Vulnerability management platforms for enterprise buyers
Asked as “vulnerability management platform”, and as “vulnerability scanning and management tool”, on behalf of an enterprise B2B company. 57 first choices recorded across the direct, paraphrase, budget and scale prompts, fourteen models each.
Standing · first-choice share
54%
Clear leader
54Tenable Vulnerability Management16Tenable One11Qualys VMDR19others
54% of first choices, clear leader.
Since October 2026↗new leaderNew leader since October 2026: Tenable Vulnerability Management (54%) replaces Qualys VMDR (32% then, 11% now), 43 points clear, past the 11-point floor.Tenable Vulnerability Management leads at 54%, replacing Qualys VMDR, which led at 32% and stands at 11% now: 43 points clear, past the floor. The verdict moved from contested to clear leader.
By buyer segment
The same question asked on behalf of a different buyer. Each standing is computed within its segment; they sit side by side and are never added together.
Small business
Intruder45%Clear leader=heldSince October 2026: 45% → 45%, ±0 points. Inside the 11-point floor: within noise.Standing →Mid-market
Rapid7 InsightVM33%Contested▲+3Since October 2026: 30% → 33%, +3 points. Inside the 11-point floor: within noise.Standing →Enterprise
Tenable Vulnerability Management54%Clear leader↗new leaderNew leader since October 2026: Tenable Vulnerability Management (54%) replaces Qualys VMDR (32% then, 11% now), 43 points clear, past the 11-point floor.This page
Intruder45%Clear leader=heldSince October 2026: 45% → 45%, ±0 points. Inside the 11-point floor: within noise.Standing →Mid-marketRapid7 InsightVM33%Contested▲+3Since October 2026: 30% → 33%, +3 points. Inside the 11-point floor: within noise.Standing →EnterpriseTenable Vulnerability Management54%Clear leader↗new leaderNew leader since October 2026: Tenable Vulnerability Management (54%) replaces Qualys VMDR (32% then, 11% now), 43 points clear, past the 11-point floor.This pageThe standing
Share is the count of first choices across the direct, paraphrase, budget and scale prompts, over all fourteen models, for an enterprise B2B company. Ordered by share.
ProductFirst-choice shareNegative rateLabelsQuadrantSince October 2026
01Tenable Vulnerability Management54%14%72endorsed leader▲+22Since October 2026: 32% → 54%, +22 points. Past the 11-point floor: movement.32% → 54%
Tenable Vulnerability Management54%14%72endorsed leader▲+22Since October 2026: 32% → 54%, +22 points. Past the 11-point floor: movement.32% → 54%02
Tenable One16%0%12accepted challenger▲+3Since October 2026: 13% → 16%, +3 points. Inside the 11-point floor: within noise.13% → 16%
Tenable One16%0%12accepted challenger▲+3Since October 2026: 13% → 16%, +3 points. Inside the 11-point floor: within noise.13% → 16%03
Qualys VMDR11%14%79accepted challenger▼−21Since October 2026: 32% → 11%, −21 points. Past the 11-point floor: movement.32% → 11%
Qualys VMDR11%14%79accepted challenger▼−21Since October 2026: 32% → 11%, −21 points. Past the 11-point floor: movement.32% → 11%04
Microsoft Defender Vulnerability Management9%16%37accepted challenger▲+1Since October 2026: 8% → 9%, +1 point. Inside the 11-point floor: within noise.8% → 9%
Microsoft Defender Vulnerability Management9%16%37accepted challenger▲+1Since October 2026: 8% → 9%, +1 point. Inside the 11-point floor: within noise.8% → 9%05Rapid7 InsightVM4%22%72accepted challenger▼−4Since October 2026: 8% → 4%, −4 points. Inside the 11-point floor: within noise.8% → 4%
Rapid7 InsightVM4%22%72accepted challenger▼−4Since October 2026: 8% → 4%, −4 points. Inside the 11-point floor: within noise.8% → 4%Show the four products at 0%, ordered by negative rate
06
Wiz0%20%35accepted challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%
Wiz0%20%35accepted challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%07
Orca Security0%19%16accepted challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%
Orca Security0%19%16accepted challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%09
CrowdStrike0%18%11accepted challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%
CrowdStrike0%18%11accepted challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%08
CrowdStrike Falcon Exposure Management0%9%11accepted challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%
CrowdStrike Falcon Exposure Management0%9%11accepted challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%The floor is 11 points of share, measured: how far the models move a leader on their own when the same questions are asked twice with nothing changed. A larger change is movement; a smaller one can't be told apart from repeat variation, and both are shown. Each index measures its own floor from its own repeat, over its own categories, so the floor differs from one index to the next. Both editions asked the same fourteen models. How the floor is measured
Bars are the share of first choices, 0 to 100Every product with at least 10 labels here. Every product name links to its product page.
Head to head
Rapid7 InsightVM vs Tenable Vulnerability ManagementRapid7 InsightVM vs Qualys VMDRRapid7 InsightVM vs ManageEngine Vulnerability Manager Plus
Head-to-head pages are published for mid-market buyers, so these open on mid-market figures, not enterprise.All twenty-eight head-to-head pages: the top eight products, each against each
Rapid7 InsightVM vs Microsoft Defender Vulnerability ManagementRapid7 InsightVM vs IntruderRapid7 InsightVM vs OpenVASRapid7 InsightVM vs WizTenable Vulnerability Management vs Qualys VMDRTenable Vulnerability Management vs ManageEngine Vulnerability Manager PlusTenable Vulnerability Management vs Microsoft Defender Vulnerability ManagementTenable Vulnerability Management vs IntruderTenable Vulnerability Management vs OpenVASTenable Vulnerability Management vs WizQualys VMDR vs ManageEngine Vulnerability Manager PlusQualys VMDR vs Microsoft Defender Vulnerability ManagementQualys VMDR vs IntruderQualys VMDR vs OpenVASQualys VMDR vs WizManageEngine Vulnerability Manager Plus vs Microsoft Defender Vulnerability ManagementManageEngine Vulnerability Manager Plus vs IntruderManageEngine Vulnerability Manager Plus vs OpenVASManageEngine Vulnerability Manager Plus vs WizMicrosoft Defender Vulnerability Management vs IntruderMicrosoft Defender Vulnerability Management vs OpenVASMicrosoft Defender Vulnerability Management vs WizIntruder vs OpenVASIntruder vs WizOpenVAS vs Wiz
Recommended versus criticized
Every product with at least 10 labels here, on both axes. The 30% line names a quadrant, not the verdict above: that one needs more than 40%.
Criticized challengerCriticized default
Negative label rate →
010203040506070809Accepted challengerEndorsed leader
0%First-choice share → · lines at 30% share and 25% negative70%
Key
01Tenable Vulnerability Management54%
Tenable Vulnerability Management54%02Tenable One16%
Tenable One16%03Qualys VMDR11%
Qualys VMDR11%04Microsoft Defender Vulnerability Management9%
Microsoft Defender Vulnerability Management9%05Rapid7 InsightVM4%
Rapid7 InsightVM4%06Wiz0%
Wiz0%07Orca Security0%
Orca Security0%08CrowdStrike Falcon Exposure Management0%
CrowdStrike Falcon Exposure Management0%09CrowdStrike0%
CrowdStrike0%What they warned about
Seven of fourteen models held their first choice under the paraphrase. Claude Haiku 4.5, GPT-5.4 mini, DeepSeek V4 Flash, Kimi K2, GLM 4.7 FlashX, MiniMax M2.5 and GPT-6 Luna changed. A high negative share on a product with few labels is a warning. A low share on a product with many labels is salience, not sentiment.
Rapid7 InsightVM22%
16 of 72 labels negative · 12 of 14 models · 1 hard negative
“What You Should Avoid for Predictable Costs | Rapid7 InsightVM | Per-asset pricing can escalate unpredictably” DeepSeek V4 Flash, budget prompt
Qualys VMDR14%
11 of 79 labels negative · 10 of 14 models · 1 hard negative
“Module-based pricing means costs blow up as you add modules” DeepSeek V4 Flash, budget prompt
Tenable Vulnerability Management14%
10 of 72 labels negative · 9 of 14 models
“Platforms to Approach with Caution ... "continue to focus on scanning, with minimal lifecycle coverage, limited automation, or constrained scalability falling short of enterprise needs."” GLM 4.7 FlashX, negative prompt
OpenVAS78%
7 of 9 labels negative · 7 of 14 models · 2 hard negative
“Purely Open-Source / Unsupported Scanners (e.g., OpenVAS / Greenbone Community Edition) ... Why to avoid” Gemini 3.5 Flash, negative prompt
What they cite
Fourteen of the fourteen models returned a source list in this edition: five return the pages they cited and nine the search results they consulted.
Sites the answers cite
71 of 84 answers in this category came back with a source list, from 14 of 14 models: citations where the model returns them, or the search results it consulted. 820 links across 208 sites, every framing counted. Ranked by the number of answers carrying the site or page. 12 of the 252 answers across every segment cited this index's own page for the category; the method page measures whether that reading tilts an answer.
vendor site · Tenable28 answers · 53 citations · 11 models
vendor site · Vicarius28 answers · 37 citations · 10 models
27 answers · 27 citations · 10 models
24 answers · 24 citations · 10 models
20 answers · 20 citations · 9 models
vendor site · Cloudaware17 answers · 17 citations · 8 models
vendor site · Action116 answers · 16 citations · 8 models
vendor site · Motadata16 answers · 16 citations · 6 models
vendor site · NinjaOne16 answers · 16 citations · 9 models
15 answers · 18 citations · 7 models
vendor site · RiskWatch14 answers · 14 citations · 9 models
vendor site · SureCloud14 answers · 14 citations · 7 models
Pages the answers cite
The ten pages named in the most answers, by full address. A page here is one the models returned with a recommendation, not one the index endorses.
27 answers · 10 models
24 answers · 10 models
20 answers · 9 models
16 answers · 8 models
16 answers · 6 models
14 answers · 7 models
14 answers · 9 models
14 answers · 7 models
13 answers · 9 models
11 answers · 9 models
Search against answers
Each company's standing in the answers beside its site's footprint in Google search, one row a site: the products the models named on it with their shares, and the share they add up to; monthly searches on Google, and DataForSEO's estimate of AI search demand (modeled from search signals, directional, not a count of queries to any assistant), for the most-searched of the company's and its products' names (the name is in each row's hover text); estimated monthly organic visits to the site; and its best position in Google's top ten for “best vulnerability management platform”, “vulnerability management platform”, “vulnerability management platforms”. US estimates from DataForSEO and Google's Ads Transparency Center. A small company's site, or a mid-sized company's site for its flagship, is marked company; a product on a large parent's site (Google, Microsoft) has no site figures. A column with no figures for this category is left out, and an empty cell means none were seen, not none exist. Two measurements side by side: neither is read as the cause of the other.
| Company and products | Share | Own site cited | Name searches, Google | AI search demand, est. | Organic visits | Paid search a month, est. | Google ads, last 30 days | Best Google position |
|---|---|---|---|---|---|---|---|---|
| Tenable tenable.com Tenable Vulnerability Management 54% | 54% | 154 | 27,100 | 1,194 | 187,567 company | $9,764 | 62 | 1 |
| Tenable parent site Tenable One 16%, Tenable Nessus 2% | 18% | 66 | 27,100 | 1,194 | ||||
| Qualys VMDR qualys.com | 11% | 165 | 320 | 16 | 26,929 | 46 | 7 | |
| Microsoft Defender parent site Microsoft Defender Vulnerability Management 9% | 9% | 98 | 18,100 | 3,525 | ||||
| Rapid7 rapid7.com Rapid7 InsightVM 4% | 4% | 150 | 14,800 | 798 | 123,299 company | $609 | 30 | |
| Exposure Command | 2% | |||||||
| Action1 action1.com | 2% | 255 | 8,100 | 87 | 18,854 | $3,801 | 48 | |
| ManageEngine parent site ManageEngine Vulnerability Manager Plus 2% | 2% | 49 | 8,100 | 675 | ||||
| Wiz wiz.io | 0% | 764 | 40,500 | 16,751 | 102,573 | $6,856 | 120 | |
| Orca Security orca.security | 0% | 379 | 1,900 | 103 | 125,483 | $441 | 27 | 4 |
Google's top ten for the three searches hold 18 sites; 2 of them are among the sites the models cited here (surecloud.com, tenable.com). The first result for “best vulnerability management platform” is surecloud.com.
How they answered
Six framings of the same buying question, each sent to every model in a fresh session with search on. One row per model, so a row shows whether it held its answer under rewording, what it named when cost was the constraint, and what it argued against. Computed from the raw judge labels.ShowHide
How they answered
Six framings of the same buying question, each sent to every model in a fresh session with search on. One row per model, so a row shows whether it held its answer under rewording, what it named when cost was the constraint, and what it argued against. Computed from the raw judge labels.
ShowHideModelDirect“What is the best vulnerability management platform for an enterprise B2B company?”Paraphrase“Which vulnerability scanning and management tool would you recommend to a large B2B company with thousands of employees?”Comparative“What are the top enterprise-grade vulnerability management platforms and how do they differ?”Budget-constrained“What is the best vulnerability management platform for a large company that needs predictable total cost across thousands of users?”Scale-constrained“We are a 5,000 person company with SSO, SOC 2 and procurement review requirements evaluating a vulnerability management platform. What should we look at?”Negative“Which vulnerability management platforms should a large enterprise avoid or be cautious about?”
Claude Haiku 4.5no first choiceTenable Nessus, Tenable Vulnerability ManagementChangedagainst: OpenVASQualys VMDR, Tenable Vulnerability ManagementTenable Vulnerability Managementagainst: Qualys VMDRno first choiceagainst: CrowdStrike Falcon Exposure Management, Exposure Command, Microsoft Defender Vulnerability Management, Rapid7 InsightVM, Snyk, Wiz
Two alternatives
Qualys VMDR, Rapid7 InsightVMOne alternative
Rapid7 InsightVMTwo alternatives
Microsoft Defender Vulnerability Management, Rapid7 InsightVMGPT-5.4 miniTenable Vulnerability Managementagainst: Rapid7 InsightVMTenable One, Tenable Vulnerability ManagementChangedTenable Vulnerability ManagementQualys VMDRno first choiceagainst: Microsoft, Outpost24
One alternative
Qualys VMDRTwo alternatives
Qualys VMDR, Rapid7 InsightVMFour alternatives
InsightCloudSec, Microsoft Defender Vulnerability Management, Qualys VMDR, Rapid7 InsightVMOne alternative
Tenable Vulnerability ManagementGemini 3.5 FlashTenable Vulnerability ManagementTenable Vulnerability ManagementHeldQualys VMDR, Tenable Vulnerability ManagementMicrosoft Defender Vulnerability Managementno first choiceagainst: CrowdStrike Falcon Spotlight, Microsoft Defender Vulnerability Management, OpenVAS, Qualys VMDR, Rapid7 InsightVM, Tenable Nessus, Tenable Vulnerability Management, VulScan
Six alternatives
ArmorCode, Cisco Vulnerability Management, Orca Security, Qualys VMDR, Rapid7 InsightVM, WizSix alternatives
Brinqa, Nucleus Security, Prisma Cloud, Qualys VMDR, Rapid7 InsightVM, WizFive alternatives
CrowdStrike, Microsoft, Orca Security, Rapid7 InsightVM, WizThree alternatives
CrowdStrike Falcon Spotlight, Qualys VMDR, Tenable OnePerplexity SonarTenable Vulnerability ManagementTenable Vulnerability ManagementHeldTenable Vulnerability Managementagainst: CrowdStrikeMicrosoft Defender Vulnerability Managementagainst: Rapid7 InsightVMno first choiceagainst: CrowdStrike Falcon Exposure Management or Spotlight, MetricStream, Microsoft Defender Vulnerability Management, Orca Security, Qualys VMDR, Rapid7 InsightVM, Riskonnect, Tenable Vulnerability Management, Wiz
Seven alternatives
Brinqa, Checkmarx One, Microsoft Defender Vulnerability Management, Qualys VMDR, ServiceNow Security Operations, Snyk, WizFour alternatives
Microsoft Defender Vulnerability Management, Qualys VMDR, Rapid7 InsightVM, WizSeven alternatives
Brinqa, Microsoft Defender, Nucleus Security, Orca Security, Qualys VMDR, Rapid7 InsightVM, WizTwo alternatives
Qualys VMDR, Tenable Vulnerability ManagementGrok 4.20Tenable Vulnerability Managementagainst: Greenbone OpenVAS, TrivyTenable Vulnerability ManagementHeldTenable Vulnerability ManagementTenable Vulnerability Managementagainst: MetricStream, Rapid7 InsightVM, RiskonnectTenable Vulnerability Managementagainst: Balbix, Nucleus Security, Risk Based Securityagainst: Microsoft Defender Vulnerability Management, Nucleus Security, OpenVAS, Orca Security, Rapid7 InsightVM, Tenable Nessus, Wiz
Three alternatives
CrowdStrike Falcon Exposure Management, Qualys VMDR, Rapid7 InsightVMThree alternatives
ManageEngine Vulnerability Manager Plus, Qualys VMDR, Rapid7 InsightVMFive alternatives
CrowdStrike, Microsoft Defender Vulnerability Management, Qualys VMDR, Rapid7 InsightVM, WizTwo alternatives
Microsoft Defender Vulnerability Management, Qualys VMDRFive alternatives
Cortex Xpanse, Microsoft Defender Vulnerability Management, Prisma Cloud, Qualys VMDR, Rapid7 InsightVMMistral SmallTenable Vulnerability ManagementTenable Vulnerability ManagementHeldTenable Vulnerability ManagementAction1against: Qualys VMDR, Rapid7 InsightVM, Tenable Vulnerability Managementno first choiceagainst: Tenable Nessus, TruRisk
Two alternatives
Microsoft Defender Vulnerability Management, Qualys VMDRTwo alternatives
Qualys VMDR, Rapid7 InsightVMFour alternatives
CrowdStrike Falcon Exposure Management, Microsoft Defender Vulnerability Management, Qualys VMDR, Rapid7 InsightVMThree alternatives
Cloudaware, Qualys VMDR, Tenable Vulnerability ManagementDeepSeek V4 FlashTenable Vulnerability ManagementQualys VMDR, Tenable Vulnerability ManagementChangedTenable Vulnerability ManagementTenable Oneagainst: ManageEngine Vulnerability Manager Plus, Qualys VMDR, Rapid7 InsightVMTenable Vulnerability Managementagainst: Wizagainst: ESET Vulnerability & Patch Management, Ivanti Neurons for Vulnerability Management, Microsoft Defender Vulnerability Management, OpenVAS, Qualys VMDR, Rapid7 InsightVM, StorageGuard, Syxsense, Tenable Nessus, Tenable Security Center, Wiz
Three alternatives
Exposure Command, Qualys VMDR, Rapid7 InsightVMOne alternative
Rapid7 InsightVMFour alternatives
CrowdStrike, Microsoft, Qualys VMDR, Rapid7 InsightVMTwo alternatives
Automox, Nucleus SecurityThree alternatives
Microsoft Defender Vulnerability Management, Qualys VMDR, Rapid7 InsightVMLlama 4 MaverickTenable Vulnerability ManagementTenable Vulnerability ManagementHeldno first choiceTenable Oneno first choiceagainst: Qualys VMDR, Rapid7 InsightVM, Tenable Vulnerability Management
Three alternatives
Microsoft Defender Vulnerability Management, NinjaOne, Qualys VMDRTwo alternatives
Qualys VMDR, Rapid7 InsightVMTwo alternatives
Microsoft Defender Vulnerability Management, Qualys VMDRQwen 3.7 FlashTenable Vulnerability ManagementTenable Vulnerability ManagementHeldTenable Vulnerability ManagementQualys VMDR, Rapid7 InsightVMagainst: ScanAnchorQualys VMDR, Tenable Vulnerability Managementagainst: Basic Nessus installations, Check Point, McAfee, OpenVAS, Qualys VMDR, Tenable Vulnerability Management
Five alternatives
Axonius, Orca Security, Qualys VMDR, Rapid7 InsightVM, WizFour alternatives
Microsoft Defender Vulnerability Management, Oracle Prisma Cloud, Qualys VMDR, WizSix alternatives
CrowdStrike Falcon Spotlight, Exposure Command, Microsoft Defender Vulnerability Management, Qualys VMDR, Rapid7 InsightVM, WizTwo alternatives
Rapid7 InsightVM, VulnCoreKimi K2Tenable Vulnerability ManagementTenable OneChangedTenable Vulnerability ManagementMicrosoft Defender Vulnerability Managementagainst: Exposure Command, Rapid7 InsightVMno first choiceagainst: OpenVAS Community Edition, Orca Security, Qualys VMDR, Rapid7 InsightVM, Tenable Vulnerability Management, Wiz
Three alternatives
Microsoft Defender Vulnerability Management, Qualys VMDR, Rapid7 InsightVMTwo alternatives
Qualys VMDR, Rapid7 InsightVMSix alternatives
CrowdStrike, Orca Security, Prisma Cloud, Qualys VMDR, Rapid7 InsightVM, WizThree alternatives
Qualys VMDR, Tenable One, Tenable Vulnerability ManagementGLM 4.7 FlashXTenable Vulnerability ManagementQualys VMDR, Tenable Vulnerability ManagementChangedTenable Vulnerability ManagementMicrosoft Defender Vulnerability Managementno first choiceagainst: Armis, CrowdStrike, HivePro, Qualys VMDR, Rapid7 InsightVM, Tenable Vulnerability Management
Three alternatives
Microsoft Defender Vulnerability Management, Qualys VMDR, Rapid7 InsightVMTwo alternatives
Pulse Secure, Rapid7 InsightVMSix alternatives
CrowdStrike Falcon Exposure Management, Microsoft Defender Vulnerability Management, Orca Security, Qualys VMDR, Rapid7 InsightVM, WizTwo alternatives
Qualys VMDR, Tenable Vulnerability ManagementMiniMax M2.5Exposure Command, Rapid7 InsightVM, Tenable Vulnerability ManagementQualys VMDR, Tenable Vulnerability ManagementChangedTenable Vulnerability ManagementManageEngine Vulnerability Manager Plusagainst: Tenable Vulnerability ManagementTenable Oneagainst: ManageEngine Vulnerability Manager Plus, OpenVAS, Qualys VMDR, Rapid7 InsightVM, Tenable Vulnerability Management
Four alternatives
CrowdStrike Falcon Exposure Management, Microsoft Defender Vulnerability Management, Qualys VMDR, WizOne alternative
Rapid7 InsightVMFive alternatives
CrowdStrike, Microsoft Defender, Qualys VMDR, Rapid7 InsightVM, WizThree alternatives
Microsoft Defender Vulnerability Management, Qualys VMDR, Rapid7 InsightVMThree alternatives
Qualys VMDR, Rapid7 InsightVM, Tanium ComplyGPT-6 LunaTenable OneTenable Vulnerability ManagementChangedQualys VMDR, Rapid7 InsightVM, Tenable Vulnerability ManagementMicrosoft Defender Vulnerability Managementno first choiceagainst: Cisco Vulnerability Management (formerly Kenna), Vulnerability Intelligence, and AppSec, Microsoft Defender Vulnerability Management, Rapid7 InsightVM, Tenable Nessus
Three alternatives
Qualys VMDR, Rapid7 InsightVM, WizThree alternatives
Qualys VMDR, Rapid7 InsightVM, Tenable OneFour alternatives
CrowdStrike, Microsoft Defender, Tanium, WizTwo alternatives
Qualys VMDR, Tenable Vulnerability ManagementMuse Glimmer 30BTenable One, Tenable Vulnerability ManagementTenable One, Tenable Vulnerability ManagementHeldTenable Vulnerability ManagementTenable One, Tenable Vulnerability Managementno first choiceagainst: Binarly, Nuclei, OpenVAS, Tenable Vulnerability Management, Wiz
Three alternatives
Microsoft Defender Vulnerability Management, Qualys VMDR, Rapid7 InsightVMTwo alternatives
Qualys VMDR, Rapid7 InsightVMFive alternatives
CrowdStrike Falcon Exposure Management, Exposure Command, Microsoft Defender Vulnerability Management, Qualys VMDR, Rapid7 InsightVMFour alternatives
Exposure Command, Microsoft Defender Vulnerability Management, Qualys VMDR, Rapid7 InsightVMBold is the first choiceAlternatives are counted; the count opens them.What the answer argued against
The record
One row per call: the version string exactly as returned, whether the model searched, sources cited, and latency.
Eighty-four rows: every prompt, every model, every answer.
| Prompt | Model | Version string | Time (UTC) | Searched | Sources | Latency |
|---|---|---|---|---|---|---|
| Direct recommendation | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 17:56 | no | 0 | 4 s |
| Direct recommendation | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 15:08 | yes | 4 | 5 s |
| Direct recommendation | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 13:24 | yes | 5 | 20 s |
| Direct recommendation | Perplexity Sonar | sonar | 2026-11-01 18:46 | yes | 10 | 4 s |
| Direct recommendation | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 13:44 | yes | 5 | 10 s |
| Direct recommendation | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 16:30 | yes | 5 | 5 s |
| Direct recommendation | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 18:00 | yes | 24 | 31 s |
| Direct recommendation | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 11:52 | yes | 5 | 3 s |
| Direct recommendation | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 16:51 | no | 0 | 29 s |
| Direct recommendation | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 11:06 | yes | 18 | 25 s |
| Direct recommendation | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 17:35 | yes | 15 | 25 s |
| Direct recommendation | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 18:04 | yes | 15 | 46 s |
| Direct recommendation | GPT-6 Luna | gpt-6-luna | 2026-11-01 12:38 | yes | 4 | 14 s |
| Direct recommendation | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 12:54 | yes | 12 | 15 s |
| Paraphrase | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 16:21 | no | 0 | 5 s |
| Paraphrase | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 09:04 | yes | 3 | 5 s |
| Paraphrase | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 08:49 | no | 0 | 16 s |
| Paraphrase | Perplexity Sonar | sonar | 2026-11-01 17:57 | yes | 10 | 4 s |
| Paraphrase | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 19:34 | yes | 5 | 8 s |
| Paraphrase | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 09:33 | no | 0 | 6 s |
| Paraphrase | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 08:47 | yes | 25 | 26 s |
| Paraphrase | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 09:59 | yes | 5 | 2 s |
| Paraphrase | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 16:38 | yes | 5 | 25 s |
| Paraphrase | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 18:07 | yes | 15 | 22 s |
| Paraphrase | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 13:27 | no | 0 | 16 s |
| Paraphrase | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 17:30 | yes | 5 | 43 s |
| Paraphrase | GPT-6 Luna | gpt-6-luna | 2026-11-01 13:06 | yes | 2 | 13 s |
| Paraphrase | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 14:12 | yes | 13 | 16 s |
| Comparative | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 18:16 | yes | 15 | 11 s |
| Comparative | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 14:30 | yes | 8 | 12 s |
| Comparative | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 18:51 | no | 0 | 22 s |
| Comparative | Perplexity Sonar | sonar | 2026-11-01 14:26 | yes | 10 | 7 s |
| Comparative | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 17:18 | yes | 5 | 15 s |
| Comparative | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 10:42 | yes | 10 | 8 s |
| Comparative | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 18:32 | yes | 23 | 52 s |
| Comparative | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 18:17 | yes | 5 | 2 s |
| Comparative | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 10:56 | yes | 22 | 69 s |
| Comparative | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 12:55 | yes | 20 | 50 s |
| Comparative | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 17:58 | yes | 12 | 18 s |
| Comparative | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 10:04 | yes | 10 | 51 s |
| Comparative | GPT-6 Luna | gpt-6-luna | 2026-11-01 19:06 | yes | 9 | 23 s |
| Comparative | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 17:00 | yes | 15 | 28 s |
| Budget constrained | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 14:10 | yes | 18 | 9 s |
| Budget constrained | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 14:38 | yes | 4 | 5 s |
| Budget constrained | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 12:16 | no | 0 | 19 s |
| Budget constrained | Perplexity Sonar | sonar | 2026-11-01 14:11 | yes | 10 | 4 s |
| Budget constrained | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 16:23 | yes | 10 | 12 s |
| Budget constrained | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 15:51 | yes | 5 | 5 s |
| Budget constrained | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 18:08 | yes | 25 | 44 s |
| Budget constrained | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 10:45 | yes | 5 | 2 s |
| Budget constrained | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 14:57 | yes | 23 | 90 s |
| Budget constrained | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 16:49 | yes | 19 | 36 s |
| Budget constrained | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 12:51 | yes | 23 | 252 s |
| Budget constrained | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 08:55 | yes | 5 | 44 s |
| Budget constrained | GPT-6 Luna | gpt-6-luna | 2026-11-01 13:06 | yes | 3 | 15 s |
| Budget constrained | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 14:55 | yes | 14 | 31 s |
| Scale constrained | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 12:11 | no | 0 | 6 s |
| Scale constrained | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 19:33 | yes | 3 | 8 s |
| Scale constrained | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 14:44 | no | 0 | 17 s |
| Scale constrained | Perplexity Sonar | sonar | 2026-11-01 13:08 | yes | 10 | 8 s |
| Scale constrained | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 16:07 | yes | 5 | 17 s |
| Scale constrained | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 12:43 | no | 0 | 8 s |
| Scale constrained | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 11:39 | yes | 24 | 50 s |
| Scale constrained | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 10:58 | yes | 5 | 3 s |
| Scale constrained | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 17:46 | no | 0 | 31 s |
| Scale constrained | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 10:15 | yes | 9 | 71 s |
| Scale constrained | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 09:20 | yes | 15 | 17 s |
| Scale constrained | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 16:26 | yes | 20 | 32 s |
| Scale constrained | GPT-6 Luna | gpt-6-luna | 2026-11-01 15:14 | yes | 4 | 28 s |
| Scale constrained | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 16:02 | yes | 15 | 22 s |
| Negative framing | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 16:03 | yes | 19 | 9 s |
| Negative framing | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 17:07 | yes | 5 | 8 s |
| Negative framing | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 12:51 | yes | 10 | 33 s |
| Negative framing | Perplexity Sonar | sonar | 2026-11-01 08:58 | yes | 10 | 6 s |
| Negative framing | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 16:09 | yes | 14 | 15 s |
| Negative framing | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 10:17 | yes | 5 | 4 s |
| Negative framing | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 18:37 | yes | 25 | 61 s |
| Negative framing | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 18:14 | yes | 5 | 3 s |
| Negative framing | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 18:10 | no | 0 | 30 s |
| Negative framing | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 11:39 | yes | 23 | 38 s |
| Negative framing | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 13:38 | yes | 22 | 37 s |
| Negative framing | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 14:54 | yes | 9 | 54 s |
| Negative framing | GPT-6 Luna | gpt-6-luna | 2026-11-01 10:08 | yes | 4 | 21 s |
| Negative framing | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 12:28 | yes | 21 | 27 s |
Normalization in this category
Every judgment call made between the raw labels and the numbers above, listed so it is visible and reversible.
ShowHide
Category-scoped readings
ESET read as ESET Vulnerability & Patch Management
ManageEngine read as ManageEngine Vulnerability Manager Plus
Microsoft Defender for Vulnerability Management read as Microsoft Defender Vulnerability Management
Nucleus read as Nucleus Security
Orca read as Orca Security
Qualys read as Qualys VMDR
Qualys (Qualys VMDR / Vulnerability Management, Detection & Response) read as Qualys VMDR
Qualys (Qualys VMDR) read as Qualys VMDR
Qualys (VMDR - Vulnerability Management, Detection & Response) read as Qualys VMDR
Qualys (VMDR - Vulnerability Management, Detection, and Response) read as Qualys VMDR
Qualys (VMDR / TruRisk) read as Qualys VMDR
Qualys (VMDR) read as Qualys VMDR
Rapid7 read as Rapid7 InsightVM
Rapid7 (InsightVM / Exposure Command) read as Rapid7 InsightVM
Rapid7 (InsightVM / Rapid7 Vulnerability Management) read as Rapid7 InsightVM
Rapid7 (InsightVM) read as Rapid7 InsightVM
Tenable read as Tenable Vulnerability Management
Tenable (Nessus / Tenable Vulnerability Management) read as Tenable Vulnerability Management
Tenable (Nessus) read as Tenable Vulnerability Management
Tenable (Nessus.io) read as Tenable Vulnerability Management
Tenable (Tenable One / Nessus) read as Tenable Vulnerability Management
Tenable (Tenable One / Tenable Vulnerability Management) read as Tenable Vulnerability Management
Tenable (Tenable One / Vulnerability Management) read as Tenable Vulnerability Management
Tenable (Tenable.io + Lumin) read as Tenable Vulnerability Management
Tenable (Tenable.io / Tenable Vulnerability Management / Tenable One) read as Tenable Vulnerability Management
Tenable (Tenable.one / Tenable.io / Tenable.sc) read as Tenable Vulnerability Management
Tenable (Tenable.one / Tenable.io) read as Tenable Vulnerability Management
Tenable (Tenable.one / Tenable.sc / Tenable.io) read as Tenable Vulnerability Management
Tenable One / Tenable Vulnerability Management read as Tenable Vulnerability Management
Tenable One / Vulnerability Management read as Tenable Vulnerability Management
Tenable One Vulnerability Management read as Tenable Vulnerability Management
Vicarius read as Vicarius vRx
Unresolved, counted raw
Basic Nessus installations
BitSentry
Cisco Vulnerability Management (formerly Kenna), Vulnerability Intelligence, and AppSec
CrowdStrike Falcon Exposure Management or Spotlight
Greenbone OpenVAS
HivePro
Ivanti Neurons RBVM
Microsoft Threat Vulnerability Management
Nuclei-based custom stacks
OpenVAS Community Edition
Oracle Prisma Cloud
Risk Based Security
ScanAnchor
ServiceNow Vulnerability Response
StorageGuard
Tanium Comply
Tenable.sc / Tenable.io
TruRisk (by Qualys)
TuxCare Radar
Discontinued, still offered
No shut-down product was recommended here.