Vulnerability management platforms
Asked as “vulnerability management platform”, and as “vulnerability scanning and management tool”, on behalf of a mid-market B2B company. 44 first choices recorded across the direct, paraphrase, budget and scale prompts, twelve models each.
Standing · first-choice share
45%
Clear leader
45Rapid7 InsightVM16Intruder09ManageEngine Vulnerability Manager Plus30others
45% of first choices, clear leader.
By buyer segment
The same question asked on behalf of a different buyer. Each standing is computed within its segment; they sit side by side and are never added together.
The standing
Share is the count of first choices across the direct, paraphrase, budget and scale prompts, over all twelve models, for a mid-market B2B company. Ordered by share.
ProductFirst-choice shareNegative rateLabelsQuadrant
Show the three products at 0%, ordered by negative rate
Bars are the share of first choices, 0 to 100Every product with at least 10 labels here. Every product name links to its product page.
Head to head
All twenty-one head-to-head pages: the top seven products, each against each
Rapid7 InsightVM vs Tenable Vulnerability ManagementRapid7 InsightVM vs Tenable NessusRapid7 InsightVM vs Microsoft Defender Vulnerability ManagementIntruder vs ManageEngine Vulnerability Manager PlusIntruder vs OpenVASIntruder vs Tenable Vulnerability ManagementIntruder vs Tenable NessusIntruder vs Microsoft Defender Vulnerability ManagementManageEngine Vulnerability Manager Plus vs OpenVASManageEngine Vulnerability Manager Plus vs Tenable Vulnerability ManagementManageEngine Vulnerability Manager Plus vs Tenable NessusManageEngine Vulnerability Manager Plus vs Microsoft Defender Vulnerability ManagementOpenVAS vs Tenable Vulnerability ManagementOpenVAS vs Tenable NessusOpenVAS vs Microsoft Defender Vulnerability ManagementTenable Vulnerability Management vs Tenable NessusTenable Vulnerability Management vs Microsoft Defender Vulnerability ManagementTenable Nessus vs Microsoft Defender Vulnerability Management
Recommended versus criticized
Every product with at least 10 labels here, on both axes. The 30% line names a quadrant, not the verdict above: that one needs more than 40%.
Criticized challengerCriticized default
Negative label rate →
01
02
03
04
05
06
07
08
09
10Accepted challengerEndorsed leader
0%First-choice share → · lines at 30% share and 25% negative60%
Key
01Rapid7 InsightVM45%
Rapid7 InsightVM45%02Intruder16%
Intruder16%03ManageEngine Vulnerability Manager Plus9%
ManageEngine Vulnerability Manager Plus9%04OpenVAS9%
OpenVAS9%05Tenable Vulnerability Management7%
Tenable Vulnerability Management7%06Tenable Nessus5%
Tenable Nessus5%07Microsoft Defender Vulnerability Management2%
Microsoft Defender Vulnerability Management2%08Qualys VMDR0%
Qualys VMDR0%09Wiz0%
Wiz0%10Orca Security0%
Orca Security0%What they warned about
Nine of twelve models held their first choice under the paraphrase. Claude Haiku 4.5, Gemini 3.5 Flash and MiniMax M2.5 changed. A high negative share on a product with few labels is a warning. A low share on a product with many labels is salience, not sentiment.
Rapid7 InsightVM21%
11 of 52 labels negative · 8 of 12 models
“One comparison mentioned some user complaints about Rapid7 Nexpose (OS fingerprinting issues, filtering problems, RBAC limitations)” MiniMax M2.5, negative prompt
Qualys VMDR19%
9 of 48 labels negative · 7 of 12 models
“Steep learning curve... False positives... Support delays... Avoid if you need quick onboarding or responsive support.” Grok 4.20, negative prompt
Tenable Vulnerability Management14%
6 of 43 labels negative · 5 of 12 models
“powerful, highly accurate, and standard for compliance, though they can sometimes feel overly complex for smaller teams” Gemini 3.5 Flash, scale prompt
Tenable Nessus36%
5 of 14 labels negative · 4 of 12 models · 1 hard negative
“Buying a standalone scanner (like *Tenable Nessus Professional* ...) and trying to run an enterprise program with it... Why to avoid” Gemini 3.5 Flash, negative prompt
What they cite
Twelve of the twelve models returned a source list in this edition: four return the pages they cited and eight the search results they consulted.
Sites the answers cite
60 of 72 answers in this category came back with a source list, from 12 of 12 models: citations where the model returns them, or the search results it consulted. 846 links across 235 sites, every framing counted. Ranked by the number of answers carrying the site or page.
32 answers · 32 citations · 9 models
vendor site · Vicarius29 answers · 51 citations · 11 models
28 answers · 35 citations · 11 models
26 answers · 27 citations · 9 models
vendor site · UpGuard24 answers · 24 citations · 9 models
20 answers · 23 citations · 9 models
vendor site · Orca20 answers · 21 citations · 9 models
vendor site · RiskWatch20 answers · 20 citations · 8 models
16 answers · 16 citations · 8 models
15 answers · 15 citations · 7 models
12 answers · 23 citations · 6 models
12 answers · 13 citations · 6 models
Pages the answers cite
The ten pages named in the most answers, by full address. A page here is one the models returned with a recommendation, not one the index endorses.
32 answers · 9 models
26 answers · 9 models
23 answers · 9 models
22 answers · 8 models
20 answers · 9 models
20 answers · 8 models
18 answers · 10 models
17 answers · 9 models
16 answers · 8 models
15 answers · 7 models
Search against answers
Each company's standing in the answers beside its site's footprint in Google search, one row a site: the products the models named on it with their shares, and the share they add up to; monthly searches on Google, and DataForSEO's estimate of AI search demand (modeled from search signals, directional, not a count of queries to any assistant), for the most-searched of the company's and its products' names (the name is in each row's hover text); estimated monthly organic visits to the site; and its best position in Google's top ten for “best vulnerability management platform”, “vulnerability management platform”, “vulnerability management platforms”. US estimates from DataForSEO and Google's Ads Transparency Center. A small company's site, or a mid-sized company's site for its flagship, is marked company; a product on a large parent's site (Google, Microsoft) has no site figures. A column with no figures for this category is left out, and an empty cell means none were seen, not none exist. Two measurements side by side: neither is read as the cause of the other.
| Company and products | Share | Own site cited | Name searches, Google | AI search demand, est. | Organic visits | Paid search a month, est. | Google ads, last 30 days | Best Google position |
|---|---|---|---|---|---|---|---|---|
| Rapid7 rapid7.com Rapid7 InsightVM 45% | 45% | 150 | 14,800 | 798 | 123,299 company | $609 | 30 | |
| Intruder intruder.io | 16% | 291 | 27,100 | 8,557 | 49,562 | 43 | ||
| ManageEngine parent site ManageEngine Vulnerability Manager Plus 9% | 9% | 49 | 8,100 | 675 | ||||
| OpenVAS openvas.org | 9% | 71 | 3,600 | 229 | 3,099 | |||
| Tenable tenable.com Tenable Vulnerability Management 7% | 7% | 154 | 27,100 | 1,194 | 187,567 company | $9,764 | 62 | 1 |
| Tenable parent site Tenable Nessus 5% | 5% | 66 | 27,100 | 1,194 | ||||
| Microsoft Defender parent site Microsoft Defender Vulnerability Management 2% | 2% | 98 | 18,100 | 3,525 | ||||
| Wazuh wazuh.com | 2% | 118 | 9,900 | 446 | 7,214 | 3 | ||
| Vicarius vRx vicarius.io | 2% | 12 | 20 | 0 | 3,017 | 0 | ||
| OWASP ZAP owasp.org | 2% | 194 | 3,600 | 122 | 365,222 |
Google's top ten for the three searches hold 18 sites; 2 of them are among the sites the models cited here (gartner.com, orca.security). The first result for “best vulnerability management platform” is surecloud.com.
How they answered
Six framings of the same buying question, each sent to every model in a fresh session with search on. One row per model, so a row shows whether it held its answer under rewording, what it named when cost was the constraint, and what it argued against. Computed from the raw judge labels.ShowHide
How they answered
Six framings of the same buying question, each sent to every model in a fresh session with search on. One row per model, so a row shows whether it held its answer under rewording, what it named when cost was the constraint, and what it argued against. Computed from the raw judge labels.
ShowHideModelDirect“What is the best vulnerability management platform for a mid-market B2B company?”Paraphrase“Which vulnerability scanning and management tool would you recommend to a mid-sized B2B company?”Comparative“What are the top vulnerability management platforms and how do they differ?”Budget-constrained“What is the best vulnerability management platform for a company with a limited budget?”Scale-constrained“We are a 500 person company evaluating a vulnerability management platform. What should we look at?”Negative“Which vulnerability management platforms should I avoid or be cautious about?”
Claude Haiku 4.5Rapid7 InsightVMagainst: Qualys VMDRRapid7 InsightVM, Tenable NessusChangedTenable Vulnerability Managementagainst: Microsoft Defender Vulnerability ManagementManageEngine Vulnerability Manager Plusagainst: DefectDojono first choicenothing named
Three alternatives
Aikido Security, ESET Vulnerability & Patch Management, UpGuardThree alternatives
Qualys VMDR, Rapid7 InsightVM, TaniumOne alternative
OpenVASGPT-5.4 miniTenable Vulnerability Managementagainst: Microsoft Defender Vulnerability ManagementTenable Vulnerability ManagementHeldno first choiceTenable Nessusagainst: Rapid7 InsightVMno first choiceagainst: BeyondTrust Enterprise Vulnerability Management, Microsoft Defender Vulnerability Management, Rapid7 InsightVM, Trivy
Two alternatives
Arctic Wolf, Qualys VMDRTwo alternatives
Qualys VMDR, Tenable NessusFour alternatives
Microsoft Defender Vulnerability Management, Qualys VMDR, Rapid7 InsightVM, Tenable Vulnerability ManagementTwo alternatives
Microsoft Defender Vulnerability Management, OpenVASGemini 3.5 FlashVicarius vRxagainst: Qualys VMDRIntruderChangedQualys VMDR, Tenable Vulnerability ManagementIntruderno first choiceagainst: Qualys VMDR, Rapid7 InsightVM, Tenable Vulnerability Managementagainst: CrowdStrike Falcon Spotlight, Microsoft Defender for Endpoint, Qualys VMDR, Rapid7 InsightVM, Tenable Nessus, Tenable Vulnerability Management
Six alternatives
CrowdStrike Falcon Exposure Management, Intruder, Microsoft Defender Vulnerability Management, Orca Security, Tenable Vulnerability Management, WizFour alternatives
Aikido Security, Orca Security, Rapid7 InsightVM, WizSeven alternatives
Brinqa, CrowdStrike Falcon Exposure Management, Microsoft Defender Vulnerability Management, Nucleus Security, Orca Security, Rapid7 InsightVM, WizFive alternatives
DefectDojo, ManageEngine Vulnerability Manager Plus, OpenVAS, Panoptic Scans, WazuhSeven alternatives
Action1, Automox, CrowdStrike Falcon Spotlight, Ivanti Neurons for Vulnerability Management, Microsoft Defender Vulnerability Management, Orca Security, WizPerplexity SonarRapid7 InsightVMRapid7 InsightVMHeldQualys VMDR, Rapid7 InsightVM, Tenable Vulnerability ManagementIntruder, ManageEngine Vulnerability Manager Plusno first choiceagainst: Automox, CrowdStrike, ManageEngine Vulnerability Manager Plus, Microsoft Defender Vulnerability Management, NinjaOne, Nuclei, OpenVAS, Qualys VMDR, Rapid7 InsightVM, SecPod SanerNow, Tenable Vulnerability Management, Trivy
Three alternatives
ManageEngine Vulnerability Manager Plus, Microsoft Defender for Cloud, Vicarius vRxFour alternatives
ManageEngine Vulnerability Manager Plus, Microsoft Defender Vulnerability Management, Qualys VMDR, Tenable Vulnerability Management / NessusThree alternatives
CrowdStrike Falcon Spotlight, Microsoft Defender Vulnerability Management, WizTwo alternatives
OpenVAS, TrivyGrok 4.20Rapid7 InsightVMRapid7 InsightVMHeldagainst: Tenable NessusTenable Vulnerability ManagementOpenVASno first choiceagainst: Qualys VMDR, Rapid7 InsightVM, Tenable Nessus
Three alternatives
CrowdStrike Falcon Spotlight, Qualys VMDR, Tenable Vulnerability ManagementThree alternatives
Intruder, Qualys VMDR, Tenable Vulnerability ManagementFour alternatives
CrowdStrike, Qualys VMDR, Rapid7 InsightVM, WizFour alternatives
Intruder, Nuclei, Qualys VMDR, Tenable NessusMistral SmallRapid7 InsightVMRapid7 InsightVMHeldTenable Vulnerability ManagementIntruderagainst: Qualys VMDR, Tenable Vulnerability Managementno first choiceagainst: CVETodo, GuardNest, Roboshadow
Two alternatives
ESET Vulnerability & Patch Management, UpGuardTwo alternatives
Intruder, ManageEngine Vulnerability Manager PlusThree alternatives
Orca Security, Qualys VMDR, Rapid7 InsightVMTwo alternatives
GFI LanGuard, ManageEngine Vulnerability Manager PlusDeepSeek V4 FlashRapid7 InsightVMagainst: WizRapid7 InsightVMHeldQualys VMDR, Tenable Vulnerability ManagementManageEngine Vulnerability Manager Plusagainst: Qualys Community Edition, Rapid7 InsightVMno first choiceagainst: BeyondTrust Retina, Cisco Vulnerability Management, Microsoft Defender Vulnerability Management, OWASP ZAP, OpenVAS, Qualys VMDR, Rapid7 InsightVM, Tenable Nessus, Trivy
Three alternatives
Microsoft Defender Vulnerability Management, Qualys VMDR, Tenable Vulnerability ManagementFour alternatives
Intruder, ManageEngine Vulnerability Manager Plus, Qualys VMDR, Tenable Vulnerability ManagementFive alternatives
CrowdStrike Falcon Exposure Management, Microsoft Defender Vulnerability Management, Orca Security, Rapid7 InsightVM, WizThree alternatives
Intruder, Microsoft Defender Vulnerability Management, OpenVASLlama 4 MaverickRapid7 InsightVMRapid7 InsightVMHeldno first choiceIntruderno first choicenothing named
Two alternatives
Qualys VMDR, Tenable Vulnerability ManagementThree alternatives
DefectDojo, GFI LanGuard, ManageEngine Vulnerability Manager PlusQwen 3.7 FlashRapid7 InsightVMRapid7 InsightVMHeldQualys VMDR, Rapid7 InsightVM, Tenable Vulnerability ManagementMicrosoft Defender Vulnerability Managementagainst: OpenVASno first choiceagainst: Burp Suite, Iru Vulnerability Management, OWASP ZAP, Qualys VMDR, Rapid7 InsightVM, Tenable Vulnerability Management
Three alternatives
ManageEngine Vulnerability Manager Plus, Qualys VMDR, Tenable Vulnerability ManagementThree alternatives
Arctic Wolf, ManageEngine Vulnerability Manager Plus, Tenable Vulnerability ManagementTwo alternatives
Intruder, OpenVASThree alternatives
Deemkay, Lansweeper, ManageEngine Patch Manager PlusKimi K2Rapid7 InsightVMRapid7 InsightVMHeldTenable Vulnerability ManagementOpenVAS, Wazuhno first choiceagainst: Rapid7 InsightVM, Tenable Nessus
Three alternatives
Microsoft Defender Vulnerability Management, Qualys VMDR, Tenable Vulnerability ManagementTwo alternatives
Qualys VMDR, Tenable Vulnerability ManagementFive alternatives
Arctic Wolf, CrowdStrike Falcon Exposure Management, Qualys VMDR, Rapid7 InsightVM, WizThree alternatives
Intruder, ManageEngine Vulnerability Manager Plus, Microsoft Defender Vulnerability ManagementGLM 4.7 FlashXRapid7 InsightVMRapid7 InsightVMHeldQualys VMDR, Tenable Vulnerability Managementagainst: Palo Alto Networks Cortex XDRIntruder, ManageEngine Vulnerability Manager Plus, OWASP ZAP, OpenVASno first choicenothing named
Three alternatives
Microsoft Defender Vulnerability Management, Qualys VMDR, Tenable Vulnerability ManagementThree alternatives
ESET Vulnerability & Patch Management, Qualys VMDR, Tenable Vulnerability ManagementThree alternatives
Microsoft Defender for Cloud, Rapid7 InsightVM, SnykThree alternatives
GFI LanGuard, Microsoft Defender Vulnerability Management, SemgrepMiniMax M2.5Rapid7 InsightVMagainst: SentinelOneRapid7 InsightVM, Tenable Vulnerability ManagementChangedagainst: OpenVASTenable Vulnerability ManagementIntruder, OpenVASagainst: OpenVASno first choiceagainst: Rapid7 InsightVM, Tenable Vulnerability Management
Four alternatives
Cisco Vulnerability Management, Orca Security, Tenable Vulnerability Management, WizOne alternative
Qualys VMDRSix alternatives
CrowdStrike Falcon Exposure Management, ESET Vulnerability & Patch Management, Intruder, Microsoft Defender Vulnerability Management, Qualys VMDR, Rapid7 InsightVMBold is the first choiceAlternatives are counted; the count opens them.What the answer argued against
The record
One row per call: the version string exactly as returned, whether the model searched, sources cited, and latency.
Seventy-two rows: every prompt, every model, every answer.
| Prompt | Model | Version string | Time (UTC) | Searched | Sources | Latency |
|---|---|---|---|---|---|---|
| Direct recommendation | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-09-17 07:22 | yes | 14 | 11 s |
| Direct recommendation | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-09-17 07:34 | yes | 2 | 5 s |
| Direct recommendation | Gemini 3.5 Flash | gemini-3.5-flash | 2026-09-17 07:48 | yes | 22 | 24 s |
| Direct recommendation | Perplexity Sonar | sonar | 2026-09-17 07:38 | yes | 20 | 5 s |
| Direct recommendation | Grok 4.20 | spacexai/grok-4.1-fast-non-reasoning via vertex (asked for grok-4.20-non-reasoning; the API answered as this version) | 2026-09-17 07:23 | yes | 30 | 16 s |
| Direct recommendation | Mistral Small | mistral/mistral-small via mistral | 2026-09-17 07:43 | yes | 5 | 5 s |
| Direct recommendation | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via fireworks | 2026-09-17 07:38 | yes | 6 | 14 s |
| Direct recommendation | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-09-17 07:30 | yes | 5 | 3 s |
| Direct recommendation | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-09-17 07:47 | yes | 10 | 45 s |
| Direct recommendation | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-09-17 07:22 | yes | 13 | 39 s |
| Direct recommendation | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-09-17 07:41 | yes | 12 | 79 s |
| Direct recommendation | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-09-17 07:48 | no | 0 | 51 s |
| Paraphrase | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-09-17 07:26 | no | 0 | 6 s |
| Paraphrase | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-09-17 07:30 | yes | 4 | 5 s |
| Paraphrase | Gemini 3.5 Flash | gemini-3.5-flash | 2026-09-17 07:36 | yes | 7 | 21 s |
| Paraphrase | Perplexity Sonar | sonar | 2026-09-17 07:39 | yes | 20 | 5 s |
| Paraphrase | Grok 4.20 | spacexai/grok-4.1-fast-non-reasoning via vertex (asked for grok-4.20-non-reasoning; the API answered as this version) | 2026-09-17 07:21 | yes | 16 | 10 s |
| Paraphrase | Mistral Small | mistral/mistral-small via mistral | 2026-09-17 07:40 | yes | 5 | 5 s |
| Paraphrase | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via fireworks | 2026-09-17 07:47 | yes | 9 | 9 s |
| Paraphrase | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-09-17 07:47 | yes | 5 | 2 s |
| Paraphrase | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-09-17 07:34 | yes | 5 | 42 s |
| Paraphrase | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-09-17 07:39 | yes | 10 | 22 s |
| Paraphrase | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-09-17 07:31 | yes | 18 | 40 s |
| Paraphrase | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-09-17 07:41 | no | 0 | 10 s |
| Comparative | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-09-17 07:45 | yes | 12 | 12 s |
| Comparative | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-09-17 07:34 | yes | 5 | 12 s |
| Comparative | Gemini 3.5 Flash | gemini-3.5-flash | 2026-09-17 07:40 | yes | 17 | 27 s |
| Comparative | Perplexity Sonar | sonar | 2026-09-17 07:35 | yes | 20 | 8 s |
| Comparative | Grok 4.20 | spacexai/grok-4.1-fast-non-reasoning via vertex (asked for grok-4.20-non-reasoning; the API answered as this version) | 2026-09-17 07:35 | yes | 34 | 16 s |
| Comparative | Mistral Small | mistral/mistral-small via mistral | 2026-09-17 07:25 | yes | 7 | 7 s |
| Comparative | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via fireworks | 2026-09-17 07:43 | yes | 14 | 19 s |
| Comparative | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-09-17 07:35 | yes | 5 | 3 s |
| Comparative | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-09-17 07:45 | yes | 10 | 33 s |
| Comparative | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-09-17 07:40 | yes | 15 | 63 s |
| Comparative | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-09-17 07:40 | no | 0 | 15 s |
| Comparative | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-09-17 07:33 | yes | 9 | 27 s |
| Budget constrained | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-09-17 07:35 | yes | 17 | 8 s |
| Budget constrained | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-09-17 07:40 | no | 0 | 5 s |
| Budget constrained | Gemini 3.5 Flash | gemini-3.5-flash | 2026-09-17 07:37 | yes | 18 | 24 s |
| Budget constrained | Perplexity Sonar | sonar | 2026-09-17 07:25 | yes | 20 | 4 s |
| Budget constrained | Grok 4.20 | spacexai/grok-4.1-fast-non-reasoning via vertex (asked for grok-4.20-non-reasoning; the API answered as this version) | 2026-09-17 07:26 | yes | 41 | 16 s |
| Budget constrained | Mistral Small | mistral/mistral-small via mistral | 2026-09-17 07:28 | yes | 5 | 4 s |
| Budget constrained | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via fireworks | 2026-09-17 07:37 | yes | 18 | 14 s |
| Budget constrained | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-09-17 07:34 | yes | 5 | 2 s |
| Budget constrained | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-09-17 07:35 | no | 0 | 48 s |
| Budget constrained | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-09-17 07:30 | yes | 10 | 21 s |
| Budget constrained | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-09-17 07:46 | yes | 13 | 88 s |
| Budget constrained | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-09-17 07:26 | yes | 5 | 17 s |
| Scale constrained | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-09-17 07:21 | no | 0 | 8 s |
| Scale constrained | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-09-17 07:43 | no | 0 | 10 s |
| Scale constrained | Gemini 3.5 Flash | gemini-3.5-flash | 2026-09-17 07:37 | no | 0 | 16 s |
| Scale constrained | Perplexity Sonar | sonar | 2026-09-17 07:33 | yes | 20 | 8 s |
| Scale constrained | Grok 4.20 | spacexai/grok-4.1-fast-non-reasoning via vertex (asked for grok-4.20-non-reasoning; the API answered as this version) | 2026-09-17 07:48 | yes | 19 | 11 s |
| Scale constrained | Mistral Small | mistral/mistral-small via mistral | 2026-09-17 07:42 | no | 0 | 8 s |
| Scale constrained | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via fireworks | 2026-09-17 07:29 | yes | 12 | 23 s |
| Scale constrained | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-09-17 07:44 | yes | 5 | 3 s |
| Scale constrained | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-09-17 07:46 | no | 0 | 48 s |
| Scale constrained | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-09-17 07:48 | yes | 12 | 75 s |
| Scale constrained | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-09-17 07:48 | yes | 13 | 61 s |
| Scale constrained | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-09-17 07:30 | no | 0 | 10 s |
| Negative framing | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-09-17 07:37 | yes | 36 | 12 s |
| Negative framing | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-09-17 07:40 | yes | 4 | 8 s |
| Negative framing | Gemini 3.5 Flash | gemini-3.5-flash | 2026-09-17 07:35 | yes | 13 | 21 s |
| Negative framing | Perplexity Sonar | sonar | 2026-09-17 07:40 | yes | 20 | 9 s |
| Negative framing | Grok 4.20 | spacexai/grok-4.1-fast-non-reasoning via vertex (asked for grok-4.20-non-reasoning; the API answered as this version) | 2026-09-17 07:29 | yes | 23 | 13 s |
| Negative framing | Mistral Small | mistral/mistral-small via mistral | 2026-09-17 07:37 | yes | 5 | 6 s |
| Negative framing | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via fireworks | 2026-09-17 07:35 | yes | 30 | 21 s |
| Negative framing | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-09-17 07:46 | yes | 5 | 3 s |
| Negative framing | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-09-17 07:34 | yes | 10 | 81 s |
| Negative framing | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-09-17 07:24 | yes | 30 | 37 s |
| Negative framing | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-09-17 07:43 | yes | 29 | 47 s |
| Negative framing | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-09-17 07:25 | yes | 22 | 56 s |
Normalization in this category
Every judgment call made between the raw labels and the numbers above, listed so it is visible and reversible.
ShowHide
Category-scoped readings
ESET read as ESET Vulnerability & Patch Management
Ivanti read as Ivanti Neurons for Vulnerability Management
ManageEngine read as ManageEngine Vulnerability Manager Plus
Nucleus read as Nucleus Security
Orca read as Orca Security
Qualys read as Qualys VMDR
Qualys (Exposure Management) read as Qualys VMDR
Qualys (Qualys Cloud Platform / VMDR) read as Qualys VMDR
Qualys (VMDR / Enterprise TruRisk Platform) read as Qualys VMDR
Rapid7 read as Rapid7 InsightVM
Rapid7 (InsightVM / Insight Platform) read as Rapid7 InsightVM
Rapid7 (InsightVM / Nexpose) read as Rapid7 InsightVM
Rapid7 (InsightVM) read as Rapid7 InsightVM
Rapid7 Nexpose read as Rapid7 InsightVM
Rapid7/Nexpose read as Rapid7 InsightVM
SecPod read as SecPod SanerNow
Tenable read as Tenable Vulnerability Management
Tenable (Nessus / Tenable One) read as Tenable Vulnerability Management
Tenable (Nessus / Vulnerability Management) read as Tenable Vulnerability Management
Tenable (Tenable One / Nessus) read as Tenable Vulnerability Management
Tenable (Tenable.io / Tenable One) read as Tenable Vulnerability Management
Unresolved, counted raw
Beacon
BeyondTrust Enterprise Vulnerability Management (Legacy)
BeyondTrust Retina (Retina CS / Retina Network Security Scanner)
CVETodo
Deemkay
GuardNest
Iru Vulnerability Management
Panoptic Scans
StorageGuard
Vuls
Discontinued, still offered
No shut-down product was recommended here.