The standing depends on who is buying. Every model is asked the same questions for each company size.
Intruder is first at 35%.
Intruder is first at 29%. 0 of 14 models made it the first choice when asked directly.
Ranked first. Next is Microsoft Defender External Attack Surface Management at 13%.
“Strong in automated discovery, risk prioritization, and response. Excellent for broad internet-facing assets and integrations.”Grok 4.20 · Scale-constrained question · first choice
“A leading Cyber Asset Attack Surface Management (CAASM) tool, recognized as a Leader in Forrester's 2024 ASM Wave.”Mistral Small · Comparative question · first choice
“Cortex Xpanse represents the enterprise benchmark for internet-scale external attack surface management”MiniMax M2.5 · Comparative question · first choice
“Choose Cortex Xpanse for large-scale enterprise exposure management and automated SOC response.”Perplexity Sonar · Comparative question · first choice
“What to Avoid ... Enterprise-focused; ~$95,000/year starting price”Kimi K2 · Paraphrase question · warning
“Enterprise tools like Palo Alto Cortex Xpanse, Censys, and Mandiant ASM are powerful but often assume six-figure budgets”Kimi K2 · Direct question · warning
“General high-cost or complex platforms (e.g., Cortex Xpanse, Mandiant ASM, CrowdStrike Falcon Exposure Management)”Grok 4.20 · Negative question · warning
“enterprise options like Cortex Xpanse, CyCognito, or CrowdStrike Falcon often start at thousands per month”Grok 4.20 · Budget-constrained question · warning
The products named in the same answers as Cortex Xpanse, over the 119 answers that named it, and how often each was the first choice instead.
| Product | Named together | Picked instead | |
|---|---|---|---|
| 102 | 9 | Compare → | |
| 95 | 4 | Compare → | |
| 53 | 2 | Compare → | |
| 45 | 0 | Compare → | |
| 36 | 25 | Compare → | |
| 34 | 0 | View → | |
| 25 | 3 | Compare → | |
| 25 | 2 | View → | |
| 24 | 6 | Compare → | |
| 23 | 0 | View → |
What the models named instead of Cortex Xpanse →
A side-by-side page exists where both products are among a category's top eight.
Stated on Cortex Xpanse's own site, not checked by Gane.
Fourteen AI models from 12 labs are asked the same buying questions six ways, for three company sizes. Standings refresh every edition.
Gane sells AI visibility software. No company can pay to change a result.
Read the method →Fourteen of the fourteen models returned a source list in this edition: five return the pages they cited and nine the search results they consulted. These counts come from 115 of the 119 answers that named Cortex Xpanse and are not a share of its labels.
345 of the 371 domain citations in answers naming Cortex Xpanse came from a third party's page. Twenty-six were to the publisher's own pages (the Gane Index), which the models cite like any other source; they are not counted as a third party.
Pages are listed as the models cited them.
| Model | First choice | Alternative | Mention | Warning | Labels |
|---|---|---|---|---|---|
| Claude Haiku 4.5 | 0 | 0 | 1 | 0 | 1 |
| GPT-5.4 mini | 0 | 0 | 0 | 0 | 0 |
| Gemini 3.5 Flash | 0 | 0 | 0 | 0 | 0 |
| Perplexity Sonar | 1 | 0 | 0 | 2 | 3 |
| Grok 4.20 | 1 | 0 | 0 | 3 | 4 |
| Mistral Small | 2 | 0 | 2 | 0 | 4 |
| DeepSeek V4 Flash | 1 | 0 | 0 | 4 | 5 |
| Llama 4 Maverick | 0 | 1 | 1 | 0 | 2 |
| Qwen 3.7 Flash | 0 | 1 | 0 | 0 | 1 |
| Kimi K2 | 1 | 0 | 0 | 3 | 4 |
| GLM 4.7 FlashX | 1 | 1 | 0 | 2 | 4 |
| MiniMax M2.5 | 1 | 0 | 0 | 0 | 1 |
| GPT-6 Luna | 0 | 0 | 1 | 0 | 1 |
| Muse Glimmer 30B | 0 | 0 | 1 | 0 | 1 |
| Kind | Pages | Last 90 days | 2025-10 to 2026-09 | Latest | Categories named |
|---|---|---|---|---|---|
| Blog | 324 | 7 | 2026-08-11 | IaC, Patching | |
| Report or ebook | 66 | 0 | 2026-06-16 | ||
| Glossary or explainer | 32 | 1 | 2026-09-03 | ||
| Podcast or video | 24 | 6 | 2026-09-10 | ||
| Comparison | 16 | 1 | 2026-08-18 | ||
| Case study | 15 | 2 | 2026-08-05 | ||
| Webinar or virtual event | 2 | 0 | 2026-01-27 | ||
| Conference or event | 2 | 0 | 2025-06-18 | ||
| Template or tool | 2 | 0 | 2026-01-14 |
As the event pages on cortex.io state them, read September 28, 2026.
Every page cortex.io exposes, subdomains included. Kind is read from the address and title. The last 90 days, the latest date and the twelve months count pages by when they were published, from the site's feeds, a date in the address, or the page's own publication date, read from up to a hundred of its most recently changed pages; a page that says only when it last changed is counted in its kind but not in when, so the recent counts are a floor, and a kind none of whose pages gives a publication date reads undated. An event counts as online when its address or title says so (webinar, on demand, virtual or online summit); a conference, summit, trade show, expo or roadshow that does not say so is counted as a conference or event, which on a vendor's site is mostly in person. Read September 29, 2026.