Managed detection and response for small business buyers
Asked as “MDR service”, and as “managed detection and response provider”, on behalf of a small B2B company. 46 first choices recorded across the direct, paraphrase, budget and scale prompts, fourteen models each.
Standing · first-choice share
83%
Clear leader
83Huntress Managed EDR02Arctic Wolf Managed Detection and Response02Arctic Wolf Networks13others
83% of first choices, clear leader.
Since October 2026▲+5Since October 2026: 78% → 83%, +5 points. Inside the 11-point floor: within noise.Huntress Managed EDR held the lead, +5 points on 78%, inside the 11-point floor.
By buyer segment
The same question asked on behalf of a different buyer. Each standing is computed within its segment; they sit side by side and are never added together.
Small business
Huntress Managed EDR83%Clear leader▲+5Since October 2026: 78% → 83%, +5 points. Inside the 11-point floor: within noise.This pageMid-market
Arctic Wolf Managed Detection and Response31%Contested▼−6Since October 2026: 37% → 31%, −6 points. Inside the 11-point floor: within noise.Standing →Enterprise
CrowdStrike Falcon Complete33%Contested▼−2Since October 2026: 35% → 33%, −2 points. Inside the 11-point floor: within noise.Standing →
Huntress Managed EDR83%Clear leader▲+5Since October 2026: 78% → 83%, +5 points. Inside the 11-point floor: within noise.This pageMid-marketArctic Wolf Managed Detection and Response31%Contested▼−6Since October 2026: 37% → 31%, −6 points. Inside the 11-point floor: within noise.Standing →EnterpriseCrowdStrike Falcon Complete33%Contested▼−2Since October 2026: 35% → 33%, −2 points. Inside the 11-point floor: within noise.Standing →The standing
Share is the count of first choices across the direct, paraphrase, budget and scale prompts, over all fourteen models, for a small B2B company. Ordered by share.
ProductFirst-choice shareNegative rateLabelsQuadrantSince October 2026
01Huntress Managed EDR83%0%56endorsed leader▲+5Since October 2026: 78% → 83%, +5 points. Inside the 11-point floor: within noise.78% → 83%
Huntress Managed EDR83%0%56endorsed leader▲+5Since October 2026: 78% → 83%, +5 points. Inside the 11-point floor: within noise.78% → 83%02
Sophos MDR2%8%52accepted challenger▼−2Since October 2026: 4% → 2%, −2 points. Inside the 11-point floor: within noise.4% → 2%
Sophos MDR2%8%52accepted challenger▼−2Since October 2026: 4% → 2%, −2 points. Inside the 11-point floor: within noise.4% → 2%03Arctic Wolf Managed Detection and Response2%36%33criticized challenger=heldSince October 2026: 2% → 2%, ±0 points. Inside the 11-point floor: within noise.2% → 2%
Arctic Wolf Managed Detection and Response2%36%33criticized challenger=heldSince October 2026: 2% → 2%, ±0 points. Inside the 11-point floor: within noise.2% → 2%04CrowdStrike Falcon Complete2%33%21criticized challenger▲+2Since October 2026: 0% → 2%, +2 points. Inside the 11-point floor: within noise.0% → 2%
CrowdStrike Falcon Complete2%33%21criticized challenger▲+2Since October 2026: 0% → 2%, +2 points. Inside the 11-point floor: within noise.0% → 2%Show the six products at 0%, ordered by negative rate
10
Red Canary0%31%13criticized challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%
Red Canary0%31%13criticized challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%07
Expel MDR0%19%21accepted challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%
Expel MDR0%19%21accepted challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%09ThreatDown MDR0%8%12accepted challenger▼−2Since October 2026: 2% → 0%, −2 points. Inside the 11-point floor: within noise.2% → 0%
06
Blackpoint Cyber0%6%16accepted challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%
Blackpoint Cyber0%6%16accepted challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%05
Cynet 3600%6%17accepted challenger▼−2Since October 2026: 2% → 0%, −2 points. Inside the 11-point floor: within noise.2% → 0%
Cynet 3600%6%17accepted challenger▼−2Since October 2026: 2% → 0%, −2 points. Inside the 11-point floor: within noise.2% → 0%08
Field Effect MDR0%0%10accepted challenger▼−2Since October 2026: 2% → 0%, −2 points. Inside the 11-point floor: within noise.2% → 0%
Field Effect MDR0%0%10accepted challenger▼−2Since October 2026: 2% → 0%, −2 points. Inside the 11-point floor: within noise.2% → 0%The floor is 11 points of share, measured: how far the models move a leader on their own when the same questions are asked twice with nothing changed. A larger change is movement; a smaller one can't be told apart from repeat variation, and both are shown. Each index measures its own floor from its own repeat, over its own categories, so the floor differs from one index to the next. Both editions asked the same fourteen models. How the floor is measured
Bars are the share of first choices, 0 to 100Every product with at least 10 labels here. Every product name links to its product page.
Head to head
Arctic Wolf Managed Detection and Response vs Huntress Managed EDRArctic Wolf Managed Detection and Response vs Sophos MDRArctic Wolf Managed Detection and Response vs Expel MDR
Head-to-head pages are published for mid-market buyers, so these open on mid-market figures, not small business.All twenty-eight head-to-head pages: the top eight products, each against each
Arctic Wolf Managed Detection and Response vs CrowdStrike Falcon CompleteArctic Wolf Managed Detection and Response vs Red CanaryArctic Wolf Managed Detection and Response vs Rapid7 MDRArctic Wolf Managed Detection and Response vs CrowdStrikeHuntress Managed EDR vs Sophos MDRHuntress Managed EDR vs Expel MDRHuntress Managed EDR vs CrowdStrike Falcon CompleteHuntress Managed EDR vs Red CanaryHuntress Managed EDR vs Rapid7 MDRHuntress Managed EDR vs CrowdStrikeSophos MDR vs Expel MDRSophos MDR vs CrowdStrike Falcon CompleteSophos MDR vs Red CanarySophos MDR vs Rapid7 MDRSophos MDR vs CrowdStrikeExpel MDR vs CrowdStrike Falcon CompleteExpel MDR vs Red CanaryExpel MDR vs Rapid7 MDRExpel MDR vs CrowdStrikeCrowdStrike Falcon Complete vs Red CanaryCrowdStrike Falcon Complete vs Rapid7 MDRCrowdStrike Falcon Complete vs CrowdStrikeRed Canary vs Rapid7 MDRRed Canary vs CrowdStrikeRapid7 MDR vs CrowdStrike
One product takes 83% of first choices here, so the chart would put nine markers in one corner and one at the far edge. The two measurements it plots are columns in the standing above: share, and the negative label rate. Three products carry a negative rate above 25% in this category.
What they warned about
Nine of fourteen models held their first choice under the paraphrase. GPT-5.4 mini, Mistral Small, Qwen 3.7 Flash, GLM 4.7 FlashX and MiniMax M2.5 changed. A high negative share on a product with few labels is a warning. A low share on a product with many labels is salience, not sentiment.
Arctic Wolf Managed Detection and Response36%
12 of 33 labels negative · 9 of 14 models · 2 hard negative
“Arctic Wolf is the classic example. It starts with a flat ~ $15,000/yr Aurora Platform base fee ... For a tight budget under $5,000/yr it is not workable.” Muse Glimmer 30B, negative prompt
CrowdStrike Falcon Complete33%
7 of 21 labels negative · 6 of 14 models · 2 hard negative
“CrowdStrike, SentinelOne and Bitdefender run their own platforms which you must license. If you already own endpoint, email or cloud tools you will be forced to rip-and-replace or pay twice.” Muse Glimmer 30B, negative prompt
SentinelOne Singularity MDR44%
4 of 9 labels negative · 4 of 14 models · 1 hard negative
“Avoid services (e.g., some from CrowdStrike, SentinelOne, or Sophos MDR) that mandate licensing their” Muse Glimmer 30B, negative prompt
Sophos MDR8%
4 of 52 labels negative · 4 of 14 models · 1 hard negative
“Avoid services (e.g., some from CrowdStrike, SentinelOne, or Sophos MDR) that mandate licensing their” Muse Glimmer 30B, negative prompt
What they cite
Fourteen of the fourteen models returned a source list in this edition: five return the pages they cited and nine the search results they consulted.
Sites the answers cite
76 of 84 answers in this category came back with a source list, from 14 of 14 models: citations where the model returns them, or the search results it consulted. 734 links across 188 sites, every framing counted. Ranked by the number of answers carrying the site or page. 25 of the 252 answers across every segment cited this index's own page for the category; the method page measures whether that reading tilts an answer.
42 answers · 55 citations · 10 models
vendor site · Consilien26 answers · 26 citations · 11 models
24 answers · 24 citations · 10 models
22 answers · 22 citations · 11 models
vendor site · Huntress19 answers · 27 citations · 9 models
19 answers · 20 citations · 11 models
vendor site · Expel15 answers · 26 citations · 8 models
vendor site · G215 answers · 21 citations · 9 models
15 answers · 18 citations · 10 models
15 answers · 15 citations · 9 models
11 answers · 16 citations · 6 models
vendor site · Cynet11 answers · 15 citations · 6 models
Pages the answers cite
The ten pages named in the most answers, by full address. A page here is one the models returned with a recommendation, not one the index endorses.
40 answers · 10 models
25 answers · 11 models
24 answers · 10 models
22 answers · 11 models
16 answers · 11 models
15 answers · 9 models
15 answers · 8 models
11 answers · 4 models
11 answers · 8 models
10 answers · 7 models
Search against answers
Each company's standing in the answers beside its site's footprint in Google search, one row a site: the products the models named on it with their shares, and the share they add up to; monthly searches on Google, and DataForSEO's estimate of AI search demand (modeled from search signals, directional, not a count of queries to any assistant), for the most-searched of the company's and its products' names (the name is in each row's hover text); estimated monthly organic visits to the site; and its best position in Google's top ten for “best mdr service”, “mdr service”, “mdr services”. US estimates from DataForSEO and Google's Ads Transparency Center. A small company's site, or a mid-sized company's site for its flagship, is marked company; a product on a large parent's site (Google, Microsoft) has no site figures. A column with no figures for this category is left out, and an empty cell means none were seen, not none exist. Two measurements side by side: neither is read as the cause of the other.
| Company and products | Share | Own site cited | Name searches, Google | AI search demand, est. | Organic visits | Paid search a month, est. | Google ads, last 30 days | Best Google position |
|---|---|---|---|---|---|---|---|---|
| Huntress huntress.com Huntress Managed EDR 83% | 83% | 353 | 33,100 | 4,338 | 352,368 company | $15,522 | 120 | 8 |
| Sophos parent site Sophos MDR 2% | 2% | 155 | 18,100 | 2,046 | ||||
| Arctic Wolf arcticwolf.com Arctic Wolf Managed Detection and Response 2% | 2% | 127 | 49,500 | 1,342 | 40,780 company | 56 | 9 | |
| ESET eset.com ESET PROTECT MDR 2% | 2% | 19 | 18,100 | 1,812 | 637,959 company | $4,397 | 75 | 1 |
| CrowdStrike parent site CrowdStrike Falcon Complete 2% | 2% | 84 | 74,000 | 5,130 | ||||
| Microsoft Defender parent site Microsoft Defender Experts for XDR 2% | 2% | 19 | 18,100 | 3,525 | ||||
| Arctic Wolf Networks | 2% | |||||||
| SentinelOne parent site SentinelOne Singularity MDR 2%, SentinelOne Vigilance Respond 0% | 2% | 35 | 33,100 | 1,675 | ||||
| CrowdStrike crowdstrike.com | 2% | 302 | 74,000 | 5,130 | 715,209 | $13,967 | 119 | 6 |
| Cynet 360 cynet.com | 0% | 37 | 30 | 1 | 13,782 | 43 |
Google's top ten for the three searches hold 23 sites; 3 of them are among the sites the models cited here (expel.com, huntress.com, reddit.com). The first result for “best mdr service” is gartner.com.
How they answered
Six framings of the same buying question, each sent to every model in a fresh session with search on. One row per model, so a row shows whether it held its answer under rewording, what it named when cost was the constraint, and what it argued against. Computed from the raw judge labels.ShowHide
How they answered
Six framings of the same buying question, each sent to every model in a fresh session with search on. One row per model, so a row shows whether it held its answer under rewording, what it named when cost was the constraint, and what it argued against. Computed from the raw judge labels.
ShowHideModelDirect“What is the best MDR service for a small B2B company?”Paraphrase“Which managed detection and response provider would you recommend to a small business that sells to other businesses?”Comparative“What are the top MDR services for a small team and how do they differ?”Budget-constrained“What is the best MDR service for a small company with a tight budget?”Scale-constrained“We are a 30 person company evaluating a MDR service. What should we look at?”Negative“Which MDR services should a small business avoid or be cautious about?”
Claude Haiku 4.5Huntress Managed EDRHuntress Managed EDRHeldHuntress Managed EDRagainst: Arctic Wolf Managed Detection and ResponseHuntress Managed EDRno first choicenothing named
Two alternatives
Arctic Wolf Managed Detection and Response, Sophos MDRTwo alternatives
Expel MDR, Sophos MDRTwo alternatives
Rapid7 MDR, Sophos MDRTwo alternatives
Cynet 360, Sophos MDRGPT-5.4 miniHuntress Managed EDRCrowdStrike Falcon CompleteChangedSophos MDRMicrosoft Defender Experts for XDRno first choicenothing named
Four alternatives
CrowdStrike Falcon Complete, Rapid7 MDR, Sophos MDR, ThreatDown MDRThree alternatives
Arctic Wolf Managed Detection and Response, ESET PROTECT MDR, Sophos MDRFour alternatives
CrowdStrike Falcon Complete, Microsoft Defender Experts for XDR, Rapid7 MDR, Unit 42 Managed Detection and ResponseThree alternatives
ESET PROTECT MDR, Field Effect MDR, ThreatDown MDRGemini 3.5 FlashHuntress Managed EDRHuntress Managed EDRHeldHuntress Managed EDRHuntress Managed EDRagainst: CrowdStrike Falcon Complete, Rapid7 MDR, Red Canary, ReliaQuest GreyMatterHuntress Managed EDRagainst: Expel MDR, Red Canarynothing named
Four alternatives
Blackpoint Cyber, Expel MDR, Red Canary, Sophos MDRThree alternatives
Arctic Wolf Managed Detection and Response, CrowdStrike Falcon Complete, Sophos MDRFour alternatives
Arctic Wolf Managed Detection and Response, Expel MDR, Red Canary, Sophos MDRThree alternatives
Blackpoint Cyber, Blumira, Sophos MDRTwo alternatives
Blackpoint Cyber, Sophos MDRPerplexity SonarHuntress Managed EDRagainst: CrowdStrike Falcon CompleteHuntress Managed EDRHeldHuntress Managed EDRagainst: Arctic Wolf Managed Detection and Response, Rapid7 MDRHuntress Managed EDRno first choicenothing named
Two alternatives
ESET PROTECT MDR, Sophos MDROne alternative
Sophos MDRFour alternatives
Blumira, Cynet 360, Expel MDR, Sophos MDRThree alternatives
Blumira, SentinelOne Singularity MDR, Sophos MDRGrok 4.20Huntress Managed EDRHuntress Managed EDRHeldagainst: CrowdStrike Falcon Complete, Cynet 360, Expel MDR, ThreatDown MDRBlumira, Huntress Managed EDRagainst: Arctic Wolf Managed Detection and Response, CrowdStrike Falcon CompleteHuntress Managed EDRagainst: Arctic Wolf Managed Detection and Response, Cybereason MDR, SentinelOne Singularity MDRno first choicenothing named
Four alternatives
Blackpoint Cyber, Blumira, Cynet 360, ThreatDown MDRTwo alternatives
Blumira, Sophos MDRThree alternatives
Cynet 360, Field Effect MDR, ThreatDown MDRFour alternatives
Cynet 360, Field Effect MDR, Sophos MDR, ThreatDown MDRMistral SmallArctic Wolf Managed Detection and ResponseHuntress Managed EDRChangedBlumiraHuntress Managed EDRno first choiceagainst: Bitdefender MDR, CrowdStrike, SentinelOne Singularity MDR, Sophos MDR
Four alternatives
AgileBlue, Huntress Managed EDR, Sophos MDR, eSentire MDRTwo alternatives
Arctic Wolf Managed Detection and Response, Sophos MDRSix alternatives
Acronis MDR, AirMDR, Cynet 360, Expel MDR, Field Effect MDR, Huntress Managed EDRTwo alternatives
Bitdefender MDR, Sophos MDRDeepSeek V4 FlashHuntress Managed EDRagainst: Arctic Wolf Managed Detection and ResponseHuntress Managed EDRHeldagainst: Arctic Wolf Managed Detection and Response, CrowdStrike, Expel MDR, Red Canary, ReliaQuest GreyMatter, eSentire MDRHuntress Managed EDRagainst: Arctic Wolf Managed Detection and Response, Blackpoint Cyber, CrowdStrike Falcon CompleteHuntress Managed EDRagainst: Expel MDR, Rapid7 MDR, Red Canaryno first choiceagainst: CrowdStrike, SentinelOne Singularity MDR, Sophos MDR
Two alternatives
CrowdStrike Falcon Complete, Sophos MDRTwo alternatives
Blackpoint Cyber, Sophos MDRThree alternatives
Cynet 360, Expel MDR, Sophos MDRLlama 4 MaverickHuntress Managed EDRHuntress Managed EDRHeldHuntress Managed EDRHuntress Managed EDRno first choicenothing named
Five alternatives
Arctic Wolf Managed Detection and Response, CrowdStrike Falcon Complete, Field Effect MDR, Rapid7 MDR, Sophos MDRThree alternatives
Arctic Wolf Managed Detection and Response, Consilien, Sophos MDRTwo alternatives
CrowdStrike Falcon Complete, Expel MDRTwo alternatives
Arctic Wolf Managed Detection and Response, Sophos MDRQwen 3.7 FlashHuntress Managed EDRCrowdStrike, SentinelOne Singularity MDRChangedHuntress Managed EDRagainst: Arctic Wolf Managed Detection and Response, CrowdStrike Falcon CompleteHuntress Managed EDRno first choicenothing named
Three alternatives
ESET PROTECT MDR, SentinelOne Vigilance Respond, Sophos MDRThree alternatives
Cybertech, Notion Security, Sophos MDRTwo alternatives
Expel MDR, Sophos MDRThree alternatives
Arctic Wolf Managed Detection and Response, Expel MDR, Sophos MDRKimi K2Huntress Managed EDRHuntress Managed EDRHeldHuntress Managed EDRHuntress Managed EDRagainst: Arctic Wolf Managed Detection and Response, CrowdStrike Falcon Go, Microsoft Defender for Cloudno first choicenothing named
Two alternatives
Arctic Wolf Managed Detection and Response, Red CanaryTwo alternatives
Blackpoint Cyber, Cynet 360Six alternatives
Arctic Wolf Managed Detection and Response, Cynet 360, Expel MDR, Field Effect MDR, Red Canary, ThreatDown MDRTwo alternatives
Cynet 360, Sophos MDRGLM 4.7 FlashXESET PROTECT MDR, Huntress Managed EDRHuntress Managed EDRChangedHuntress Managed EDRHuntress Managed EDR, Sophos MDRagainst: Arctic Wolf Managed Detection and Responseno first choicenothing named
Two alternatives
At‑Bay, BlumiraTwo alternatives
Arctic Wolf Managed Detection and Response, Sophos MDRThree alternatives
Arctic Wolf Managed Detection and Response, CrowdStrike Falcon Complete, Sophos MDRMiniMax M2.5Huntress Managed EDRArctic Wolf NetworksChangedHuntress Managed EDRHuntress Managed EDRno first choiceagainst: Cyderes, Mandiant, Sophos MDR
Three alternatives
Blumira, Field Effect MDR, Sophos MDRFive alternatives
CrowdStrike Falcon Complete, Microsoft 365, Microsoft Defender for Endpoint, SentinelOne Singularity MDR, Sophos Managed Threat ResponseSeven alternatives
Adlumin, Arctic Wolf Managed Detection and Response, Blackpoint Cyber, CrowdStrike Falcon Complete, Cynet 360, Field Effect MDR, VikingCloudThree alternatives
Cynet 360, Sophos MDR, ThreatDown MDRGPT-6 LunaHuntress Managed EDRHuntress Managed EDRHeldThreatDown MDRagainst: Arctic Wolf Managed Detection and ResponseHuntress Managed EDRno first choicenothing named
One alternative
Sophos MDROne alternative
Sophos MDRThree alternatives
Blackpoint Cyber, Huntress Managed EDR, Sophos MDROne alternative
ThreatDown MDR EliteMuse Glimmer 30BHuntress Managed EDRHuntress Managed EDRHeldField Effect Threat Protection, Huntress Managed EDRHuntress Managed EDRno first choiceagainst: Arctic Wolf Managed Detection and Response, Bitdefender MDR, CrowdStrike Falcon Complete, SentinelOne Singularity MDR, Sophos MDR
Three alternatives
Arctic Wolf entry tier, Field Effect MDR, Sophos MDRTwo alternatives
Arctic Wolf Managed Detection and Response, Sophos MDRSeven alternatives
CrowdStrike Falcon Complete, Cynet 360, Expel MDR, Microsoft Defender Experts for XDR, Red Canary, Sophos MDR, ThreatDown MDRFive alternatives
AirMDR, Barracuda Email Protection, Blackpoint Cyber, ConnectWise, Sophos MDRBold is the first choiceAlternatives are counted; the count opens them.What the answer argued against
The record
One row per call: the version string exactly as returned, whether the model searched, sources cited, and latency.
Eighty-four rows: every prompt, every model, every answer.
| Prompt | Model | Version string | Time (UTC) | Searched | Sources | Latency |
|---|---|---|---|---|---|---|
| Direct recommendation | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 12:56 | yes | 9 | 8 s |
| Direct recommendation | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 15:45 | yes | 5 | 5 s |
| Direct recommendation | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 11:20 | no | 0 | 17 s |
| Direct recommendation | Perplexity Sonar | sonar | 2026-11-01 17:08 | yes | 10 | 4 s |
| Direct recommendation | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 15:12 | yes | 5 | 9 s |
| Direct recommendation | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 11:36 | yes | 5 | 4 s |
| Direct recommendation | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 17:06 | yes | 18 | 23 s |
| Direct recommendation | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 17:51 | yes | 5 | 3 s |
| Direct recommendation | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 11:51 | yes | 5 | 21 s |
| Direct recommendation | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 09:53 | yes | 10 | 27 s |
| Direct recommendation | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 14:02 | yes | 9 | 73 s |
| Direct recommendation | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 15:19 | yes | 9 | 34 s |
| Direct recommendation | GPT-6 Luna | gpt-6-luna | 2026-11-01 09:31 | yes | 2 | 12 s |
| Direct recommendation | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 17:58 | yes | 11 | 18 s |
| Paraphrase | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 14:29 | yes | 17 | 9 s |
| Paraphrase | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 13:12 | yes | 3 | 5 s |
| Paraphrase | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 14:26 | yes | 10 | 23 s |
| Paraphrase | Perplexity Sonar | sonar | 2026-11-01 19:19 | yes | 10 | 3 s |
| Paraphrase | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 17:56 | yes | 5 | 7 s |
| Paraphrase | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 16:43 | yes | 5 | 4 s |
| Paraphrase | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 10:47 | yes | 24 | 24 s |
| Paraphrase | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 10:30 | yes | 5 | 2 s |
| Paraphrase | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 11:46 | no | 0 | 31 s |
| Paraphrase | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 11:35 | yes | 18 | 26 s |
| Paraphrase | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 12:03 | yes | 10 | 39 s |
| Paraphrase | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 12:47 | no | 0 | 73 s |
| Paraphrase | GPT-6 Luna | gpt-6-luna | 2026-11-01 12:35 | yes | 2 | 14 s |
| Paraphrase | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 12:00 | yes | 14 | 18 s |
| Comparative | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 18:13 | yes | 18 | 10 s |
| Comparative | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 16:11 | yes | 6 | 8 s |
| Comparative | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 12:26 | yes | 11 | 29 s |
| Comparative | Perplexity Sonar | sonar | 2026-11-01 09:20 | yes | 10 | 6 s |
| Comparative | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 19:43 | yes | 5 | 14 s |
| Comparative | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 10:44 | yes | 5 | 8 s |
| Comparative | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 16:00 | yes | 22 | 53 s |
| Comparative | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 10:03 | yes | 5 | 3 s |
| Comparative | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 15:45 | yes | 5 | 24 s |
| Comparative | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 08:36 | yes | 14 | 38 s |
| Comparative | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 18:14 | yes | 22 | 122 s |
| Comparative | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 13:01 | yes | 5 | 30 s |
| Comparative | GPT-6 Luna | gpt-6-luna | 2026-11-01 15:17 | yes | 5 | 27 s |
| Comparative | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 15:08 | yes | 13 | 23 s |
| Budget constrained | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 16:35 | yes | 10 | 8 s |
| Budget constrained | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 13:14 | yes | 4 | 4 s |
| Budget constrained | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 10:00 | yes | 12 | 20 s |
| Budget constrained | Perplexity Sonar | sonar | 2026-11-01 17:38 | yes | 10 | 4 s |
| Budget constrained | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 15:44 | yes | 5 | 25 s |
| Budget constrained | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 19:06 | yes | 5 | 4 s |
| Budget constrained | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 08:49 | yes | 23 | 18 s |
| Budget constrained | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 13:30 | yes | 5 | 3 s |
| Budget constrained | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 13:31 | yes | 5 | 22 s |
| Budget constrained | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 11:57 | yes | 9 | 33 s |
| Budget constrained | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 11:57 | yes | 12 | 74 s |
| Budget constrained | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 10:56 | yes | 5 | 21 s |
| Budget constrained | GPT-6 Luna | gpt-6-luna | 2026-11-01 16:22 | yes | 2 | 16 s |
| Budget constrained | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 13:49 | yes | 10 | 18 s |
| Scale constrained | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 12:37 | no | 0 | 6 s |
| Scale constrained | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 14:30 | no | 0 | 9 s |
| Scale constrained | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 16:23 | no | 0 | 16 s |
| Scale constrained | Perplexity Sonar | sonar | 2026-11-01 14:19 | yes | 10 | 8 s |
| Scale constrained | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 13:43 | yes | 5 | 11 s |
| Scale constrained | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 11:42 | no | 0 | 6 s |
| Scale constrained | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 10:54 | yes | 19 | 22 s |
| Scale constrained | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 16:50 | yes | 5 | 3 s |
| Scale constrained | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 14:32 | yes | 14 | 40 s |
| Scale constrained | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 17:56 | yes | 10 | 32 s |
| Scale constrained | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 19:30 | yes | 12 | 29 s |
| Scale constrained | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 11:40 | yes | 10 | 34 s |
| Scale constrained | GPT-6 Luna | gpt-6-luna | 2026-11-01 15:56 | yes | 3 | 13 s |
| Scale constrained | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 19:32 | yes | 14 | 25 s |
| Negative framing | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 09:55 | yes | 9 | 8 s |
| Negative framing | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 08:54 | yes | 4 | 6 s |
| Negative framing | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 14:34 | no | 0 | 15 s |
| Negative framing | Perplexity Sonar | sonar | 2026-11-01 08:45 | yes | 10 | 4 s |
| Negative framing | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 18:27 | yes | 7 | 32 s |
| Negative framing | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 12:29 | yes | 5 | 6 s |
| Negative framing | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 08:47 | yes | 20 | 27 s |
| Negative framing | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 12:33 | yes | 9 | 5 s |
| Negative framing | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 16:30 | yes | 5 | 27 s |
| Negative framing | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 18:21 | yes | 18 | 34 s |
| Negative framing | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 19:41 | yes | 23 | 146 s |
| Negative framing | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 13:29 | yes | 10 | 41 s |
| Negative framing | GPT-6 Luna | gpt-6-luna | 2026-11-01 08:39 | yes | 3 | 10 s |
| Negative framing | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 18:11 | yes | 20 | 36 s |
Normalization in this category
Every judgment call made between the raw labels and the numbers above, listed so it is visible and reversible.
ShowHide
Category-scoped readings
Arctic Wolf read as Arctic Wolf Managed Detection and Response
Bitdefender read as Bitdefender MDR
CrowdStrike Falcon read as CrowdStrike Falcon Complete
Cynet read as Cynet 360
Expel read as Expel MDR
Field Effect read as Field Effect MDR
Huntress read as Huntress Managed EDR
Rapid7 read as Rapid7 MDR
ReliaQuest read as ReliaQuest GreyMatter
SentinelOne read as SentinelOne Singularity MDR
SentinelOne (Singularity Complete) read as SentinelOne Singularity MDR
Sophos read as Sophos MDR
Sophos (Sophos Intercept X with Managed Detection & Response) read as Sophos MDR
ThreatDown read as ThreatDown MDR
ThreatDown (by Malwarebytes) read as ThreatDown MDR
ThreatDown (formerly Malwarebytes) read as ThreatDown MDR
eSentire read as eSentire MDR
Unresolved, counted raw
Acronis MDR
Adlumin
AgileBlue
Arctic Wolf Networks
Arctic Wolf entry tier
At‑Bay (Stance MDR)
Bellator Cyber
Cybereason MDR
Cybertech
Field Effect Threat Protection
Microsoft Defender for XDR + MDR add-on
Notion Security
Red River
Sophos Managed Threat Response (MTR)
ThreatDown MDR Elite
Discontinued, still offered
No shut-down product was recommended here.