GRC platforms for small business buyers
Asked as “GRC platform”, and as “governance, risk and compliance tool”, on behalf of a small B2B company. 69 first choices recorded across the direct, paraphrase, budget and scale prompts, fourteen models each.
Standing · first-choice share
30%
Contested · Drata 13%
30Vanta13Drata13Sprinto43others
30% of first choices, contested.
Since October 2026=heldSince October 2026: 30% → 30%, ±0 points. Inside the 11-point floor: within noise.Vanta held the lead, ±0 points on 30%, inside the 11-point floor.
By buyer segment
The same question asked on behalf of a different buyer. Each standing is computed within its segment; they sit side by side and are never added together.
Small business
Vanta30%Contested=heldSince October 2026: 30% → 30%, ±0 points. Inside the 11-point floor: within noise.This pageMid-market
Hyperproof22%Contested▲+3Since October 2026: 19% → 22%, +3 points. Inside the 11-point floor: within noise.Standing →Enterprise
ServiceNow Integrated Risk Management25%Contested↗new leaderNew leader since October 2026: ServiceNow Integrated Risk Management (25%) replaces MetricStream (24% then, 15% now), 10 points clear, inside the 11-point floor.Standing →
Vanta30%Contested=heldSince October 2026: 30% → 30%, ±0 points. Inside the 11-point floor: within noise.This pageMid-marketHyperproof22%Contested▲+3Since October 2026: 19% → 22%, +3 points. Inside the 11-point floor: within noise.Standing →EnterpriseServiceNow Integrated Risk Management25%Contested↗new leaderNew leader since October 2026: ServiceNow Integrated Risk Management (25%) replaces MetricStream (24% then, 15% now), 10 points clear, inside the 11-point floor.Standing →The standing
Share is the count of first choices across the direct, paraphrase, budget and scale prompts, over all fourteen models, for a small B2B company. Ordered by share.
ProductFirst-choice shareNegative rateLabelsQuadrantSince October 2026
01Vanta30%11%62endorsed leader=heldSince October 2026: 30% → 30%, ±0 points. Inside the 11-point floor: within noise.30% → 30%
Vanta30%11%62endorsed leader=heldSince October 2026: 30% → 30%, ±0 points. Inside the 11-point floor: within noise.30% → 30%02
Sprinto13%6%47accepted challenger▼−5Since October 2026: 18% → 13%, −5 points. Inside the 11-point floor: within noise.18% → 13%
Sprinto13%6%47accepted challenger▼−5Since October 2026: 18% → 13%, −5 points. Inside the 11-point floor: within noise.18% → 13%03
Drata13%16%57accepted challenger▼−3Since October 2026: 16% → 13%, −3 points. Inside the 11-point floor: within noise.16% → 13%
Drata13%16%57accepted challenger▼−3Since October 2026: 16% → 13%, −3 points. Inside the 11-point floor: within noise.16% → 13%04
Secureframe7%5%42accepted challenger=heldSince October 2026: 7% → 7%, ±0 points. Inside the 11-point floor: within noise.7% → 7%
Secureframe7%5%42accepted challenger=heldSince October 2026: 7% → 7%, ±0 points. Inside the 11-point floor: within noise.7% → 7%05
SimpleRisk7%7%15accepted challenger▼−1Since October 2026: 8% → 7%, −1 point. Inside the 11-point floor: within noise.8% → 7%
SimpleRisk7%7%15accepted challenger▼−1Since October 2026: 8% → 7%, −1 point. Inside the 11-point floor: within noise.8% → 7%06
Scrut Automation4%0%28accepted challenger▲+1Since October 2026: 3% → 4%, +1 point. Inside the 11-point floor: within noise.3% → 4%
Scrut Automation4%0%28accepted challenger▲+1Since October 2026: 3% → 4%, +1 point. Inside the 11-point floor: within noise.3% → 4%07
Onspring4%12%33accepted challenger▲+4Since October 2026: 0% → 4%, +4 points. Inside the 11-point floor: within noise.0% → 4%
Onspring4%12%33accepted challenger▲+4Since October 2026: 0% → 4%, +4 points. Inside the 11-point floor: within noise.0% → 4%08
Ethicontrol4%0%15accepted challenger▲+4Since October 2026: 0% → 4%, +4 points. Inside the 11-point floor: within noise.0% → 4%
Ethicontrol4%0%15accepted challenger▲+4Since October 2026: 0% → 4%, +4 points. Inside the 11-point floor: within noise.0% → 4%10Hyperproof1%11%19accepted challenger▲+1Since October 2026: 0% → 1%, +1 point. Inside the 11-point floor: within noise.0% → 1%
Hyperproof1%11%19accepted challenger▲+1Since October 2026: 0% → 1%, +1 point. Inside the 11-point floor: within noise.0% → 1%11
Eramba1%15%13accepted challenger▼−1Since October 2026: 2% → 1%, −1 point. Inside the 11-point floor: within noise.2% → 1%
Eramba1%15%13accepted challenger▼−1Since October 2026: 2% → 1%, −1 point. Inside the 11-point floor: within noise.2% → 1%Show the five products at 0%, ordered by negative rate
15
Archer0%93%30criticized challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%
Archer0%93%30criticized challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%14
MetricStream0%93%29criticized challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%
MetricStream0%93%29criticized challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%16ServiceNow Integrated Risk Management0%91%35criticized challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%
ServiceNow Integrated Risk Management0%91%35criticized challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%13
OneTrust GRC0%84%19criticized challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%
OneTrust GRC0%84%19criticized challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%12
LogicGate0%50%12criticized challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%
LogicGate0%50%12criticized challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%The floor is 11 points of share, measured: how far the models move a leader on their own when the same questions are asked twice with nothing changed. A larger change is movement; a smaller one can't be told apart from repeat variation, and both are shown. Each index measures its own floor from its own repeat, over its own categories, so the floor differs from one index to the next. Both editions asked the same fourteen models. How the floor is measured
Bars are the share of first choices, 0 to 100Every product with at least 10 labels here. Every product name links to its product page.
For buyers
Head to headHead-to-head pages are published for mid-market buyers, so these open on mid-market figures, not small business.
All twenty-eight head-to-head pages: the top eight products, each against each
Hyperproof vs DrataHyperproof vs LogicGateHyperproof vs CompylHyperproof vs OnspringVanta vs LogicGate Risk CloudVanta vs SprintoVanta vs DrataVanta vs LogicGateVanta vs CompylVanta vs OnspringLogicGate Risk Cloud vs SprintoLogicGate Risk Cloud vs DrataLogicGate Risk Cloud vs LogicGateLogicGate Risk Cloud vs CompylLogicGate Risk Cloud vs OnspringSprinto vs DrataSprinto vs LogicGateSprinto vs CompylSprinto vs OnspringDrata vs LogicGateDrata vs CompylDrata vs OnspringLogicGate vs CompylLogicGate vs OnspringCompyl vs Onspring
Recommended versus criticized
Every product with at least 10 labels here, on both axes. The 30% line names a quadrant, not the verdict above: that one needs more than 40%.
Criticized challengerCriticized default
Negative label rate →
0102030405060708
0910111213141516Accepted challengerEndorsed leader
0%First-choice share → · lines at 30% share and 25% negative50%
Key
01Vanta30%
Vanta30%02Sprinto13%
Sprinto13%03Drata13%
Drata13%04Secureframe7%
Secureframe7%05SimpleRisk7%
SimpleRisk7%06Scrut Automation4%
Scrut Automation4%07Onspring4%
Onspring4%08Ethicontrol4%
Ethicontrol4%09AdaptiveGRC4%
AdaptiveGRC4%10Hyperproof1%
Hyperproof1%11Eramba1%
Eramba1%12LogicGate0%
LogicGate0%13OneTrust GRC0%
OneTrust GRC0%14MetricStream0%
MetricStream0%15Archer0%
Archer0%16ServiceNow Integrated Risk Management0%
ServiceNow Integrated Risk Management0%What they warned about
Five of fourteen models held their first choice under the paraphrase. Claude Haiku 4.5, GPT-5.4 mini, Mistral Small, Llama 4 Maverick, Qwen 3.7 Flash, Kimi K2, GLM 4.7 FlashX, MiniMax M2.5 and GPT-6 Luna changed. A high negative share on a product with few labels is a warning. A low share on a product with many labels is salience, not sentiment.
ServiceNow Integrated Risk Management91%
32 of 35 labels negative · 13 of 14 models · 20 hard negative
“The clearest example is ServiceNow Governance, Risk, and Compliance (GRC): recent user reviews repeatedly mention high implementation cost, a steep learning curve, and expensive licensing” GPT-5.4 mini, negative prompt
MetricStream93%
27 of 29 labels negative · 13 of 14 models · 17 hard negative
“MetricStream is 91% negative in the SMB label set: "are out of the question—they are overly complex and can easily cost tens of thousands of dollars annually"” Muse Glimmer 30B, negative prompt
Archer93%
28 of 30 labels negative · 12 of 14 models · 18 hard negative
“Why cautious/avoid: Often described as a "Cadillac" tool—powerful for customization but requires significant build-out, technical expertise, and maintenance.” Grok 4.20, negative prompt
OneTrust GRC84%
16 of 19 labels negative · 9 of 14 models · 4 hard negative
“Skip: ServiceNow GRC, MetricStream, Archer, OneTrust (enterprise/quote-only, far beyond your needs)” DeepSeek V4 Flash, scale prompt
What they cite
Fourteen of the fourteen models returned a source list in this edition: five return the pages they cited and nine the search results they consulted.
Sites the answers cite
77 of 84 answers in this category came back with a source list, from 14 of 14 models: citations where the model returns them, or the search results it consulted. 896 links across 202 sites, every framing counted. Ranked by the number of answers carrying the site or page. 20 of the 252 answers across every segment cited this index's own page for the category; the method page measures whether that reading tilts an answer.
44 answers · 78 citations · 11 models
35 answers · 44 citations · 11 models
31 answers · 31 citations · 10 models
28 answers · 28 citations · 9 models
vendor site · Vanta27 answers · 34 citations · 12 models
vendor site · Oneleet24 answers · 24 citations · 10 models
vendor site · SourceForge21 answers · 22 citations · 8 models
vendor site · G220 answers · 30 citations · 9 models
vendor site · Sentrient19 answers · 21 citations · 9 models
vendor site · Sprinto17 answers · 23 citations · 10 models
vendor site · ComplyJet14 answers · 15 citations · 9 models
13 answers · 15 citations · 9 models
Pages the answers cite
The ten pages named in the most answers, by full address. A page here is one the models returned with a recommendation, not one the index endorses.
41 answers · 11 models
31 answers · 10 models
27 answers · 9 models
24 answers · 10 models
24 answers · 10 models
19 answers · 8 models
16 answers · 9 models
14 answers · 8 models
13 answers · 8 models
11 answers · 7 models
Search against answers
Each company's standing in the answers beside its site's footprint in Google search, one row a site: the products the models named on it with their shares, and the share they add up to; monthly searches on Google, and DataForSEO's estimate of AI search demand (modeled from search signals, directional, not a count of queries to any assistant), for the most-searched of the company's and its products' names (the name is in each row's hover text); estimated monthly organic visits to the site; and its best position in Google's top ten for “best grc platform”, “grc platform”, “grc platforms”. US estimates from DataForSEO and Google's Ads Transparency Center. A small company's site, or a mid-sized company's site for its flagship, is marked company; a product on a large parent's site (Google, Microsoft) has no site figures. A column with no figures for this category is left out, and an empty cell means none were seen, not none exist. Two measurements side by side: neither is read as the cause of the other.
| Company and products | Share | Own site cited | Name searches, Google | AI search demand, est. | Organic visits | Google ads, last 30 days | Best Google position |
|---|---|---|---|---|---|---|---|
| Vanta vanta.com | 30% | 381 | 40,500 | 1,219 | 72,260 | 120 | |
| Sprinto sprinto.com | 13% | 256 | 2,400 | 79 | 26,896 | 43 | |
| Drata drata.com | 13% | 368 | 9,900 | 257 | 36,413 | 54 | |
| Secureframe secureframe.com | 7% | 235 | 2,400 | 39 | 45,014 | 27 | |
| SimpleRisk simplerisk.com | 7% | 26 | 210 | 1 | 236 | 4 | |
| Scrut Automation scrut.io | 4% | 117 | 390 | 10 | 10,568 | 34 | |
| Onspring onspring.com | 4% | 81 | 1,300 | 25 | 7,536 | 24 | |
| Ethicontrol ethicontrol.com | 4% | 16 | 10 | 0 | 126 | ||
| AdaptiveGRC adaptivegrc.com | 4% | 14 | 4 | ||||
| Eramba eramba.org Eramba Community 3%, Eramba 1% | 4% | 25 | 390 | 5 | 364 | 0 |
Google's top ten for the three searches hold 20 sites; 0 of them are among the sites the models cited here. The first result for “best grc platform” is reddit.com.
How they answered
Six framings of the same buying question, each sent to every model in a fresh session with search on. One row per model, so a row shows whether it held its answer under rewording, what it named when cost was the constraint, and what it argued against. Computed from the raw judge labels.ShowHide
How they answered
Six framings of the same buying question, each sent to every model in a fresh session with search on. One row per model, so a row shows whether it held its answer under rewording, what it named when cost was the constraint, and what it argued against. Computed from the raw judge labels.
ShowHideModelDirect“What is the best GRC platform for a small B2B company?”Paraphrase“Which governance, risk and compliance tool would you recommend to a small business that sells to other businesses?”Comparative“What are the top GRC platforms for a small team and how do they differ?”Budget-constrained“What is the best GRC platform for a small company with a tight budget?”Scale-constrained“We are a 30 person company evaluating a GRC platform. What should we look at?”Negative“Which GRC platforms should a small business avoid or be cautious about?”
Claude Haiku 4.5Drata, Vantaagainst: ServiceNow Integrated Risk ManagementVantaChangedDrataagainst: OptroSprintono first choiceagainst: AuditBoard, Drata, LogicGate, MetricStream, SAP GRC, ServiceNow Integrated Risk Management, Sprinto, Vanta
Two alternatives
Hyperproof, Isora GRCThree alternatives
Drata, Secureframe, SprintoTwo alternatives
Riskuity, VantaTwo alternatives
Drata, VantaGPT-5.4 miniVantaagainst: AuditBoard, LogicGate, OneTrust GRC, RiskonnectHyperproofChangedSecureframe, VantaScytaleagainst: Archer, MetricStream, ServiceNow Integrated Risk Managementno first choiceagainst: MetricStream, ProcessUnity, ServiceNow Integrated Risk Management
Two alternatives
Drata, SecureframeTwo alternatives
Onspring, TRACTwo alternatives
Drata, OneTrust GRCOne alternative
LogicGate Risk CloudGemini 3.5 FlashVantaagainst: Archer, OneTrust GRC, ServiceNow Integrated Risk ManagementVantaHeldagainst: Archer, ServiceNow Integrated Risk ManagementVantaagainst: Archer, OneTrust GRC, ServiceNow Integrated Risk ManagementErambaagainst: Drata, VantaVantaagainst: Archer, MetricStream, ServiceNow Integrated Risk Managementagainst: Archer, IBM OpenPages, MetricStream, OneTrust GRC, SAP GRC, ServiceNow Integrated Risk Management, Workiva
Three alternatives
Drata, Secureframe, SprintoThree alternatives
Drata, Secureframe, SprintoFive alternatives
Drata, Oneleet, Scrut Automation, Secureframe, SprintoFour alternatives
CISO Assistant, RealCISO, SimpleRisk, SprintoFour alternatives
Drata, Secureframe, Sprinto, ThoropassPerplexity SonarVantaagainst: Archer, MetricStream, ServiceNow Integrated Risk ManagementVantaHeldVantaagainst: Archer, CISO Assistant, Eramba, MetricStream, ServiceNow Integrated Risk ManagementEramba Community, SimpleRiskagainst: Archer, MetricStream, ServiceNow Integrated Risk Managementno first choiceagainst: Archer, AuditBoard, Diligent One, Drata, IBM OpenPages, MetricStream, OneTrust GRC, Optro, Riskonnect, SAP GRC, Secureframe, ServiceNow Integrated Risk Management, Sprinto, Vanta, Workiva
Two alternatives
Drata, SprintoFour alternatives
Drata, Onspring, Scrut Automation, ScytaleSix alternatives
Drata, Hyperproof, LogicGate, Secureframe, Sprinto, ZenGRCThree alternatives
Ethicontrol, Sprinto, VantaGrok 4.20Sprintoagainst: Alyne, Archer, MetricStream, Onspring, ServiceNow Integrated Risk ManagementSprintoHeldagainst: Drata, Eramba, OneTrust GRC, ServiceNow Integrated Risk ManagementScrut Automation, Sprintoagainst: Archer, MetricStream, OneTrust GRC, ServiceNow Integrated Risk ManagementSprintoagainst: MetricStream, OneTrust GRC, ServiceNow Integrated Risk ManagementVantaagainst: Archer, MetricStream, OneTrust GRC, ServiceNow Integrated Risk Managementagainst: Archer, Drata, NAVEX One, OneTrust GRC, Vanta
Three alternatives
Drata, Scrut Automation, VantaFour alternatives
Onspring, Scrut Automation, Secureframe, VantaThree alternatives
Drata, Secureframe, VantaNine alternatives
AdaptiveGRC, C1Risk, Drata, Eramba, Ethicontrol, Interfacing, Onspring, TRAC, VantaSeven alternatives
Drata, Hyperproof, LogicGate, Onspring, Secureframe, Sprinto, Strike GraphMistral SmallDrata, Secureframe, VantaSprintoChangedOnspringAdaptiveGRCDrataagainst: MetricStream, OneTrust GRCagainst: Archer, MetricStream, SailPoint, ServiceNow Integrated Risk Management, StandardFusion, Workiva
One alternative
OnspringTwo alternatives
Onspring, VantaSeven alternatives
CorpGovRisk, Drata, Pali GRC, Scrut Automation, Sentrient, TRAC, VantaThree alternatives
Ethicontrol, GRC Toolbox, OnspringThree alternatives
Sprinto, Vanta, ZenGRCDeepSeek V4 FlashVantaagainst: Diligent One, LogicGate, OneTrust GRCVantaHeldagainst: IBM OpenPages, MetricStream, SailPoint, WorkivaVantaagainst: OnspringSimpleRiskagainst: Archer, Drata, LogicGate, MetricStream, Onspring, ServiceNow Integrated Risk Management, Vanta, WorkivaDrata, Secureframe, Vantaagainst: Archer, Hyperproof, LogicGate, MetricStream, OneTrust GRC, ServiceNow Integrated Risk Managementagainst: Archer, Drata, MetricStream, Secureframe, ServiceNow Integrated Risk Management, Vanta
Six alternatives
ComplyJet, Drata, Scrut Automation, Sprinto, TrustCloud, episkiThree alternatives
Hyperproof, Onspring, SprintoSix alternatives
Drata, Hyperproof, Scrut Automation, Scytale, Secureframe, SprintoThree alternatives
Eramba, Secureframe, SprintoTwo alternatives
Delve, SprintoLlama 4 Maverickno first choiceOnspringChangedno first choiceno first choiceno first choiceagainst: Archer, MetricStream, SailPoint, ServiceNow Integrated Risk Management, StandardFusion, Workiva
Eight alternatives
AdaptiveGRC, Continuum GRC, Essential ERM, Ethicontrol, GRC Toolbox, Sprinto, TRAC, VelocityEHSQwen 3.7 FlashDrata, Vantaagainst: Diligent One, OneTrust GRCConveyorChangedVantaEthicontrol, Sprinto, Vantaagainst: Archer, MetricStream, ServiceNow Integrated Risk ManagementDrata, Vantaagainst: Archer, ServiceNow Integrated Risk Managementagainst: Archer, Diligent One, IBM Security Trusteer / Quantum Link, LogicManager, MetricStream, SAP GRC, ServiceNow Integrated Risk Management
Three alternatives
Scrut Automation, Secureframe, SprintoThree alternatives
Onspring, Sprinto, VantaFive alternatives
Onspring, Pali GRC, Scrut Automation, Secureframe, SprintoThree alternatives
Hyperproof, Kopexa, OnspringFour alternatives
Oneleet, Onspring, Scrut Automation, SecureframeKimi K2Scrut Automation, SprintoScrut AutomationChangedVantaSimpleRisk, Sprintoagainst: Archer, Drata, ServiceNow Integrated Risk ManagementSecureframeagainst: Archer, MetricStream, ServiceNow Integrated Risk Managementagainst: Archer, Compliance Manager GRC, MetricStream, OneTrust GRC, ServiceNow Integrated Risk Management
Three alternatives
Drata, Onspring, VantaThree alternatives
Hyperproof, Secureframe, SprintoSix alternatives
Drata, Eramba, Hyperproof, Onspring, Secureframe, ZenGRCFive alternatives
GRCLab, Secureframe, Unicis.Tech, Vanta, XORCISMThree alternatives
Drata, Sprinto, VantaGLM 4.7 FlashXAdaptiveGRC, Ethicontrol, Onspring, SecureframeVantaChangedScrut Automation, Secureframeagainst: SimpleRiskRealCISO, Resolveagainst: Onspring, Sprintono first choiceagainst: ACL GRC, Archer, AuditBoard, MetricStream, Riskonnect, SAP GRC, ServiceNow Integrated Risk Management
Three alternatives
Drata, Sprinto, VantaThree alternatives
Diligent 3rdRisk, Drata, UpGuardSeven alternatives
AdaptiveGRC, Drata, Ethicontrol, Hyperproof, Oneleet, Sprinto, VantaOne alternative
SymbiantMiniMax M2.5Onspring, Scrut AutomationDrataChangedVantaAdaptiveGRC, Ethicontrolno first choicenothing named
Two alternatives
AdaptiveGRC, EthicontrolTwo alternatives
Microsoft Compliance Manager, VComplySix alternatives
Drata, Onspring, RealCISO, Risk Cognizance, Scrut Automation, SymbiantOne alternative
GRC ToolboxGPT-6 LunaVantaDrataChangedDrata, Secureframe, Sprintoagainst: LogicGate Risk CloudSimpleRiskno first choiceagainst: Archer, MetricStream, ServiceNow Integrated Risk Management
Two alternatives
Drata, SecureframeOne alternative
VantaThree alternatives
Hyperproof, Thoropass, VantaTwo alternatives
Eramba Community, SecureframeMuse Glimmer 30BVantaVantaHeldVantaEramba Community, SimpleRiskDrata, Secureframe, Sprinto, Vantaagainst: Hyperproof, LogicGateagainst: Archer, Drata, MetricStream, OneTrust GRC, SailPoint, ServiceNow Integrated Risk Management, StandardFusion, Vanta, Workiva
Eight alternatives
AdaptiveGRC, Drata, Eramba, Ethicontrol, Onspring, Scrut Automation, Secureframe, TRACFive alternatives
Drata, Onspring, Scrut Automation, Secureframe, SprintoSix alternatives
Drata, Eramba, Hyperproof, Scrut Automation, Secureframe, ZenGRCSeven alternatives
AdaptiveGRC, C1Risk, Ethicontrol, InPhase, Onspring, Scrut Automation, SprintoTwo alternatives
Oneleet, Scrut AutomationBold is the first choiceAlternatives are counted; the count opens them.What the answer argued against
The record
One row per call: the version string exactly as returned, whether the model searched, sources cited, and latency.
Eighty-four rows: every prompt, every model, every answer.
| Prompt | Model | Version string | Time (UTC) | Searched | Sources | Latency |
|---|---|---|---|---|---|---|
| Direct recommendation | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 11:36 | yes | 10 | 8 s |
| Direct recommendation | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 09:10 | yes | 4 | 6 s |
| Direct recommendation | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 16:41 | yes | 14 | 19 s |
| Direct recommendation | Perplexity Sonar | sonar | 2026-11-01 08:53 | yes | 10 | 4 s |
| Direct recommendation | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 16:46 | yes | 10 | 16 s |
| Direct recommendation | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 09:26 | yes | 5 | 5 s |
| Direct recommendation | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 14:29 | yes | 21 | 38 s |
| Direct recommendation | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 09:32 | yes | 5 | 2 s |
| Direct recommendation | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 13:46 | yes | 8 | 48 s |
| Direct recommendation | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 17:07 | yes | 10 | 50 s |
| Direct recommendation | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 10:36 | yes | 10 | 27 s |
| Direct recommendation | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 19:39 | yes | 5 | 18 s |
| Direct recommendation | GPT-6 Luna | gpt-6-luna | 2026-11-01 16:44 | yes | 3 | 10 s |
| Direct recommendation | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 10:58 | yes | 11 | 16 s |
| Paraphrase | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 08:45 | yes | 17 | 9 s |
| Paraphrase | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 13:28 | yes | 2 | 5 s |
| Paraphrase | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 18:23 | yes | 14 | 21 s |
| Paraphrase | Perplexity Sonar | sonar | 2026-11-01 15:15 | yes | 10 | 3 s |
| Paraphrase | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 14:38 | yes | 9 | 11 s |
| Paraphrase | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 08:39 | yes | 5 | 4 s |
| Paraphrase | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 13:33 | yes | 22 | 24 s |
| Paraphrase | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 14:53 | yes | 5 | 3 s |
| Paraphrase | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 13:45 | yes | 15 | 70 s |
| Paraphrase | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 18:36 | yes | 15 | 41 s |
| Paraphrase | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 11:03 | yes | 19 | 22 s |
| Paraphrase | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 18:50 | no | 0 | 59 s |
| Paraphrase | GPT-6 Luna | gpt-6-luna | 2026-11-01 10:47 | yes | 3 | 13 s |
| Paraphrase | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 10:38 | yes | 14 | 22 s |
| Comparative | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 17:25 | yes | 16 | 9 s |
| Comparative | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 14:59 | yes | 6 | 7 s |
| Comparative | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 12:57 | yes | 10 | 24 s |
| Comparative | Perplexity Sonar | sonar | 2026-11-01 14:55 | yes | 10 | 8 s |
| Comparative | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 18:10 | yes | 14 | 17 s |
| Comparative | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 11:05 | yes | 5 | 7 s |
| Comparative | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 09:07 | yes | 25 | 32 s |
| Comparative | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 14:35 | yes | 5 | 3 s |
| Comparative | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 19:24 | yes | 20 | 61 s |
| Comparative | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 19:21 | yes | 25 | 42 s |
| Comparative | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 18:20 | yes | 17 | 50 s |
| Comparative | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 17:57 | yes | 14 | 33 s |
| Comparative | GPT-6 Luna | gpt-6-luna | 2026-11-01 10:00 | yes | 7 | 20 s |
| Comparative | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 14:47 | yes | 23 | 35 s |
| Budget constrained | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 18:46 | yes | 9 | 8 s |
| Budget constrained | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 11:05 | yes | 3 | 4 s |
| Budget constrained | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 09:23 | yes | 7 | 20 s |
| Budget constrained | Perplexity Sonar | sonar | 2026-11-01 18:01 | yes | 10 | 3 s |
| Budget constrained | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 18:50 | yes | 13 | 15 s |
| Budget constrained | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 12:37 | yes | 5 | 5 s |
| Budget constrained | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 18:08 | yes | 22 | 27 s |
| Budget constrained | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 12:21 | yes | 5 | 2 s |
| Budget constrained | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 12:05 | yes | 9 | 29 s |
| Budget constrained | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 10:21 | yes | 18 | 51 s |
| Budget constrained | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 18:13 | yes | 10 | 80 s |
| Budget constrained | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 18:16 | yes | 5 | 25 s |
| Budget constrained | GPT-6 Luna | gpt-6-luna | 2026-11-01 12:14 | yes | 3 | 20 s |
| Budget constrained | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 12:32 | yes | 14 | 22 s |
| Scale constrained | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 15:32 | no | 0 | 5 s |
| Scale constrained | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 08:55 | no | 0 | 8 s |
| Scale constrained | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 15:08 | no | 0 | 18 s |
| Scale constrained | Perplexity Sonar | sonar | 2026-11-01 10:42 | yes | 10 | 7 s |
| Scale constrained | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 17:10 | yes | 15 | 16 s |
| Scale constrained | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 15:57 | no | 0 | 9 s |
| Scale constrained | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 09:48 | yes | 19 | 35 s |
| Scale constrained | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 12:57 | yes | 5 | 3 s |
| Scale constrained | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 18:01 | yes | 15 | 29 s |
| Scale constrained | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 13:02 | yes | 20 | 35 s |
| Scale constrained | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 19:14 | yes | 19 | 28 s |
| Scale constrained | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 18:13 | no | 0 | 70 s |
| Scale constrained | GPT-6 Luna | gpt-6-luna | 2026-11-01 16:28 | yes | 2 | 17 s |
| Scale constrained | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 14:06 | yes | 12 | 27 s |
| Negative framing | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 13:28 | yes | 19 | 10 s |
| Negative framing | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 15:10 | yes | 3 | 5 s |
| Negative framing | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 16:28 | yes | 11 | 26 s |
| Negative framing | Perplexity Sonar | sonar | 2026-11-01 14:35 | yes | 10 | 4 s |
| Negative framing | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 15:29 | yes | 23 | 18 s |
| Negative framing | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 19:16 | yes | 5 | 4 s |
| Negative framing | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 13:29 | yes | 25 | 31 s |
| Negative framing | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 16:13 | yes | 5 | 2 s |
| Negative framing | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 19:44 | no | 0 | 33 s |
| Negative framing | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 08:50 | yes | 25 | 27 s |
| Negative framing | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 13:57 | yes | 24 | 53 s |
| Negative framing | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 12:10 | yes | 5 | 75 s |
| Negative framing | GPT-6 Luna | gpt-6-luna | 2026-11-01 09:25 | yes | 4 | 13 s |
| Negative framing | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 16:13 | yes | 14 | 18 s |
Normalization in this category
Every judgment call made between the raw labels and the numbers above, listed so it is visible and reversible.
ShowHide
Category-scoped readings
Diligent read as Diligent One
Diligent (HighBond) read as Diligent One
OneTrust read as OneTrust GRC
Scrut read as Scrut Automation
Scrut (or Scrut Automation) read as Scrut Automation
ServiceNow read as ServiceNow Integrated Risk Management
Unresolved, counted raw
Alyne
Continuum GRC
Essential ERM
GRCLab
IBM Security Trusteer / Quantum Link
InPhase
Interfacing
Isora GRC
MAXI Compliance AI
Microsoft Compliance Manager
OpenReg
Riskuity
SRGA
Tugboat
Unicis.Tech
XORCISM
Discontinued, still offered
No shut-down product was recommended here.