2 categories · RankedCyCognito
CyCognito is an attack surface management product that discovers an organization's external assets and exposures without needing prior credentials · cycognito.com ↗
Read the same way at every company size.
The standing depends on who is buying. Every model is asked the same questions for each company size.
Intruder is first at 35%.
Intruder is first at 29%. 2 of 14 models made it the first choice when asked directly.
Cortex Xpanse is first at 44%.
Why models recommend it
“If you have a dedicated security team: Go with CyCognito. It provides the highest level of technical safety net”Qwen 3.7 Flash · Paraphrase question · first choice
“For most modern enterprises, CyCognito and Microsoft EASM are currently leading the market”Qwen 3.7 Flash · Comparative question · first choice
“Strong candidates to shortlist would be CyCognito (if you have shadow IT complexity)”DeepSeek V4 Flash · Scale-constrained question · first choice
“CyCognito (Best Overall for Lean Security Teams)”Gemini 3.5 Flash · Direct question · first choice
What gives them pause
“Users report high false positive rates, slow support, lack of step-by-step remediation guidance, and pricing that's prohibitive for SMBs”DeepSeek V4 Flash · Negative question · warning
“CyCognito can miss assets tied to subsidiaries or recent acquisitions if the connection isn't obvious from public data”Claude Haiku 4.5 · Negative question · warning
“Frequent mentions of false positives... Expensive for SMBs; better for larger enterprises with dedicated teams.”Grok 4.20 · Negative question · warning
“enterprise options like Cortex Xpanse, CyCognito, or CrowdStrike Falcon often start at thousands per month”Grok 4.20 · Budget-constrained question · warning
Also on the shortlist
The products named in the same answers as CyCognito, over the 134 answers that named it, and how often each was the first choice instead.
| Product | Named together | Picked instead | |
|---|---|---|---|
| 106 | 8 | Compare → | |
| 95 | 30 | Compare → | |
| 58 | 2 | Compare → | |
| 54 | 0 | Compare → | |
| 41 | 25 | Compare → | |
| 37 | 5 | View → | |
| 34 | 5 | Compare → | |
| 28 | 1 | View → | |
| 25 | 0 | View → | |
| 23 | 5 | Compare → |
What the models named instead of CyCognito →
A side-by-side page exists where both products are among a category's top eight.
At a glance
Stated on CyCognito's own site, not checked by Gane.
- For
- enterprise security teams
- Price stated
- Pricing varies based on customer needs. Contact for a custom quote.
- Starting price
- 0.00
- Free plan or trial
- Free Risk Assessment
- Customers named
- Berlitz, Colgate Palmolive, Ströer, Deloitte, Scientific Games, Human API, Asklepios
How this is measured
Fourteen AI models from 12 labs are asked the same buying questions six ways, for three company sizes. Standings refresh every edition.
Gane sells AI visibility software. No company can pay to change a result.
Read the method →Sources returned with these answers
Fourteen of the fourteen models returned a source list in this edition: five return the pages they cited and nine the search results they consulted. These counts come from 131 of the 134 answers that named CyCognito and are not a share of its labels.
Domains cited
387 of the 425 domain citations in answers naming CyCognito came from a third party's page.
Pages cited
Pages are listed as the models cited them.
By model
| Model | First choice | Alternative | Mention | Warning | Labels |
|---|---|---|---|---|---|
| Claude Haiku 4.5 | 0 | 1 | 1 | 1 | 3 |
| GPT-5.4 mini | 0 | 0 | 0 | 0 | 0 |
| Gemini 3.5 Flash | 1 | 2 | 0 | 0 | 3 |
| Perplexity Sonar | 0 | 2 | 0 | 1 | 3 |
| Grok 4.20 | 0 | 1 | 4 | 2 | 7 |
| Mistral Small | 1 | 1 | 0 | 0 | 2 |
| DeepSeek V4 Flash | 1 | 2 | 0 | 1 | 4 |
| Llama 4 Maverick | 0 | 2 | 2 | 0 | 4 |
| Qwen 3.7 Flash | 2 | 1 | 0 | 0 | 3 |
| Kimi K2 | 0 | 2 | 2 | 1 | 5 |
| GLM 4.7 FlashX | 0 | 4 | 0 | 0 | 4 |
| MiniMax M2.5 | 0 | 1 | 0 | 0 | 1 |
| GPT-6 Luna | 0 | 1 | 1 | 0 | 2 |
| Muse Glimmer 30B | 0 | 2 | 2 | 0 | 4 |
What it publishes
| Kind | Pages | Last 90 days | 2025-10 to 2026-09 | Latest | Categories named |
|---|---|---|---|---|---|
| Blog | 250 | 17 | 2026-09-23 | ASM, SD-WAN | |
| Glossary or explainer | 192 | 0 | 2026-03-16 | ASM, WAF | |
| News or press | 52 | 0 | 2019-11-19 | ASM, WAF | |
| Report or ebook | 44 | undated | ASM | ||
| Webinar or virtual event | 22 | 1 | 2026-09-14 | ASM | |
| Case study | 14 | undated | |||
| Conference or event | 7 | undated | |||
| Comparison | 7 | 0 | 2021-04-07 | SAST | |
| Template or tool | 4 | undated |
Most recent
- 2026-09-23Emerging threat cve 2026 94545 next js remote code execution via imageresponse svg injection blog
- 2026-09-22Emerging threat cve 2026 69197 umbraco cms protected content disclosure via delivery api expansion blog
- 2026-09-16Emerging threat cve 2026 70756 oracle weblogic server takeover via t3 and iiop blog
- 2026-09-15Emerging threat cve 2026 76461 cisco secure email gateway root rce via email parsing blog
- 2026-09-14Emerging threat cve 2026 78006 the events calendar remote code execution via php object injection blog
- 2026-09-14Introducing the cycognito mcp server full exposure context on demand webinar or virtual event
Events in person
- November 18, 2025 to November 20, 2025Meet CyCognito at mysecurityevent 2025 in StuttgartStuttgart, Germany · sponsored
- October 14, 2025Meet CyCognito at the IANS Information Security Forum – BostonBoston · sponsored
- October 7, 2025 to October 9, 2025it-sa Expo & Congress 2025Nuremberg, Germany · exhibited
- October 7, 2025IANS Information Security Forum – AtlantaAtlanta · sponsored
As the event pages on cycognito.com state them, read September 28, 2026.
How it is countedHide how it is counted
Every page cycognito.com exposes, subdomains included. Kind is read from the address and title. The last 90 days, the latest date and the twelve months count pages by when they were published, from the site's feeds, a date in the address, or the page's own publication date, read from up to a hundred of its most recently changed pages; a page that says only when it last changed is counted in its kind but not in when, so the recent counts are a floor, and a kind none of whose pages gives a publication date reads undated. An event counts as online when its address or title says so (webinar, on demand, virtual or online summit); a conference, summit, trade show, expo or roadshow that does not say so is counted as a conference or event, which on a vendor's site is mostly in person. Read September 29, 2026.