# CISA Malcolm: how AI models rank it, November 2026

Gane Index, November 2026 Edition. Named in 3 judge labels across 1 category by 3 of 14 models. Page: https://www.gane.ai/index/it/vendors/cisa-malcolm

## Standing by category

| Category | Share | Rank | Negative rate | Labels |
|---|---|---|---|---|
| [OT and IoT security](https://www.gane.ai/index/it/security/ot-and-iot-security/index.md) | 2% | 13 | 33% | 3 |

## What the models said for it

- "Start with Free Asset Discovery & Passive Monitoring: ... feed it into a instance of CISA Malcolm" (Gemini 3.5 Flash, OT/IoT security)
- "CISA Malcolm is an open-source tool for automated network traffic analysis" (Claude Haiku 4.5, OT/IoT security)

## And against it

- "Be Cautious With: CISA Malcolm (until patched)" (GLM 4.7 FlashX, OT/IoT security)

## By model

| Model | First choice | Alternative | Mention | Warning | Labels |
|---|---|---|---|---|---|
| Claude Haiku 4.5 | 0 | 1 | 0 | 0 | 1 |
| GPT-5.4 mini | 0 | 0 | 0 | 0 | 0 |
| Gemini 3.5 Flash | 1 | 0 | 0 | 0 | 1 |
| Perplexity Sonar | 0 | 0 | 0 | 0 | 0 |
| Grok 4.20 | 0 | 0 | 0 | 0 | 0 |
| Mistral Small | 0 | 0 | 0 | 0 | 0 |
| DeepSeek V4 Flash | 0 | 0 | 0 | 0 | 0 |
| Llama 4 Maverick | 0 | 0 | 0 | 0 | 0 |
| Qwen 3.7 Flash | 0 | 0 | 0 | 0 | 0 |
| Kimi K2 | 0 | 0 | 0 | 0 | 0 |
| GLM 4.7 FlashX | 0 | 0 | 0 | 1 | 1 |
| MiniMax M2.5 | 0 | 0 | 0 | 0 | 0 |
| GPT-6 Luna | 0 | 0 | 0 | 0 | 0 |
| Muse Glimmer 30B | 0 | 0 | 0 | 0 | 0 |

## Sources returned with these answers

The sites and pages cited by the answers that named CISA Malcolm, from 4 of the 4 answers that named it (only the models that return a source list).

### Domains cited

- elisity.com: 3
- asimily.com: 2
- fortinet.com: 2
- g2.com: 2
- github.com: 2
- inl.gov: 2
- malcolm.fyi: 2
- netwitness.com: 2
- networkintelligence.ai: 2
- otecosystem.com: 2

### Pages cited

- https://elisity.com/blog/leading-vendors-securing-ot-industrial-control-systems: 3
- https://inl.gov/national-security/ics-malcolm: 2
- https://malcolm.fyi/: 2
- https://netwitness.com/blog/top-operational-technology-security-providers: 2
- https://networkintelligence.ai/blogs/best-ot-security-services: 2
- https://reliamag.com/topics/guides/best-industrial-cybersecurity-platforms-ot-ics-security-2026: 2
- https://systemshardening.com/articles/observability/ot-network-monitoring-malcolm: 2
- https://asimily.com/blog/best-ot-ics-security-platforms: 1

## Record

- Method: https://www.gane.ai/index/it/methodology
- License: CC BY 4.0. Cite as Gane Index, November 2026 Edition, www.gane.ai/index/it.