SOAR platforms for small business buyers
Asked as “SOAR platform”, and as “security orchestration and automated response tool”, on behalf of a small B2B company. 43 first choices recorded across the direct, paraphrase, budget and scale prompts, twelve models each.
Standing · first-choice share
49%
TinesClear leader
49Tines09ManageEngine Log36007Blumira35others
49% of first choices, clear leader.
By buyer segment
The same question asked on behalf of a different buyer. Each standing is computed within its segment; they sit side by side and are never added together.
The standing
Share is the count of first choices across the direct, paraphrase, budget and scale prompts, over all twelve models, for a small B2B company. Ordered by share.
ProductFirst-choice shareNegative rateLabelsQuadrant
Show the three products at 0%, ordered by negative rate
Bars are the share of first choices, 0 to 100Every product with at least 10 labels here. Every product name links to its product page.
Head to headHead-to-head pages are published for mid-market buyers, so these open on mid-market figures, not small business.
All twenty-eight head-to-head pages: the top eight products, each against each
Tines vs TorqTines vs Microsoft SentinelTines vs FortiSOARTines vs Cortex XSOARRapid7 InsightConnect vs ShuffleRapid7 InsightConnect vs Swimlane TurbineRapid7 InsightConnect vs TorqRapid7 InsightConnect vs Microsoft SentinelRapid7 InsightConnect vs FortiSOARRapid7 InsightConnect vs Cortex XSOARShuffle vs Swimlane TurbineShuffle vs TorqShuffle vs Microsoft SentinelShuffle vs FortiSOARShuffle vs Cortex XSOARSwimlane Turbine vs TorqSwimlane Turbine vs Microsoft SentinelSwimlane Turbine vs FortiSOARSwimlane Turbine vs Cortex XSOARTorq vs Microsoft SentinelTorq vs FortiSOARTorq vs Cortex XSOARMicrosoft Sentinel vs FortiSOARMicrosoft Sentinel vs Cortex XSOARFortiSOAR vs Cortex XSOAR
One product takes 49% of first choices here, so the chart would put eight markers in one corner and one at the far edge. The two measurements it plots are columns in the standing above: share, and the negative label rate. Five products carry a negative rate above 25% in this category.
What they warned about
Seven of twelve models held their first choice under the paraphrase. Claude Haiku 4.5, Grok 4.20, Mistral Small, GLM 4.7 FlashX and MiniMax M2.5 changed. A high negative share on a product with few labels is a warning. A low share on a product with many labels is salience, not sentiment.
Splunk SOAR60%
27 of 45 labels negative · 12 of 12 models · 14 hard negative
“Major enterprise platforms like Cortex XSOAR, Splunk SOAR, and Swimlane are excellent but generally overkill and overpriced for a small B2B company” DeepSeek V4 Flash, direct prompt
Cortex XSOAR77%
30 of 39 labels negative · 11 of 12 models · 15 hard negative
“avoid the "enterprise giants" (like Palo Alto Cortex XSOAR, Splunk SOAR, or IBM QRadar SOAR)—they are far too heavy and expensive” Gemini 3.5 Flash, scale prompt
Swimlane Turbine52%
11 of 21 labels negative · 8 of 12 models · 7 hard negative
“Cited as expensive and overly complicated; requires deep technical expertise and ongoing maintenance, making it less suitable for smaller operations.” GLM 4.7 FlashX, negative prompt
Torq30%
7 of 23 labels negative · 6 of 12 models · 1 hard negative
“Avoid for Tight Budgets: ... or Torq (~$20K+/year starters, quote-only)” Grok 4.20, budget prompt
What they cite
Twelve of the twelve models returned a source list in this edition: four return the pages they cited and eight the search results they consulted.
Sites the answers cite
66 of 72 answers in this category came back with a source list, from 12 of 12 models: citations where the model returns them, or the search results it consulted. 1022 links across 192 sites, every framing counted. Ranked by the number of answers carrying the site or page.
vendor site · Palo Alto Networks45 answers · 46 citations · 12 models
36 answers · 43 citations · 11 models
36 answers · 37 citations · 11 models
vendor site · BlinkOps33 answers · 35 citations · 10 models
32 answers · 32 citations · 9 models
vendor site · G222 answers · 34 citations · 10 models
20 answers · 36 citations · 7 models
19 answers · 27 citations · 8 models
vendor site · Exabeam19 answers · 24 citations · 10 models
17 answers · 22 citations · 8 models
17 answers · 17 citations · 8 models
vendor site · Swimlane16 answers · 21 citations · 10 models
Pages the answers cite
The ten pages named in the most answers, by full address. A page here is one the models returned with a recommendation, not one the index endorses.
44 answers · 12 models
35 answers · 11 models
35 answers · 11 models
33 answers · 10 models
32 answers · 9 models
17 answers · 8 models
16 answers · 5 models
14 answers · 7 models
14 answers · 7 models
12 answers · 8 models
Search against answers
Each company's standing in the answers beside its site's footprint in Google search, one row a site: the products the models named on it with their shares, and the share they add up to; monthly searches on Google, and DataForSEO's estimate of AI search demand (modeled from search signals, directional, not a count of queries to any assistant), for the most-searched of the company's and its products' names (the name is in each row's hover text); estimated monthly organic visits to the site; and its best position in Google's top ten for “best soar platform”, “soar platform”, “soar platforms”. US estimates from DataForSEO and Google's Ads Transparency Center. A small company's site, or a mid-sized company's site for its flagship, is marked company; a product on a large parent's site (Google, Microsoft) has no site figures. A column with no figures for this category is left out, and an empty cell means none were seen, not none exist. Two measurements side by side: neither is read as the cause of the other.
| Company and products | Share | Own site cited | Name searches, Google | AI search demand, est. | Organic visits | Google ads, last 30 days |
|---|---|---|---|---|---|---|
| Tines tines.com | 49% | 168 | 22,200 | 3,167 | 10,888 | 97 |
| ManageEngine parent site ManageEngine Log360 9% | 9% | 139 | 8,100 | 675 | ||
| Rapid7 parent site Rapid7 InsightConnect 7% | 7% | 58 | 14,800 | 798 | ||
| Blumira blumira.com | 7% | 108 | 1,300 | 12 | 8,060 | 10 |
| Splunk parent site Splunk SOAR 7% | 7% | 177 | 40,500 | 6,832 | ||
| Shuffle shuffler.io | 5% | 45 | 60,500 | 19,550 | 1,726 | |
| Microsoft parent site Microsoft Sentinel 5%, Microsoft Defender 0% | 5% | 371 | 2,240,000 | 403,136 | ||
| Torq torq.io | 2% | 98 | 6,600 | 1,467 | 5,966 | 6 |
| SIRP sirp.io | 2% | 2 | ||||
| Tracecat tracecat.com | 2% | 14 |
Google's top ten for the three searches hold 22 sites; 5 of them are among the sites the models cited here (blinkops.com, gartner.com, paloaltonetworks.com, reddit.com, swimlane.com). The first result for “best soar platform” is reddit.com.
How they answered
Six framings of the same buying question, each sent to every model in a fresh session with search on. One row per model, so a row shows whether it held its answer under rewording, what it named when cost was the constraint, and what it argued against. Computed from the raw judge labels.ShowHide
How they answered
Six framings of the same buying question, each sent to every model in a fresh session with search on. One row per model, so a row shows whether it held its answer under rewording, what it named when cost was the constraint, and what it argued against. Computed from the raw judge labels.
ShowHideModelDirect“What is the best SOAR platform for a small B2B company?”Paraphrase“Which security orchestration and automated response tool would you recommend to a small business that sells to other businesses?”Comparative“What are the top SOAR platforms for a small team and how do they differ?”Budget-constrained“What is the best SOAR platform for a small company with a tight budget?”Scale-constrained“We are a 30 person company evaluating a SOAR platform. What should we look at?”Negative“Which SOAR platforms should a small business avoid or be cautious about?”
Claude Haiku 4.5Tinesno first choiceChangedTinesTinesno first choiceagainst: ArcSight SOAR, Splunk SOAR
Two alternatives
Microsoft Sentinel, Rapid7 InsightConnectThree alternatives
Cortex XSOAR, Rapid7 InsightConnect, Splunk SOARThree alternatives
Rapid7 InsightConnect, Shuffle, TorqThree alternatives
Shuffle, StackStorm, TheHive with CortexGPT-5.4 miniSplunk SOARSplunk SOARHeldTinesSplunk SOARno first choiceagainst: Cortex XSOAR, FortiSOAR, IBM QRadar SOAR, Splunk SOAR
One alternative
Cortex XSOARTwo alternatives
FortiSOAR, TinesFour alternatives
Cortex XSOAR, Google Security Operations SOAR, IBM QRadar SOAR, Splunk SOAROne alternative
IBM QRadar SOARGemini 3.5 FlashTinesagainst: Cortex XSOAR, IBM QRadar SOAR, Splunk SOARTinesHeldagainst: Cortex XSOAR, Splunk SOARTinesagainst: Cortex XSOAR, Splunk SOARTinesTinesagainst: Cortex XSOAR, IBM QRadar SOAR, Splunk SOARagainst: Cortex XSOAR, FortiSOAR, Google Security Operations SOAR, IBM QRadar SOAR, Microsoft Sentinel, Splunk SOAR, Swimlane Turbine, Tines, Torq
Three alternatives
Microsoft Sentinel, Shuffle, TorqThree alternatives
Microsoft Sentinel, Shuffle, TorqThree alternatives
BlinkOps, Shuffle, TorqThree alternatives
Shuffle, Tracecat, n8nFive alternatives
BlinkOps, Make, Microsoft Sentinel, Shuffle, ZapierPerplexity SonarManageEngine Log360ManageEngine Log360HeldTines, Torqagainst: Cortex XSOARManageEngine Log360no first choiceagainst: Cortex XSOAR, Palo Alto Networks Cortex XSIAM, Splunk SOAR, Swimlane Turbine, Torq
Two alternatives
Proofpoint Threat Response, Splunk SOARFour alternatives
Microsoft Sentinel, Rapid7 InsightConnect, Splunk SOAR, TinesTwo alternatives
Microsoft Sentinel, Splunk SOAROne alternative
Rapid7 InsightConnectGrok 4.20Tinesagainst: Cortex XSOAR, Splunk SOARManageEngine Log360Changedagainst: Cortex XSOAR, Swimlane TurbineShuffle, Tinesagainst: Cortex XSOAR, Splunk SOAR, Swimlane Turbine, TorqTinesagainst: Cortex XSOAR, Microsoft Sentinel, Splunk SOAR, Torqno first choiceagainst: Cortex XSOAR, IBM QRadar SOAR, Splunk SOAR, Swimlane Turbine
Two alternatives
Microsoft Sentinel, ORNAOne alternative
BlumiraTwo alternatives
Microsoft Sentinel, Rapid7 InsightConnectTwo alternatives
ManageEngine Log360, ShuffleMistral SmallTinesSIRPChangedTines, Torqagainst: Swimlane TurbineBlumira, Tinesno first choiceagainst: Cortex XSOAR, Splunk SOARagainst: Microsoft Sentinel, Rapid7 InsightConnect
One alternative
Cortex XSOARTwo alternatives
Splunk SOAR, TheHiveOne alternative
ManageEngine Log360Three alternatives
D3 Security Smart SOAR, Google Security Operations SOAR, TheHiveDeepSeek V4 FlashTinesagainst: Cortex XSOAR, Splunk SOAR, Swimlane TurbineTinesHeldagainst: Cortex XSOAR, TorqTinesTracecatTinesagainst: Cortex XSOAR, Splunk SOAR, Swimlane Turbine, Tines
One alternative
ShuffleTwo alternatives
SIRP, ShuffleThree alternatives
Shuffle, Swimlane Turbine, TorqThree alternatives
Shuffle, StackStorm, n8nFour alternatives
BlinkOps, Cortex XSOAR, Splunk SOAR, Swimlane TurbineLlama 4 Maverickno first choiceno first choiceHeldno first choiceMicrosoft Sentinel, Rapid7 InsightConnect, Tinesno first choiceagainst: Cortex XSOAR, Splunk SOAR
Two alternatives
FortiSOAR, LogRhythm AxonQwen 3.7 FlashTinesagainst: Cortex XSOAR, Splunk SOAR, Swimlane TurbineTinesHeldTinesagainst: IBM QRadar SOAR, Splunk SOARShuffle, Wazuhagainst: Cortex XSOAR, Splunk SOARno first choiceagainst: Cortex XSOAR, IBM QRadar SOAR, Splunk SOAR
Two alternatives
Microsoft Sentinel, Rapid7 InsightConnectTwo alternatives
Microsoft Sentinel, ServiceNow Security OperationsThree alternatives
D3 Security Smart SOAR, Tracecat, n8nThree alternatives
Azure Logic Apps, Microsoft Power Automate, TheHive + CortexKimi K2TinesTinesHeldagainst: Cortex XSOAR, D3 Security Smart SOAR, Splunk SOAR, Swimlane TurbineTinesagainst: Splunk SOARShuffle, TinesTines, Torqagainst: Cortex XSOAR, Splunk SOAR
Three alternatives
Microsoft Sentinel, Rapid7 InsightConnect, ShuffleTwo alternatives
Rapid7 InsightIDR, ShuffleTwo alternatives
Rapid7 InsightConnect, ShuffleThree alternatives
Blumira, TheHive + Cortex, TorqTwo alternatives
Microsoft Sentinel, Splunk SOARGLM 4.7 FlashXBlumiraagainst: Cortex XSOARORNAChangedno first choiceBlumirano first choiceagainst: Cortex XSOARagainst: Cortex XSOAR, FortiSOAR, Google Security Operations SOAR, IBM QRadar SOAR, ManageEngine Log360, Splunk SOAR, Swimlane Turbine, Torq, XSIAM
Three alternatives
D3 Security Smart SOAR, Swimlane Turbine, TinesTwo alternatives
FortiSOAR, TinesThree alternatives
OpenCTI, Splunk SOAR, TinesMiniMax M2.5Microsoft Sentinel, Rapid7 InsightConnectagainst: Cortex XSOAR, Splunk SOARRapid7 InsightConnectChangedagainst: Cortex XSOAR, Splunk SOARTinesagainst: Huginn, Shuffle, n8nTinesagainst: Torqno first choiceagainst: Cortex XSOAR, Microsoft Sentinel, Splunk SOAR
One alternative
Swimlane TurbineOne alternative
SIRPFour alternatives
Cyware, D3 Security Smart SOAR, Rapid7 InsightConnect, Swimlane TurbineThree alternatives
Microsoft Sentinel, UnderDefense MAXI, WazuhBold is the first choiceAlternatives are counted; the count opens them.What the answer argued against
The record
One row per call: the version string exactly as returned, whether the model searched, sources cited, and latency.
Seventy-two rows: every prompt, every model, every answer.
| Prompt | Model | Version string | Time (UTC) | Searched | Sources | Latency |
|---|---|---|---|---|---|---|
| Direct recommendation | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-09-17 11:37 | yes | 9 | 6 s |
| Direct recommendation | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-09-17 10:08 | yes | 2 | 4 s |
| Direct recommendation | Gemini 3.5 Flash | gemini-3.5-flash | 2026-09-17 13:14 | yes | 16 | 22 s |
| Direct recommendation | Perplexity Sonar | sonar | 2026-09-17 10:52 | yes | 20 | 5 s |
| Direct recommendation | Grok 4.20 | spacexai/grok-4.1-fast-non-reasoning via vertex (asked for grok-4.20-non-reasoning; the API answered as this version) | 2026-09-17 10:03 | yes | 35 | 19 s |
| Direct recommendation | Mistral Small | mistral/mistral-small via mistral | 2026-09-17 13:46 | yes | 10 | 10 s |
| Direct recommendation | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via fireworks | 2026-09-17 09:35 | yes | 19 | 18 s |
| Direct recommendation | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-09-17 10:49 | yes | 5 | 3 s |
| Direct recommendation | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-09-17 12:59 | yes | 20 | 98 s |
| Direct recommendation | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-09-17 11:39 | yes | 25 | 51 s |
| Direct recommendation | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-09-17 09:27 | yes | 27 | 165 s |
| Direct recommendation | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-09-17 10:45 | yes | 5 | 19 s |
| Paraphrase | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-09-17 13:14 | no | 0 | 4 s |
| Paraphrase | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-09-17 10:26 | yes | 6 | 5 s |
| Paraphrase | Gemini 3.5 Flash | gemini-3.5-flash | 2026-09-17 11:54 | yes | 8 | 18 s |
| Paraphrase | Perplexity Sonar | sonar | 2026-09-17 10:20 | yes | 20 | 5 s |
| Paraphrase | Grok 4.20 | spacexai/grok-4.1-fast-non-reasoning via vertex (asked for grok-4.20-non-reasoning; the API answered as this version) | 2026-09-17 10:41 | yes | 32 | 20 s |
| Paraphrase | Mistral Small | mistral/mistral-small via mistral | 2026-09-17 13:43 | yes | 5 | 6 s |
| Paraphrase | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via fireworks | 2026-09-17 09:51 | yes | 25 | 19 s |
| Paraphrase | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-09-17 10:49 | yes | 5 | 3 s |
| Paraphrase | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-09-17 14:08 | yes | 9 | 88 s |
| Paraphrase | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-09-17 12:14 | yes | 12 | 44 s |
| Paraphrase | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-09-17 13:17 | yes | 22 | 49 s |
| Paraphrase | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-09-17 13:22 | yes | 8 | 58 s |
| Comparative | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-09-17 13:27 | yes | 28 | 14 s |
| Comparative | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-09-17 12:33 | yes | 4 | 8 s |
| Comparative | Gemini 3.5 Flash | gemini-3.5-flash | 2026-09-17 09:52 | yes | 16 | 36 s |
| Comparative | Perplexity Sonar | sonar | 2026-09-17 13:52 | yes | 20 | 8 s |
| Comparative | Grok 4.20 | spacexai/grok-4.1-fast-non-reasoning via vertex (asked for grok-4.20-non-reasoning; the API answered as this version) | 2026-09-17 11:25 | yes | 39 | 17 s |
| Comparative | Mistral Small | mistral/mistral-small via mistral | 2026-09-17 09:32 | yes | 29 | 16 s |
| Comparative | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via fireworks | 2026-09-17 10:32 | yes | 23 | 23 s |
| Comparative | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-09-17 10:58 | yes | 5 | 2 s |
| Comparative | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-09-17 12:25 | yes | 10 | 44 s |
| Comparative | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-09-17 10:53 | yes | 15 | 64 s |
| Comparative | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-09-17 10:03 | yes | 14 | 60 s |
| Comparative | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-09-17 09:55 | yes | 8 | 21 s |
| Budget constrained | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-09-17 14:07 | yes | 9 | 8 s |
| Budget constrained | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-09-17 12:04 | yes | 4 | 6 s |
| Budget constrained | Gemini 3.5 Flash | gemini-3.5-flash | 2026-09-17 09:59 | yes | 20 | 22 s |
| Budget constrained | Perplexity Sonar | sonar | 2026-09-17 11:17 | yes | 20 | 6 s |
| Budget constrained | Grok 4.20 | spacexai/grok-4.1-fast-non-reasoning via vertex (asked for grok-4.20-non-reasoning; the API answered as this version) | 2026-09-17 13:31 | yes | 43 | 19 s |
| Budget constrained | Mistral Small | mistral/mistral-small via mistral | 2026-09-17 09:58 | yes | 8 | 7 s |
| Budget constrained | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via fireworks | 2026-09-17 13:19 | yes | 10 | 12 s |
| Budget constrained | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-09-17 09:39 | yes | 5 | 3 s |
| Budget constrained | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-09-17 13:32 | no | 0 | 44 s |
| Budget constrained | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-09-17 10:52 | yes | 9 | 20 s |
| Budget constrained | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-09-17 11:23 | yes | 32 | 103 s |
| Budget constrained | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-09-17 12:37 | yes | 13 | 40 s |
| Scale constrained | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-09-17 09:58 | no | 0 | 6 s |
| Scale constrained | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-09-17 09:58 | no | 0 | 7 s |
| Scale constrained | Gemini 3.5 Flash | gemini-3.5-flash | 2026-09-17 14:03 | yes | 6 | 23 s |
| Scale constrained | Perplexity Sonar | sonar | 2026-09-17 11:49 | yes | 20 | 7 s |
| Scale constrained | Grok 4.20 | spacexai/grok-4.1-fast-non-reasoning via vertex (asked for grok-4.20-non-reasoning; the API answered as this version) | 2026-09-17 11:36 | yes | 17 | 10 s |
| Scale constrained | Mistral Small | mistral/mistral-small via mistral | 2026-09-17 13:41 | no | 0 | 8 s |
| Scale constrained | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via fireworks | 2026-09-17 12:23 | yes | 10 | 17 s |
| Scale constrained | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-09-17 13:23 | yes | 5 | 3 s |
| Scale constrained | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-09-17 12:28 | no | 0 | 36 s |
| Scale constrained | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-09-17 12:43 | yes | 10 | 27 s |
| Scale constrained | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-09-17 13:54 | yes | 15 | 45 s |
| Scale constrained | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-09-17 13:42 | yes | 5 | 17 s |
| Negative framing | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-09-17 11:07 | yes | 16 | 16 s |
| Negative framing | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-09-17 09:32 | yes | 5 | 8 s |
| Negative framing | Gemini 3.5 Flash | gemini-3.5-flash | 2026-09-17 12:10 | yes | 18 | 204 s |
| Negative framing | Perplexity Sonar | sonar | 2026-09-17 09:37 | yes | 20 | 6 s |
| Negative framing | Grok 4.20 | spacexai/grok-4.1-fast-non-reasoning via vertex (asked for grok-4.20-non-reasoning; the API answered as this version) | 2026-09-17 12:24 | yes | 40 | 18 s |
| Negative framing | Mistral Small | mistral/mistral-small via mistral | 2026-09-17 09:27 | yes | 5 | 5 s |
| Negative framing | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via fireworks | 2026-09-17 11:34 | yes | 28 | 26 s |
| Negative framing | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-09-17 11:50 | yes | 5 | 3 s |
| Negative framing | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-09-17 11:19 | yes | 10 | 48 s |
| Negative framing | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-09-17 11:11 | yes | 23 | 35 s |
| Negative framing | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-09-17 10:57 | yes | 25 | 54 s |
| Negative framing | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-09-17 11:57 | yes | 10 | 35 s |
Normalization in this category
Every judgment call made between the raw labels and the numbers above, listed so it is visible and reversible.
ShowHide
Category-scoped readings
D3 read as D3 Security Smart SOAR
D3 Security read as D3 Security Smart SOAR
Google Chronicle read as Google Security Operations SOAR
Google Security Operations read as Google Security Operations SOAR
Microsoft Sentinel + Logic Apps read as Microsoft Sentinel
Palo Alto Cortex XSOAR read as Cortex XSOAR
Palo Alto Networks Cortex XSOAR read as Cortex XSOAR
Palo Alto Networks' Cortex XSOAR read as Cortex XSOAR
Splunk read as Splunk SOAR
Swimlane read as Swimlane Turbine
Unresolved, counted raw
CyberArk Covisix
Proofpoint Threat Response
Discontinued, still offered
No shut-down product was recommended here.