Gane Index
All indexesEvery index and its categoriesGTMMarketing, sales, customer and revenue operations softwareITSecurity, IT operations, cloud, developer and data softwareHRHR, payroll, recruiting, performance and learning softwareFinanceAccounting, planning, spend, billing and treasury software
Claim your listing
September 2026 Edition, published · The permanent record of that edition, superseded since. The current standing is on the category page →
Index › IT › Security operations › SIEM › Small business · September 2026 Edition

SIEM platforms for small business buyers

Asked as “SIEM platform”, and as “security information and event management tool”, on behalf of a small B2B company. 46 first choices recorded across the direct, paraphrase, budget and scale prompts, twelve models each.
Standing · first-choice share
28%
Blumiraand Microsoft Sentinel
Contested · Microsoft Sentinel 28%
28Blumira28Microsoft Sentinel17Wazuh26others

28% of first choices, contested.

ShowinginAll 136 categories in the September 2026 Edition →

By buyer segment

The same question asked on behalf of a different buyer. Each standing is computed within its segment; they sit side by side and are never added together.
Small businessBlumira28%ContestedThis pageMid-marketMicrosoft Sentinel41%Clear leaderStanding →EnterpriseMicrosoft Sentinel30%ContestedStanding →

The standing

Share is the count of first choices across the direct, paraphrase, budget and scale prompts, over all twelve models, for a small B2B company. Ordered by share.
ProductFirst-choice shareNegative rateLabelsQuadrant
01Blumira28%0%45accepted challenger
02Microsoft Sentinel28%16%62accepted challenger
03Wazuh17%22%49accepted challenger
04Huntress Managed SIEM9%0%27accepted challenger
05Sumo Logic Cloud SIEM7%7%15accepted challenger
06Elastic Security4%16%32accepted challenger
07ManageEngine Log3604%0%15accepted challenger
Show the five products at 0%, ordered by negative rate
11IBM QRadar0%95%20criticized challenger
12Splunk Enterprise Security0%77%44criticized challenger
10Graylog Security0%33%12criticized challenger
08Rapid7 InsightIDR0%17%12accepted challenger
09Datadog Cloud SIEM0%14%14accepted challenger
Bars are the share of first choices, 0 to 100Every product with at least 10 labels here. Every product name links to its product page.
Head to head
Microsoft Sentinel vs Rapid7 InsightIDRMicrosoft Sentinel vs WazuhMicrosoft Sentinel vs Elastic Security
Head-to-head pages are published for mid-market buyers, so these open on mid-market figures, not small business.
All twenty-one head-to-head pages: the top seven products, each against each
Microsoft Sentinel vs ManageEngine Log360Microsoft Sentinel vs BlumiraMicrosoft Sentinel vs LogRhythmRapid7 InsightIDR vs WazuhRapid7 InsightIDR vs Elastic SecurityRapid7 InsightIDR vs ManageEngine Log360Rapid7 InsightIDR vs BlumiraRapid7 InsightIDR vs LogRhythmWazuh vs Elastic SecurityWazuh vs ManageEngine Log360Wazuh vs BlumiraWazuh vs LogRhythmElastic Security vs ManageEngine Log360Elastic Security vs BlumiraElastic Security vs LogRhythmManageEngine Log360 vs BlumiraManageEngine Log360 vs LogRhythmBlumira vs LogRhythm

Recommended versus criticized

Every product with at least 10 labels here, on both axes. The 30% line names a quadrant, not the verdict above: that one needs more than 40%.

Criticized challengerCriticized default
Negative label rate →
01
02
03
04
05
06
07
08
09
G10
11
12
Accepted challengerEndorsed leader
0%First-choice share → · lines at 30% share and 25% negative40%
Key
01Blumira28%
02Microsoft Sentinel28%
03Wazuh17%
04Huntress Managed SIEM9%
05Sumo Logic Cloud SIEM7%
06Elastic Security4%
07ManageEngine Log3604%
08Rapid7 InsightIDR0%
09Datadog Cloud SIEM0%
10Graylog Security0%
11IBM QRadar0%
12Splunk Enterprise Security0%

What they warned about

Three of twelve models held their first choice under the paraphrase. Claude Haiku 4.5, Gemini 3.5 Flash, Perplexity Sonar, Mistral Small, DeepSeek V4 Flash, Llama 4 Maverick, Kimi K2, GLM 4.7 FlashX and MiniMax M2.5 changed. A high negative share on a product with few labels is a warning. A low share on a product with many labels is salience, not sentiment.
Splunk Enterprise Security
77%
34 of 44 labels negative · 12 of 12 models · 14 hard negative
“described as a tool small businesses can easily overbuy, and one source explicitly says SMBs usually find traditional enterprise SIEMs like Splunk a poor fit” Perplexity Sonar, negative prompt
IBM QRadar
95%
19 of 20 labels negative · 11 of 12 models · 11 hard negative
“Why to Avoid: These are massive, hardware-heavy systems designed for global compliance and threat hunting at scale.” Qwen 3.7 Flash, negative prompt
Wazuh
22%
11 of 49 labels negative · 8 of 12 models · 1 hard negative
“Wazuh has limited automation/ML, basic correlation, and no automated response” DeepSeek V4 Flash, negative prompt
Microsoft Sentinel
16%
10 of 62 labels negative · 8 of 12 models
“cost-effective only if you are already heavily invested in Microsoft 365/Azure, but ... consumption-based pricing can become expensive” Perplexity Sonar, budget prompt

What they cite

Twelve of the twelve models returned a source list in this edition: four return the pages they cited and eight the search results they consulted.

Sites the answers cite

61 of 72 answers in this category came back with a source list, from 12 of 12 models: citations where the model returns them, or the search results it consulted. 920 links across 180 sites, every framing counted. Ranked by the number of answers carrying the site or page.

q-sec.com
39 answers · 44 citations · 10 models
reddit.com
37 answers · 69 citations · 9 models
nohack.net
29 answers · 39 citations · 8 models
solutionsinsider.com
26 answers · 26 citations · 10 models
underdefense.com
vendor site · UnderDefense22 answers · 28 citations · 9 models
capterra.com
22 answers · 26 citations · 9 models
blogs.fluencysecurity.com
22 answers · 22 citations · 9 models
costbench.com
21 answers · 26 citations · 10 models
paloaltonetworks.com
vendor site · Palo Alto Networks18 answers · 19 citations · 7 models
blumira.com
vendor site · Blumira16 answers · 30 citations · 6 models
logmanager.com
vendor site · Logmanager16 answers · 16 citations · 7 models
sentinelone.com
vendor site · SentinelOne15 answers · 17 citations · 8 models

Pages the answers cite

The ten pages named in the most answers, by full address. A page here is one the models returned with a recommendation, not one the index endorses.

q-sec.com/siem-knowledge-base/best-siem-for-small-business
39 answers · 10 models
reddit.com/r/cybersecurity/comments/1b80zza/best_siem_solution_for_small_co…
35 answers · 9 models
solutionsinsider.com/continuity-and-compliance-solutions/best-siem-tools-fo…
26 answers · 10 models
blogs.fluencysecurity.com/siem-for-smbs
22 answers · 9 models
costbench.com/best/siem-for-small-business
21 answers · 10 models
nohack.net/best-siem-tools-small-businesses-2026
21 answers · 7 models
nohack.net/siem-tools-small-medium-businesses
18 answers · 8 models
underdefense.com/blog/siem-solutions-comparison
17 answers · 9 models
logmanager.com/blog/siem-for-small-businesses
16 answers · 7 models
paloaltonetworks.com/cyberpedia/siem-tools-comparison
16 answers · 7 models

Search against answers

Each company's standing in the answers beside its site's footprint in Google search, one row a site: the products the models named on it with their shares, and the share they add up to; monthly searches on Google, and DataForSEO's estimate of AI search demand (modeled from search signals, directional, not a count of queries to any assistant), for the most-searched of the company's and its products' names (the name is in each row's hover text); estimated monthly organic visits to the site; and its best position in Google's top ten for “best siem platform”, “siem platform”, “siem platforms”. US estimates from DataForSEO and Google's Ads Transparency Center. A small company's site, or a mid-sized company's site for its flagship, is marked company; a product on a large parent's site (Google, Microsoft) has no site figures. A column with no figures for this category is left out, and an empty cell means none were seen, not none exist. Two measurements side by side: neither is read as the cause of the other.
Company and productsShareOwn site citedName searches, GoogleAI search demand, est.Organic visitsPaid search a month, est.Google ads, last 30 days
Blumira blumira.com28%1081,300128,06010
Microsoft parent site
Microsoft Sentinel 28%		28%3712,240,000403,136
Wazuh wazuh.com17%1189,9004467,2143
Huntress huntress.com
Huntress Managed SIEM 9%		9%2433,1004,338352,368 company$15,522120
Sumo Logic Cloud SIEM sumologic.com7%4640182,749$4,12355
Elastic elastic.co
Elastic Security 4%		4%12474,00034,672208,306 company105
ManageEngine parent site
ManageEngine Log360 4%		4%1398,100675
Logmanager logmanager.com2%33
Rapid7 parent site
Rapid7 InsightIDR 0%		0%8814,800798
Datadog parent site
Datadog Cloud SIEM 0%		0%2774,0003,541

Google's top ten for the three searches hold 21 sites; 3 of them are among the sites the models cited here (reddit.com, sentinelone.com, underdefense.com). The first result for “best siem platform” is gartner.com.

How they answered

Six framings of the same buying question, each sent to every model in a fresh session with search on. One row per model, so a row shows whether it held its answer under rewording, what it named when cost was the constraint, and what it argued against. Computed from the raw judge labels.
ShowHide
ModelDirect“What is the best SIEM platform for a small B2B company?”Paraphrase“Which security information and event management tool would you recommend to a small business that sells to other businesses?”Comparative“What are the top SIEM platforms for a small team and how do they differ?”Budget-constrained“What is the best SIEM platform for a small company with a tight budget?”Scale-constrained“We are a 30 person company evaluating a SIEM platform. What should we look at?”Negative“Which SIEM platforms should a small business avoid or be cautious about?”
Claude Haiku 4.5Sumo Logic Cloud SIEM
Two alternativesDatadog Cloud SIEM, Huntress Managed SIEM
LogmanagerChanged
Two alternativesNetsurion, Sumo Logic Cloud SIEM
against: WazuhRapid7 InsightIDR
Two alternativesElastic Security, Microsoft Sentinel
Microsoft Sentinel
Two alternativesGraylog Security, Wazuh
against: Splunk Enterprise Securityno first choiceagainst: IBM QRadar, LogRhythm, Wazuh
GPT-5.4 miniMicrosoft Sentinel
Three alternativesElastic Security, Splunk Enterprise Security, Sumo Logic Cloud SIEM
Microsoft SentinelHeld
Four alternativesCrowdStrike Falcon Complete, CrowdStrike Falcon LogScale, Google Security Operations, Splunk Enterprise Security
against: WazuhMicrosoft Sentinel
One alternativeElastic Security
against: Splunk Enterprise SecurityElastic Security, Microsoft Sentinelagainst: CrowdStrike Falcon Next-Gen SIEMno first choiceagainst: CrowdStrike Falcon Next-Gen SIEM, Datadog Cloud SIEM, Google Security Operations, IBM QRadar, Microsoft Sentinel, Splunk Enterprise Security
Gemini 3.5 FlashBlumira
Three alternativesHuntress Managed SIEM, Microsoft Sentinel, Wazuh
against: Splunk Enterprise SecurityHuntress Managed SIEMChanged
Three alternativesBlumira, Microsoft Sentinel, Wazuh
against: Elastic Security, Splunk Enterprise SecurityBlumira, Huntress Managed SIEM
Three alternativesMicrosoft Sentinel, Stellar Cyber Next-Gen SIEM, Wazuh
against: IBM QRadar, Splunk Enterprise SecurityWazuh
Three alternativesBlumira, ManageEngine Log360, Microsoft Sentinel
against: IBM QRadar, Splunk Enterprise SecurityHuntress Managed SIEM
Three alternativesBlackpoint Cyber, Blumira, Red Canary
against: Microsoft Sentinel, Splunk Enterprise Securityagainst: AWS Security Lake / OpenSearch architectures, ELK Stack, IBM QRadar, Microsoft Sentinel, Palo Alto Networks Cortex XSIAM, Self-Hosted Wazuh or Graylog, Splunk Enterprise Security
Perplexity SonarBlumira, Microsoft Sentinel
Four alternativesDatadog Cloud SIEM, Elastic Security, Huntress Managed SIEM, Wazuh
BlumiraChanged
Two alternativesHuntress Managed SIEM, Microsoft Sentinel
Blumira, Microsoft Sentinel
Four alternativesElastic Security, Huntress Managed SIEM, Rapid7 InsightIDR, Wazuh
Blumira, Wazuh
One alternativeManageEngine Log360
against: Microsoft Sentinelno first choiceagainst: Darktrace, ExtraHop, IBM QRadar, IronNet, LogRhythm, Microsoft Sentinel, Splunk Enterprise Security, Vectra AI, Wazuh
Grok 4.20Blumira
Four alternativesHuntress Managed SIEM, ManageEngine Log360, Microsoft Sentinel, Wazuh
against: IBM QRadar, Splunk Enterprise SecurityBlumiraHeld
Two alternativesManageEngine Log360, Microsoft Sentinel
against: WazuhBlumira, Rapid7 InsightIDR
Three alternativesElastic Security, Microsoft Sentinel, Wazuh
Wazuh
Four alternativesBlumira, Fluency SIEM, ManageEngine Log360, Microsoft Sentinel
against: Rapid7 InsightIDR, Splunk Enterprise Securityno first choiceagainst: Darktrace, ExtraHop, IBM QRadar, IronNet, Splunk Enterprise Security, Vectra AI
Mistral SmallBlumira
One alternativeWazuh
against: Splunk Enterprise SecurityMicrosoft Sentinel, Sumo Logic Cloud SIEMChanged
Three alternativesBlumira, Elastic Security, Wazuh
Elastic Security, Microsoft Sentinel
One alternativeWazuh
against: Splunk Enterprise SecurityMicrosoft Sentinel, Wazuh
One alternativeBlumira
against: Elastic Securityno first choiceagainst: IBM QRadar, Palo Alto Networks Cortex XDR, Splunk Enterprise Securityagainst: Elastic Stack, Graylog Security, IBM QRadar, OpenSearch, Securonix Unified Defense SIEM, Splunk Enterprise Security, Sumo Logic Cloud SIEM, Wazuh
DeepSeek V4 FlashBlumira
Three alternativesManageEngine Log360, Microsoft Sentinel, Wazuh
against: CrowdStrike Falcon Next-Gen SIEM, Elastic Security, IBM QRadar, Splunk Enterprise SecurityBlumira, Huntress Managed SIEMChanged
Two alternativesManageEngine Log360, Microsoft Sentinel
against: WazuhBlumira
Three alternativesElastic Security, Microsoft Sentinel, Wazuh
against: Splunk Enterprise SecurityWazuh
Three alternativesBlumira, Elastic Security, Microsoft Sentinel
against: IBM QRadar, Splunk Enterprise Securityno first choice
Six alternativesBlumira, Elastic Security, Fluency, ManageEngine Log360, Sumo Logic Cloud SIEM, Wazuh
against: Microsoft Sentinelagainst: AT&T AlienVault, Elastic Stack, Graylog Security, IBM QRadar, LogRhythm, OpenSearch, OpenText ArcSight, Splunk Enterprise Security, Wazuh
Llama 4 Maverickno first choiceManageEngine Log360Changed
Two alternativesSolarWinds Security Event Manager, Wazuh
Blumira
Four alternativesElastic Security, Huntress Managed SIEM, Microsoft Sentinel, Splunk Enterprise Security
Sumo Logic Cloud SIEM
Three alternativesElastic Security, ManageEngine Log360, Microsoft Sentinel
no first choiceagainst: Darktrace, ExtraHop, IronNet, Microsoft Sentinel, Splunk Enterprise Security, Vectra AI
Qwen 3.7 FlashMicrosoft Sentinel
Three alternativesDatadog Cloud SIEM, ManageEngine SecurityManager Plus, Wazuh
against: IBM QRadar, Splunk Enterprise SecurityMicrosoft SentinelHeld
Three alternativesGraylog Security, ManageEngine Log360, Wazuh
Blumira, Huntress Managed SIEM
Three alternativesDatadog Cloud SIEM, Hunters, Microsoft Sentinel
against: WazuhWazuh
Three alternativesBlumira, Fluency SIEM, Microsoft Sentinel
Huntress Managed SIEM
Six alternativesCrowdStrike Falcon, Microsoft Defender, Microsoft Defender for Cloud, Microsoft Sentinel, SentinelOne, Wazuh
against: Elastic Security, Oracle Sentinel, Splunk Enterprise Securityagainst: ELK Stack, IBM QRadar, McAfee ePO, Microsoft Sentinel, OpenText ArcSight, Splunk Enterprise Security, Trend Micro Deep Security, Wazuh
Kimi K2Blumira, Microsoft Sentinel
Three alternativesHuntress Managed SIEM, ManageEngine Log360, Sumo Logic Cloud SIEM
against: Splunk Enterprise SecurityBlumiraChanged
One alternativeHuntress Managed SIEM
Rapid7 InsightIDR
Five alternativesBlumira, Datadog Cloud SIEM, Elastic Security, Microsoft Sentinel, Wazuh
Wazuh
Five alternativesBlumira, Elastic Security, Fluency SIEM, Microsoft Sentinel, Security Onion
no first choice
Four alternativesBlumira, Microsoft Sentinel, Rapid7 InsightIDR, Sumo Logic Cloud SIEM
against: IBM QRadar, OpenText ArcSight, Splunk Enterprise Securityagainst: ELK Stack, Graylog Security, IBM QRadar, Microsoft Sentinel, OpenSearch, Splunk Enterprise Security, Wazuh
GLM 4.7 FlashXBlumira
Four alternativesElastic Security, Huntress Managed SIEM, Microsoft Sentinel, Wazuh
Microsoft SentinelChanged
One alternativeBlumira
against: Splunk Enterprise SecurityMicrosoft Sentinel
Eight alternativesBlumira, Datadog Cloud SIEM, Elastic Security, Huntress Managed SIEM, LogRhythm, Rapid7 InsightIDR, Sumo Logic Cloud SIEM, Wazuh
against: Splunk Enterprise SecurityMicrosoft Sentinel
Two alternativesBlumira, Wazuh
against: ELK Stack, Graylog Securityno first choiceagainst: AlienVault (formerly Open Threat Exchange) / AT&T Cybersecurity, Datadog Cloud SIEM, Exabeam & LogRhythm, IBM QRadar, Microsoft Sentinel, Rapid7 InsightIDR, Splunk Enterprise Security
MiniMax M2.5Blumira, Microsoft Sentinel
Three alternativesGraylog Security, Huntress Managed SIEM, SolarWinds Security Event Manager
ManageEngine Log360Changed
One alternativeMicrosoft Sentinel
against: Splunk Enterprise SecurityWazuh
Five alternativesBlumira, Elastic Security, Huntress Managed SIEM, Microsoft Sentinel, Rapid7 InsightIDR
Elastic Security, Wazuh
Two alternativesGraylog Security, Sumo Logic Cloud SIEM
no first choiceagainst: Darktrace, Elastic Security, ExtraHop, IBM QRadar, IronNet, LogRhythm, Securonix Unified Defense SIEM, Splunk Enterprise Security, Vectra AI
Bold is the first choiceAlternatives are counted; the count opens them.What the answer argued against

The record

One row per call: the version string exactly as returned, whether the model searched, sources cited, and latency.
Seventy-two rows: every prompt, every model, every answer.
PromptModelVersion stringTime (UTC)SearchedSourcesLatency
Direct recommendationClaude Haiku 4.5claude-haiku-4-5-202510012026-09-17 08:19yes97 s
Direct recommendationGPT-5.4 minigpt-5.4-mini-2026-03-172026-09-17 08:54yes54 s
Direct recommendationGemini 3.5 Flashgemini-3.5-flash2026-09-17 08:16yes2224 s
Direct recommendationPerplexity Sonarsonar2026-09-17 09:09yes205 s
Direct recommendationGrok 4.20spacexai/grok-4.1-fast-non-reasoning via vertex (asked for grok-4.20-non-reasoning; the API answered as this version)2026-09-17 08:57yes4218 s
Direct recommendationMistral Smallmistral/mistral-small via mistral2026-09-17 08:21yes55 s
Direct recommendationDeepSeek V4 Flashdeepseek/deepseek-v4-flash via fireworks2026-09-17 09:05yes1719 s
Direct recommendationLlama 4 Maverickmeta/llama-4-maverick via bedrock2026-09-17 08:29yes53 s
Direct recommendationQwen 3.7 Flashalibaba/qwen3.7-flash via alibaba2026-09-17 08:37no051 s
Direct recommendationKimi K2moonshotai/kimi-k2 via novita2026-09-17 08:57yes720 s
Direct recommendationGLM 4.7 FlashXzai/glm-4.7-flashx via zai2026-09-17 09:02yes3161 s
Direct recommendationMiniMax M2.5minimax/minimax-m2.5 via minimax2026-09-17 08:42yes847 s
ParaphraseClaude Haiku 4.5claude-haiku-4-5-202510012026-09-17 08:25yes159 s
ParaphraseGPT-5.4 minigpt-5.4-mini-2026-03-172026-09-17 08:44no03 s
ParaphraseGemini 3.5 Flashgemini-3.5-flash2026-09-17 09:04yes1628 s
ParaphrasePerplexity Sonarsonar2026-09-17 08:50yes205 s
ParaphraseGrok 4.20spacexai/grok-4.1-fast-non-reasoning via vertex (asked for grok-4.20-non-reasoning; the API answered as this version)2026-09-17 08:34yes3515 s
ParaphraseMistral Smallmistral/mistral-small via mistral2026-09-17 08:19yes56 s
ParaphraseDeepSeek V4 Flashdeepseek/deepseek-v4-flash via fireworks2026-09-17 08:52yes1818 s
ParaphraseLlama 4 Maverickmeta/llama-4-maverick via bedrock2026-09-17 08:51yes52 s
ParaphraseQwen 3.7 Flashalibaba/qwen3.7-flash via alibaba2026-09-17 08:42no059 s
ParaphraseKimi K2moonshotai/kimi-k2 via novita2026-09-17 09:03yes2027 s
ParaphraseGLM 4.7 FlashXzai/glm-4.7-flashx via zai2026-09-17 08:22yes28189 s
ParaphraseMiniMax M2.5minimax/minimax-m2.5 via minimax2026-09-17 09:07yes1547 s
ComparativeClaude Haiku 4.5claude-haiku-4-5-202510012026-09-17 08:17yes1810 s
ComparativeGPT-5.4 minigpt-5.4-mini-2026-03-172026-09-17 08:27yes37 s
ComparativeGemini 3.5 Flashgemini-3.5-flash2026-09-17 08:59yes1727 s
ComparativePerplexity Sonarsonar2026-09-17 08:18yes207 s
ComparativeGrok 4.20spacexai/grok-4.1-fast-non-reasoning via vertex (asked for grok-4.20-non-reasoning; the API answered as this version)2026-09-17 09:07yes2813 s
ComparativeMistral Smallmistral/mistral-small via mistral2026-09-17 09:04yes57 s
ComparativeDeepSeek V4 Flashdeepseek/deepseek-v4-flash via fireworks2026-09-17 08:25yes1822 s
ComparativeLlama 4 Maverickmeta/llama-4-maverick via bedrock2026-09-17 08:28yes53 s
ComparativeQwen 3.7 Flashalibaba/qwen3.7-flash via alibaba2026-09-17 08:43yes550 s
ComparativeKimi K2moonshotai/kimi-k2 via novita2026-09-17 09:10yes947 s
ComparativeGLM 4.7 FlashXzai/glm-4.7-flashx via zai2026-09-17 08:25yes841 s
ComparativeMiniMax M2.5minimax/minimax-m2.5 via minimax2026-09-17 08:38yes1437 s
Budget constrainedClaude Haiku 4.5claude-haiku-4-5-202510012026-09-17 08:55no05 s
Budget constrainedGPT-5.4 minigpt-5.4-mini-2026-03-172026-09-17 08:22yes45 s
Budget constrainedGemini 3.5 Flashgemini-3.5-flash2026-09-17 09:02yes1926 s
Budget constrainedPerplexity Sonarsonar2026-09-17 08:55yes206 s
Budget constrainedGrok 4.20spacexai/grok-4.1-fast-non-reasoning via vertex (asked for grok-4.20-non-reasoning; the API answered as this version)2026-09-17 09:08yes4518 s
Budget constrainedMistral Smallmistral/mistral-small via mistral2026-09-17 09:04yes54 s
Budget constrainedDeepSeek V4 Flashdeepseek/deepseek-v4-flash via fireworks2026-09-17 08:43yes1917 s
Budget constrainedLlama 4 Maverickmeta/llama-4-maverick via bedrock2026-09-17 08:18yes52 s
Budget constrainedQwen 3.7 Flashalibaba/qwen3.7-flash via alibaba2026-09-17 08:59yes1553 s
Budget constrainedKimi K2moonshotai/kimi-k2 via novita2026-09-17 08:59yes1026 s
Budget constrainedGLM 4.7 FlashXzai/glm-4.7-flashx via zai2026-09-17 08:26yes29126 s
Budget constrainedMiniMax M2.5minimax/minimax-m2.5 via minimax2026-09-17 08:51yes522 s
Scale constrainedClaude Haiku 4.5claude-haiku-4-5-202510012026-09-17 08:16no07 s
Scale constrainedGPT-5.4 minigpt-5.4-mini-2026-03-172026-09-17 08:26no07 s
Scale constrainedGemini 3.5 Flashgemini-3.5-flash2026-09-17 08:55yes721 s
Scale constrainedPerplexity Sonarsonar2026-09-17 08:39yes2013 s
Scale constrainedGrok 4.20spacexai/grok-4.1-fast-non-reasoning via vertex (asked for grok-4.20-non-reasoning; the API answered as this version)2026-09-17 08:50yes1810 s
Scale constrainedMistral Smallmistral/mistral-small via mistral2026-09-17 09:08no011 s
Scale constrainedDeepSeek V4 Flashdeepseek/deepseek-v4-flash via fireworks2026-09-17 08:32yes1419 s
Scale constrainedLlama 4 Maverickmeta/llama-4-maverick via bedrock2026-09-17 09:04yes53 s
Scale constrainedQwen 3.7 Flashalibaba/qwen3.7-flash via alibaba2026-09-17 09:03no043 s
Scale constrainedKimi K2moonshotai/kimi-k2 via novita2026-09-17 08:42yes1476 s
Scale constrainedGLM 4.7 FlashXzai/glm-4.7-flashx via zai2026-09-17 08:54no011 s
Scale constrainedMiniMax M2.5minimax/minimax-m2.5 via minimax2026-09-17 09:03no013 s
Negative framingClaude Haiku 4.5claude-haiku-4-5-202510012026-09-17 08:56yes1410 s
Negative framingGPT-5.4 minigpt-5.4-mini-2026-03-172026-09-17 09:01yes26 s
Negative framingGemini 3.5 Flashgemini-3.5-flash2026-09-17 08:44yes1524 s
Negative framingPerplexity Sonarsonar2026-09-17 08:25yes208 s
Negative framingGrok 4.20spacexai/grok-4.1-fast-non-reasoning via vertex (asked for grok-4.20-non-reasoning; the API answered as this version)2026-09-17 08:33yes3415 s
Negative framingMistral Smallmistral/mistral-small via mistral2026-09-17 08:44yes118 s
Negative framingDeepSeek V4 Flashdeepseek/deepseek-v4-flash via fireworks2026-09-17 08:45yes2824 s
Negative framingLlama 4 Maverickmeta/llama-4-maverick via bedrock2026-09-17 08:55yes54 s
Negative framingQwen 3.7 Flashalibaba/qwen3.7-flash via alibaba2026-09-17 09:03no040 s
Negative framingKimi K2moonshotai/kimi-k2 via novita2026-09-17 08:17yes1025 s
Negative framingGLM 4.7 FlashXzai/glm-4.7-flashx via zai2026-09-17 08:39yes1658 s
Negative framingMiniMax M2.5minimax/minimax-m2.5 via minimax2026-09-17 08:56yes1331 s

Normalization in this category

Every judgment call made between the raw labels and the numbers above, listed so it is visible and reversible.

ShowHide
Category-scoped readings
ArcSight read as OpenText ArcSight
Cortex XSIAM read as Palo Alto Networks Cortex XSIAM
Datadog read as Datadog Cloud SIEM
Datadog Security read as Datadog Cloud SIEM
ELK (Elastic) read as ELK Stack
Elastic read as Elastic Security
Elastic Cloud read as Elastic Security
Google Chronicle read as Google Security Operations
Google SecOps / Chronicle read as Google Security Operations
Graylog read as Graylog Security
Huntress read as Huntress Managed SIEM
Rapid7 read as Rapid7 InsightIDR
Securonix read as Securonix Unified Defense SIEM
Splunk read as Splunk Enterprise Security
Splunk (Enterprise/Cloud) read as Splunk Enterprise Security
Splunk Cloud read as Splunk Enterprise Security
Splunk Enterprise read as Splunk Enterprise Security
Splunk Enterprise / Splunk Cloud read as Splunk Enterprise Security
Splunk Enterprise Edition read as Splunk Enterprise Security
Stellar Cyber read as Stellar Cyber Next-Gen SIEM
Sumo Logic read as Sumo Logic Cloud SIEM
Vectra read as Vectra AI
Unresolved, counted raw
AT&T AlienVault (USM Anywhere / OSSIM)
AWS Security Lake / OpenSearch architectures
AlienVault (formerly Open Threat Exchange) / AT&T Cybersecurity
ManageEngine SecurityManager Plus
McAfee ePO
Netsurion
Oracle Sentinel
Perch
Self-Hosted Wazuh or Graylog
Trend Micro Deep Security
Discontinued, still offered
No shut-down product was recommended here.

Also in security operations

The other categories of this function, with the leader in each.
← Awareness trainingSOAR →