Index › IT › Products › CISA CSET · November 2026 Edition
Cyber risk quantification · Named, not ranked

CISA CSET

cisa.gov ↗

–Too few to rank
4/14Models named it
2First choices
0Warnings
November 2026 Edition · all company sizes counted.
Ranked inCyber risk quantification #21 mid-market
What AI models recommend

Named, too few times to rank.

A product needs 10 labels in a category before a share is stated. CISA CSET has 2.

Why models recommend it

“starting with free public tools like CISA CSET and NIST CSF 2.0 templates is recommended to establish baseline assessment discipline”Claude Haiku 4.5 · Budget-constrained question · first choice

What gives them pause

No model argued against it.

Also on the shortlist

The products named in the same answers as CISA CSET, over the 5 answers that named it, and how often each was the first choice instead.

A side-by-side page exists where both products are among a category's top eight.

How this is measured

Fourteen AI models from 12 labs are asked the same buying questions six ways, for three company sizes. Standings refresh every edition.

Gane sells AI visibility software. No company can pay to change a result.

Read the method →

Sources returned with these answers

The sites and pages the answers that named CISA CSET came back with. A fact about retrieval, not a cause of the answer.

Fourteen of the fourteen models returned a source list in this edition: five return the pages they cited and nine the search results they consulted. These counts come from 5 of the 5 answers that named CISA CSET and are not a share of its labels.

Domains cited

cisa.govIts own site4
github.com3
capterra.com2
complyjet.com2
fairinstitute.org2
gane.ai/indexpublisher (Gane)2
gitnux.org2
itechguides.com2
kovrr.com2
linkedin.com2

Seventeen of the twenty-three domain citations in answers naming CISA CSET came from a third party's page. Two were to the publisher's own pages (the Gane Index), which the models cite like any other source; they are not counted as a third party.

Pages cited

Pages are listed as the models cited them.

By model

How each model answered on CISA CSET across every prompt where it was named for a mid-market B2B company. Fourteen models, six prompts per category.
ModelFirst choiceAlternativeMentionWarningLabels
Claude Haiku 4.510001
GPT-5.4 mini00000
Gemini 3.5 Flash00000
Perplexity Sonar00000
Grok 4.2000000
Mistral Small00000
DeepSeek V4 Flash00000
Llama 4 Maverick00000
Qwen 3.7 Flash00000
Kimi K200000
GLM 4.7 FlashX00101
MiniMax M2.500000
GPT-6 Luna00000
Muse Glimmer 30B00000

What it publishes

Addresses on cisa.gov
24,582
subdomains included
Content
16,504
counted in the table below
Documentation
2
Product · Integration
0 · 0
KindPagesLast 90 days2025-10 to 2026-09LatestCategories named
News or press11,4011042026-09-27SD-WAN, MFA
Template or tool2,28712026-09-24
Blog2,053552026-09-24MFA, SIEM
Conference or event511442026-10-08Logs, SCA
Glossary or explainer116572026-09-17SIEM
Webinar or virtual event68122026-10-08
Report or ebook3312026-09-23
Case study2622026-09-01MFA
Comparison812026-07-27
Podcast or video1undated

Most recent

How it is countedHide how it is counted

Every page cisa.gov exposes, subdomains included. Kind is read from the address and title. The last 90 days, the latest date and the twelve months count pages by when they were published, from the site's feeds, a date in the address, or the page's own publication date, read from up to a hundred of its most recently changed pages; a page that says only when it last changed is counted in its kind but not in when, so the recent counts are a floor, and a kind none of whose pages gives a publication date reads undated. Of its titles that name a category, most name SD-WAN (12); 0 name the category the models place it in. An event counts as online when its address or title says so (webinar, on demand, virtual or online summit); a conference, summit, trade show, expo or roadshow that does not say so is counted as a conference or event, which on a vendor's site is mostly in person. Read September 29, 2026.