc.com | 5% | 23 | 480 | 4 | 29,603 | 9 | ||
| Vanta vanta.com | 5% | 381 | 40,500 | 1,219 | 72,260 | 120 | ||
| Drata drata.com | 5% | 368 | 9,900 | 257 | 36,413 | 54 | ||
| LogicGate Risk Cloud logicgate.com | 3% | 58 | 170 | 2 | 15,071 | 0 | ||
| LogicGate logicgate.ai | 3% | 118 | 18,100 | 70 | 421 | 31 |
Google's top ten for the three searches hold 20 sites; 1 of them are among the sites the models cited here (metricstream.com). The first result for “best grc platform” is reddit.com.
How they answered
Six framings of the same buying question, each sent to every model in a fresh session with search on. One row per model, so a row shows whether it held its answer under rewording, what it named when cost was the constraint, and what it argued against. Computed from the raw judge labels.ShowHide
How they answered
Six framings of the same buying question, each sent to every model in a fresh session with search on. One row per model, so a row shows whether it held its answer under rewording, what it named when cost was the constraint, and what it argued against. Computed from the raw judge labels.
ShowHideModelDirect“What is the best GRC platform for an enterprise B2B company?”Paraphrase“Which governance, risk and compliance tool would you recommend to a large B2B company with thousands of employees?”Comparative“What are the top enterprise-grade GRC platforms and how do they differ?”Budget-constrained“What is the best GRC platform for a large company that needs predictable total cost across thousands of users?”Scale-constrained“We are a 5,000 person company with SSO, SOC 2 and procurement review requirements evaluating a GRC platform. What should we look at?”Negative“Which GRC platforms should a large enterprise avoid or be cautious about?”
Claude Haiku 4.5MetricStreamno first choiceChangedno first choiceCentraleyes, ZenGRCagainst: MetricStream, Riskonnectno first choiceagainst: Archer, LogicManager, OneTrust GRC, Sprinto
Four alternatives
AuditBoard, Centraleyes, LogicGate, VantaSix alternatives
Archer, AuditBoard, Diligent One, MetricStream, OneTrust GRC, ServiceNow Integrated Risk ManagementGPT-5.4 miniServiceNow Integrated Risk ManagementServiceNow Integrated Risk ManagementHeldno first choiceServiceNow Integrated Risk Managementno first choicenothing named
Three alternatives
Diligent One, IBM OpenPages, MetricStreamTwo alternatives
MetricStream, OneTrust GRCSix alternatives
Archer, Diligent One, IBM OpenPages, MetricStream, SAP GRC, ServiceNow Integrated Risk ManagementThree alternatives
Diligent One, MetricStream, NAVEX OneGemini 3.5 FlashDrata, Vantaagainst: Archer, IBM OpenPages, MetricStreamServiceNow Integrated Risk ManagementChangedServiceNow Integrated Risk ManagementAuditBoard, LogicGateagainst: ServiceNow Integrated Risk ManagementHyperproofagainst: Archer, OneTrust GRC, ServiceNow Integrated Risk Managementagainst: Archer, Drata, MetricStream, OneTrust GRC, Secureframe, ServiceNow Integrated Risk Management, Sprinto, Vanta
Four alternatives
Hyperproof, OneTrust GRC, Optro, ServiceNow Integrated Risk ManagementFour alternatives
AuditBoard, LogicGate Risk Cloud, MetricStream, OneTrust GRCFive alternatives
Archer, AuditBoard, IBM OpenPages, MetricStream, OneTrust GRCOne alternative
MetricStreamSix alternatives
Anecdotes, AuditBoard, Drata, LogicGate, Riskonnect, VantaPerplexity SonarServiceNow Integrated Risk ManagementMetricStreamChangedServiceNow Integrated Risk Managementagainst: Drata, Secureframe, VantaLogicGateagainst: ServiceNow Integrated Risk Managementno first choiceagainst: Archer, Drata, IBM OpenPages, MetricStream, OneTrust GRC, SAP GRC, Secureframe, ServiceNow Integrated Risk Management, Sprinto, Vanta
Eight alternatives
AuditBoard, Drata, Hyperproof, LogicGate Risk Cloud, MetricStream, OneTrust GRC, Optro, VantaThree alternatives
Archer, IBM OpenPages, ServiceNow Integrated Risk ManagementEight alternatives
Archer, IBM OpenPages, MetricStream, OneTrust GRC, Optro, Riskonnect, SAP GRC, WorkivaOne alternative
MetricStreamGrok 4.20Archer, ServiceNow Integrated Risk Managementagainst: Drata, Oneleet, VantaServiceNow Integrated Risk ManagementChangedMetricStream, ServiceNow Integrated Risk ManagementMetricStreamagainst: Archer, AuditBoard, Hyperproof, LogicGate, OneTrust GRC, WorkivaLogicGate Risk Cloudagainst: Archer, IBM OpenPages, MetricStream, ServiceNow Integrated Risk Managementagainst: Archer, Drata, Galvanize, MetricStream, NAVEX One, ServiceNow Integrated Risk Management, Vanta
Two alternatives
MetricStream, OneTrust GRCFour alternatives
AuditBoard, MetricStream, OneTrust GRC, WorkivaFive alternatives
Archer, AuditBoard, IBM OpenPages, LogicGate Risk Cloud, OneTrust GRCOne alternative
ServiceNow Integrated Risk ManagementEight alternatives
Drata, Optro, Resolver, RiskWatch, Secureframe, Sprinto, StandardFusion, VantaMistral SmallIBM OpenPages, MetricStream, ServiceNow Integrated Risk ManagementArcher, IBM OpenPagesChangedServiceNow Integrated Risk ManagementMetricStreamno first choiceagainst: Archer, MetricStream, ServiceNow Integrated Risk Management
Three alternatives
Centraleyes, OneTrust GRC, OptroThree alternatives
MetricStream, OneTrust GRC, ServiceNow Integrated Risk ManagementEight alternatives
Archer Evolv, Diligent One, IBM OpenPages, LogicGate Risk Cloud, MetricStream, OneTrust GRC, Optro, WorkivaOne alternative
ServiceNow Integrated Risk ManagementFour alternatives
Archer, OneTrust GRC, ServiceNow Integrated Risk Management, ZenGRCDeepSeek V4 FlashMetricStreamIBM OpenPages, ServiceNow Integrated Risk ManagementChangedno first choiceZenGRCagainst: Archer, GRCxAI, MetricStream, ServiceNow Integrated Risk Managementno first choiceagainst: Archer, MetricStreamagainst: ARIS, Archer, CURA, MetricStream, QSEC, ServiceNow Integrated Risk Management
Five alternatives
Archer, Diligent One, Optro, ServiceNow Integrated Risk Management, VantaThree alternatives
Archer, Diligent One, MetricStreamEight alternatives
Archer, Diligent One, IBM OpenPages, LogicGate Risk Cloud, MetricStream, OneTrust GRC, Optro, ServiceNow Integrated Risk ManagementThree alternatives
6clicks, Centraleyes, Diligent OneFive alternatives
AuditBoard, Drata, Optro, ServiceNow Integrated Risk Management, VantaLlama 4 MaverickCentraleyes, MetricStreamMetricStreamChangedno first choiceno first choiceno first choiceagainst: MetricStream, Orbiq, Riskonnect, ServiceNow Integrated Risk Management, SureCloud
One alternative
ServiceNow Integrated Risk ManagementQwen 3.7 FlashDrata, VantaServiceNow Integrated Risk ManagementChangedServiceNow Integrated Risk Managementagainst: ArcherCentraleyesagainst: Archer, MetricStream, ServiceNow Integrated Risk Managementno first choiceagainst: Drata, IBM OpenPages, MetricStream, Scytale, ServiceNow Integrated Risk Management, Vanta
Five alternatives
Archer, AuditBoard, MetricStream, OneTrust GRC, ServiceNow Integrated Risk ManagementThree alternatives
LogicGate Real-Time Risk, MetricStream, OneTrust GRCFive alternatives
AuditBoard, IBM OpenPages, LogicGate Risk Cloud, MetricStream, OneTrust GRCFour alternatives
Euraika, LogicGate, OneTrust GRC, SimpleRiskKimi K2LogicGate Risk CloudServiceNow Integrated Risk ManagementChangedagainst: ArcherServiceNow Integrated Risk ManagementIBM OpenPagesagainst: Archer, MetricStream, ServiceNow Integrated Risk Managementno first choiceagainst: LogicGateagainst: Archer, Drata, IBM OpenPages, OneTrust GRC, ServiceNow Integrated Risk Management, Sprinto, Vanta
Five alternatives
Archer, MetricStream, OneTrust GRC, Optro, ServiceNow Integrated Risk ManagementFour alternatives
IBM OpenPages, MetricStream, OneTrust GRC, OptroFive alternatives
Archer, AuditBoard, IBM OpenPages, MetricStream, OneTrust GRCTwo alternatives
Aravo, AuditBoardFour alternatives
IBM OpenPages, MetricStream, Optro, ServiceNow Integrated Risk ManagementGLM 4.7 FlashXIBM OpenPagesCentraleyes, ServiceNow Integrated Risk ManagementChangedServiceNow Integrated Risk ManagementCentraleyesagainst: ServiceNow GRC Suiteno first choicenothing named
Four alternatives
LogicGate, MetricStream, Optro, ServiceNow Integrated Risk ManagementSix alternatives
Archer, IBM OpenPages, MetricStream, NAVEX One, Onspring, ResolverFive alternatives
Archer, LogicGate, MetricStream, OneTrust GRC, OptroOne alternative
ErambaMiniMax M2.5Diligent One, IBM OpenPages with watsonx.governanceArcher, ServiceNow Integrated Risk ManagementChangedno first choiceagainst: ArcherZenGRCagainst: AuditBoardDrata, Secureframe, Vantaagainst: Archer, SAP GRC, ServiceNow Integrated Risk Management
Four alternatives
Archer, AuditBoard, ServiceNow Integrated Risk Management, VantaOne alternative
SAP GRCTwo alternatives
MetricStream, ServiceNow Integrated Risk ManagementFour alternatives
Archer, MetricStream, OneTrust GRC, ServiceNow Integrated Risk ManagementGPT-6 LunaOptroArcherChangedno first choice6clicksServiceNow Integrated Risk Managementagainst: Archer, Drata, IBM OpenPages, MetricStream, ServiceNow Integrated Risk Management, Vanta
Three alternatives
Drata, ServiceNow Integrated Risk Management, VantaTwo alternatives
MetricStream, ServiceNow Integrated Risk ManagementSeven alternatives
Archer, Diligent One, IBM OpenPages, MetricStream Connected GRC, OneTrust GRC, Optro, ServiceNow Integrated Risk ManagementTwo alternatives
ServiceNow Integrated Risk Management, SimpleRiskFive alternatives
Archer, Drata, Hyperproof, LogicGate Risk Cloud, OptroMuse Glimmer 30BServiceNow Integrated Risk ManagementMetricStreamChangedagainst: OneTrust GRC, SAP GRCno first choiceCentraleyesagainst: ACL GRC, Archer, MetricStream, SAP GRCno first choiceagainst: Archer, Compliance Manager GRC, MetricStream, ServiceNow Integrated Risk Management
Five alternatives
Archer, Archer Evolv, LogicGate Risk Cloud, OneTrust GRC, OptroOne alternative
ServiceNow Integrated Risk ManagementNine alternatives
Archer, Centraleyes, Diligent One, IBM OpenPages, LogicGate Risk Cloud, MetricStream, OneTrust GRC, Optro, ServiceNow Integrated Risk Management, IRMTwo alternatives
GRCxAI, ezGRCBold is the first choiceAlternatives are counted; the count opens them.What the answer argued against
The record
One row per call: the version string exactly as returned, whether the model searched, sources cited, and latency.
Eighty-four rows: every prompt, every model, every answer.
| Prompt | Model | Version string | Time (UTC) | Searched | Sources | Latency |
|---|---|---|---|---|---|---|
| Direct recommendation | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 11:59 | yes | 10 | 8 s |
| Direct recommendation | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 11:40 | yes | 4 | 6 s |
| Direct recommendation | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 17:21 | yes | 11 | 21 s |
| Direct recommendation | Perplexity Sonar | sonar | 2026-11-01 19:10 | yes | 10 | 4 s |
| Direct recommendation | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 18:19 | yes | 10 | 14 s |
| Direct recommendation | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 18:55 | yes | 5 | 5 s |
| Direct recommendation | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 12:00 | yes | 24 | 29 s |
| Direct recommendation | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 10:19 | yes | 5 | 3 s |
| Direct recommendation | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 10:00 | no | 0 | 28 s |
| Direct recommendation | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 12:52 | yes | 10 | 25 s |
| Direct recommendation | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 10:06 | yes | 14 | 54 s |
| Direct recommendation | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 19:23 | yes | 10 | 33 s |
| Direct recommendation | GPT-6 Luna | gpt-6-luna | 2026-11-01 12:21 | yes | 2 | 13 s |
| Direct recommendation | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 19:24 | yes | 14 | 22 s |
| Paraphrase | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 16:46 | no | 0 | 5 s |
| Paraphrase | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 14:29 | yes | 2 | 5 s |
| Paraphrase | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 10:56 | no | 0 | 15 s |
| Paraphrase | Perplexity Sonar | sonar | 2026-11-01 09:34 | yes | 10 | 4 s |
| Paraphrase | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 18:26 | yes | 5 | 8 s |
| Paraphrase | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 18:26 | yes | 5 | 5 s |
| Paraphrase | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 12:18 | yes | 25 | 27 s |
| Paraphrase | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 11:30 | yes | 5 | 2 s |
| Paraphrase | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 10:42 | yes | 5 | 25 s |
| Paraphrase | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 10:15 | yes | 15 | 19 s |
| Paraphrase | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 15:27 | yes | 9 | 42 s |
| Paraphrase | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 12:33 | no | 0 | 17 s |
| Paraphrase | GPT-6 Luna | gpt-6-luna | 2026-11-01 09:22 | yes | 3 | 11 s |
| Paraphrase | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 17:24 | yes | 14 | 20 s |
| Comparative | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 10:34 | yes | 10 | 8 s |
| Comparative | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 11:04 | yes | 4 | 10 s |
| Comparative | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 09:27 | no | 0 | 21 s |
| Comparative | Perplexity Sonar | sonar | 2026-11-01 18:31 | yes | 10 | 8 s |
| Comparative | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 19:02 | yes | 5 | 15 s |
| Comparative | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 08:35 | yes | 8 | 12 s |
| Comparative | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 14:08 | yes | 23 | 47 s |
| Comparative | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 09:43 | yes | 5 | 3 s |
| Comparative | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 11:47 | yes | 5 | 31 s |
| Comparative | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 10:57 | yes | 15 | 29 s |
| Comparative | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 08:40 | yes | 22 | 101 s |
| Comparative | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 15:40 | yes | 15 | 55 s |
| Comparative | GPT-6 Luna | gpt-6-luna | 2026-11-01 16:53 | yes | 8 | 17 s |
| Comparative | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 09:49 | yes | 20 | 36 s |
| Budget constrained | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 08:43 | yes | 18 | 11 s |
| Budget constrained | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 11:19 | yes | 5 | 5 s |
| Budget constrained | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 12:09 | yes | 13 | 21 s |
| Budget constrained | Perplexity Sonar | sonar | 2026-11-01 09:16 | yes | 10 | 3 s |
| Budget constrained | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 14:20 | yes | 14 | 14 s |
| Budget constrained | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 18:00 | yes | 5 | 7 s |
| Budget constrained | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 18:15 | yes | 23 | 39 s |
| Budget constrained | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 18:00 | yes | 5 | 4 s |
| Budget constrained | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 13:57 | yes | 10 | 30 s |
| Budget constrained | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 14:26 | yes | 24 | 30 s |
| Budget constrained | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 19:12 | yes | 22 | 24 s |
| Budget constrained | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 11:03 | yes | 24 | 69 s |
| Budget constrained | GPT-6 Luna | gpt-6-luna | 2026-11-01 11:44 | yes | 3 | 17 s |
| Budget constrained | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 14:52 | yes | 11 | 20 s |
| Scale constrained | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 17:00 | yes | 17 | 14 s |
| Scale constrained | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 11:13 | yes | 5 | 8 s |
| Scale constrained | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 12:37 | no | 0 | 26 s |
| Scale constrained | Perplexity Sonar | sonar | 2026-11-01 09:44 | yes | 10 | 9 s |
| Scale constrained | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 14:40 | yes | 15 | 18 s |
| Scale constrained | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 12:54 | no | 0 | 12 s |
| Scale constrained | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 11:22 | yes | 25 | 45 s |
| Scale constrained | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 14:35 | yes | 5 | 3 s |
| Scale constrained | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 15:47 | no | 0 | 29 s |
| Scale constrained | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 13:31 | yes | 13 | 26 s |
| Scale constrained | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 13:08 | yes | 22 | 45 s |
| Scale constrained | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 13:58 | no | 0 | 19 s |
| Scale constrained | GPT-6 Luna | gpt-6-luna | 2026-11-01 17:48 | yes | 5 | 24 s |
| Scale constrained | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 10:56 | yes | 14 | 28 s |
| Negative framing | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 09:25 | yes | 16 | 10 s |
| Negative framing | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 10:53 | yes | 4 | 6 s |
| Negative framing | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 18:55 | yes | 12 | 28 s |
| Negative framing | Perplexity Sonar | sonar | 2026-11-01 11:14 | yes | 10 | 5 s |
| Negative framing | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 15:41 | yes | 9 | 14 s |
| Negative framing | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 16:53 | yes | 5 | 4 s |
| Negative framing | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 13:19 | yes | 25 | 39 s |
| Negative framing | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 13:03 | yes | 5 | 3 s |
| Negative framing | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 12:28 | yes | 5 | 32 s |
| Negative framing | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 12:16 | yes | 25 | 25 s |
| Negative framing | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 18:18 | yes | 24 | 74 s |
| Negative framing | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 18:28 | yes | 20 | 44 s |
| Negative framing | GPT-6 Luna | gpt-6-luna | 2026-11-01 15:40 | yes | 5 | 25 s |
| Negative framing | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 11:00 | yes | 15 | 25 s |
Normalization in this category
Every judgment call made between the raw labels and the numbers above, listed so it is visible and reversible.
ShowHide
Category-scoped readings
Diligent read as Diligent One
Diligent (One Platform) read as Diligent One
IBM read as IBM OpenPages
IBM OpenPages with Watsonx read as IBM OpenPages
IBM OpenPages with watsonx read as IBM OpenPages
NAVEX read as NAVEX One
OneTrust read as OneTrust GRC
SAP read as SAP GRC
ServiceNow read as ServiceNow Integrated Risk Management
Unresolved, counted raw
Euraika
IBM OpenPages with watsonx.governance
MetricStream Connected GRC
QSEC (now Nexis)
ServiceNow GRC Suite
ServiceNow Integrated Risk Management, IRM
ezGRC
Discontinued, still offered
No shut-down product was recommended here.