# Endor Labs: how AI models rank it, November 2026

Gane Index, November 2026 Edition. Named in 16 judge labels across 3 categories by 9 of 14 models. Page: https://www.gane.ai/index/it/vendors/endor-labs

## Standing by category

| Category | Share | Rank | Negative rate | Labels |
|---|---|---|---|---|
| [Software composition analysis](https://www.gane.ai/index/it/developer/software-composition-analysis/index.md) | 0% | 13 | 0% | 13 |
| [Application security posture management](https://www.gane.ai/index/it/developer/application-security-posture-management/index.md) | 0% | 71 | 50% | 2 |
| [Static application security testing](https://www.gane.ai/index/it/developer/static-application-security-testing/index.md) | 0% | 37 | 0% | 1 |

## What the models said for it

- "highlights Endor Labs, Snyk, and Semgrep Supply Chain as reducing actionable findings by 60–85%" (DeepSeek V4 Flash, SCA)
- "Other top contenders include FOSSA, Safeguard SCA, Socket, Semgrep Supply Chain, and Endor Labs." (Llama 4 Maverick, SCA)
- "Endor Labs is worth testing if reducing noisy or unreachable findings matters more" (Perplexity Sonar, SCA)
- "Choose Endor Labs or Semgrep Supply Chain when reducing false positives" (Perplexity Sonar, SCA)

## And against it

- "Avoid high-cost commercial platforms like Endor Labs" (Grok 4.20, ASPM)

## By model

| Model | First choice | Alternative | Mention | Warning | Labels |
|---|---|---|---|---|---|
| Claude Haiku 4.5 | 0 | 0 | 1 | 0 | 1 |
| GPT-5.4 mini | 0 | 0 | 0 | 0 | 0 |
| Gemini 3.5 Flash | 0 | 1 | 0 | 0 | 1 |
| Perplexity Sonar | 0 | 2 | 0 | 0 | 2 |
| Grok 4.20 | 0 | 0 | 3 | 1 | 4 |
| Mistral Small | 0 | 0 | 0 | 0 | 0 |
| DeepSeek V4 Flash | 0 | 2 | 1 | 0 | 3 |
| Llama 4 Maverick | 0 | 1 | 0 | 0 | 1 |
| Qwen 3.7 Flash | 0 | 0 | 0 | 0 | 0 |
| Kimi K2 | 0 | 1 | 0 | 0 | 1 |
| GLM 4.7 FlashX | 0 | 0 | 0 | 0 | 0 |
| MiniMax M2.5 | 0 | 0 | 1 | 0 | 1 |
| GPT-6 Luna | 0 | 0 | 0 | 0 | 0 |
| Muse Glimmer 30B | 0 | 1 | 1 | 0 | 2 |

## Sources returned with these answers

The sites and pages cited by the answers that named Endor Labs, from 47 of the 48 answers that named it (only the models that return a source list).

### Domains cited

- g2.com: 23
- checkmarx.com: 18
- sonatype.com: 18
- dupple.com: 17
- res.cloudinary.com: 17
- securityboulevard.com: 16
- endorlabs.com: 14 (its own site)
- linuxfoundation.org: 14
- mend.io: 14
- aikido.dev: 12

### Pages cited

- https://dupple.com/learn/best-software-composition-analysis-tools: 17
- https://res.cloudinary.com/snyk/image/upload/v1731508416/website-pdfs/The-Forrester-Wave-Software-Composition-Analysis-Software-Q4-2024.pdf: 17
- https://sonatype.com/compare/best-sca-tools: 15
- https://linuxfoundation.org/hubfs/Reports/An-Open-Guide-To-Evaluating-Software-Composition-Analysis-Tools_V2.pdf: 14
- https://mend.io/blog/best-software-composition-analysis-sca-tools-top-solutions: 12
- https://raven.io/blog/best-software-composition-analysis-tools: 12
- https://g2.com/categories/software-composition-analysis/enterprise: 11
- https://blog.jetbrains.com/qodana/2025/09/best-software-composition-analysis-tools: 10

## In its own words

What Endor Labs's own pages state, read 2026-09-28. Stated by the vendor, not checked by the index.

- Positioning: Agentic Application Security Platform (https://endorlabs.com/)
- For: security teams (https://endorlabs.com/)
- Price stated: Pricing is seat-based and varies slightly depending on the SKU. (https://www.endorlabs.com/pricing)
- Starting price: FREE (https://www.endorlabs.com/pricing)
- Free plan or trial: Get Started Free (https://endorlabs.com/)
- Integrations claimed: 29 (https://www.endorlabs.com/customers)
- Certifications: FedRAMP, ISO 42001, PCI DSS, SOC 2
- Customers named: Rubrik, Egnyte, Astronomer, Atlassian, Glean, Cursor, Dropbox, Netskope

## What it publishes

Every page endorlabs.com exposes, read 2026-09-29: 10456 addresses. By kind, pages and the last 90 days:

- blog: 9 pages, 0 in the last 90 days, latest undated
- case study: 1 pages, 0 in the last 90 days, latest undated
- webinar or virtual event: 12 pages, 0 in the last 90 days, latest undated
- conference or event: 184 pages, 0 in the last 90 days, latest undated
- report or ebook: 153 pages, 0 in the last 90 days, latest undated
- comparison: 27 pages, 7 in the last 90 days, latest 2026-09-16
- glossary or explainer: 479 pages, 120 in the last 90 days, latest 2026-09-28
- Recent: 2026-09-28 glossary or explainer: Project mount symlink traversal in brig how a sandbox reaches host directories it was never given https://www.endorlabs.com/learn/project-mount-symlink-traversal-in-brig-how-a-sandbox-reaches-host-directories-it-was-never-given
- Recent: 2026-09-25 glossary or explainer: Best code security tools https://www.endorlabs.com/learn/best-code-security-tools
- Recent: 2026-09-25 glossary or explainer: Engineering a security harness for ai coding agents https://www.endorlabs.com/learn/engineering-a-security-harness-for-ai-coding-agents
- Recent: 2026-09-25 glossary or explainer: Opus 5 5 6x cheaper and 2x faster than fable 5 1 but memorization keeps it off the top spot https://www.endorlabs.com/learn/opus-5-5-6x-cheaper-and-2x-faster-than-fable-5-1-but-memorization-keeps-it-off-the-top-spot
- Recent: 2026-09-21 glossary or explainer: Llm development risks security threats and mitigation strategies https://www.endorlabs.com/learn/llm-development-risks-security-threats-and-mitigation-strategies
- Recent: 2026-09-21 glossary or explainer: Vulnerability blast radius how to measure and reduce impact https://www.endorlabs.com/learn/vulnerability-blast-radius-how-to-measure-and-reduce-impact

## Record

- Method: https://www.gane.ai/index/it/methodology
- License: CC BY 4.0. Cite as Gane Index, November 2026 Edition, www.gane.ai/index/it.