Zero of fourteen models named Splunk SOAR first on the direct prompt; one named Rapid7 InsightConnect. Splunk SOAR was named by fourteen of the fourteen models and Rapid7 InsightConnect by ten and Splunk SOAR carries 57 labels and Rapid7 InsightConnect 19, so the shares are not directly comparable.
Named in two categories this edition.
Named in two categories this edition.
Share is the count of first choices across the direct, paraphrase, budget and scale prompts over all fourteen models, for a mid-market B2B company; rank is within the category; every quote names the model and the prompt it came from. Both figures come from the SOAR platforms page.
Across every category in the November 2026 Edition, Splunk SOAR and Rapid7 InsightConnect were named in the same answer forty-nine times, of the 197 answers naming Splunk SOAR and the 60 naming Rapid7 InsightConnect. In those answers Rapid7 InsightConnect took the first choice four times and Splunk SOAR zero.
| Model | Direct | Paraphrase | Comparative | Budget-constrained | Scale-constrained | Negative |
|---|---|---|---|---|---|---|
| Claude Haiku 4.5 | ||||||
| GPT-5.4 mini | ||||||
| Gemini 3.5 Flash | ||||||
| Perplexity Sonar | ||||||
| Grok 4.20 | ||||||
| Mistral Small | ||||||
| DeepSeek V4 Flash | ||||||
| Llama 4 Maverick | ||||||
| Qwen 3.7 Flash | ||||||
| Kimi K2 | ||||||
| GLM 4.7 FlashX | ||||||
| MiniMax M2.5 | ||||||
| GPT-6 Luna | ||||||
| Muse Glimmer 30B |
Bold names in an answer are the products the judge labeled a first choice; a model naming several gives each of them that label. The full answer text for every row is in the record.
Every negative label with a quote, up to three, then the highest-weighted positives, up to three. Six of eight in this category shown.
“Avoid for tight budgets: Enterprise-heavy tools like Palo Alto Cortex XSOAR, Splunk SOAR, or FortiSOAR” Grok 4.20 · budget prompt · hard negative
“Avoid for Mid-Sized B2B: ... Splunk SOAR – Similarly heavy on licensing and complexity” DeepSeek V4 Flash · paraphrase prompt · hard negative
“Avoid being swayed by the largest enterprise platforms (Splunk SOAR, IBM QRadar SOAR)” DeepSeek V4 Flash · scale prompt · hard negative
“Palo Alto Networks Cortex XSOAR and Splunk SOAR are top recommendations” Mistral Small · paraphrase prompt · first choice
“I recommend Splunk SOAR (formerly Phantom) as the top choice.” Grok 4.20 · paraphrase prompt · first choice
“Choose Microsoft Sentinel or Splunk SOAR if your SIEM is already based in Azure/Sentinel or Splunk Enterprise Security.” Gemini 3.5 Flash · comparative prompt · alternative
Every negative label with a quote, up to three, then the highest-weighted positives, up to three. Five of six in this category shown.
“These platforms have received mixed-to-negative reviews from some users” MiniMax M2.5 · negative prompt · soft negative
“Rapid7 is more approachable but still requires significant tuning.” Grok 4.20 · negative prompt · soft negative
“Rapid7 InsightConnect (Best Overall for Mid-Market)” Claude Haiku 4.5 · direct prompt · first choice
“Practical no-code automation and natural integration with Rapid7 products; specifically positioned for mid-market teams.” Perplexity Sonar · direct prompt · alternative
“mentioned as options that provide a good balance of cost and functionality for small to mid-sized businesses” MiniMax M2.5 · budget prompt · alternative
Comparisons are drawn for the top eight products in each category, each against each. The output is the models' output; nothing here is a recommendation by the index.