SOAR platforms · RankedFortiSOAR
FortiSOAR is a security orchestration, automation and response (SOAR) platform from Fortinet for security operations center teams · fortinet.com ↗
Read the same way at every company size.
The standing depends on who is buying. Every model is asked the same questions for each company size.
Tines is first at 41%.
Tines is first at 47%. 0 of 14 models made it the first choice when asked directly.
Cortex XSOAR is first at 55%.
Why models recommend it
“with a slight lean toward FortiSOAR if your main goal is a dedicated SOAR platform”GPT-5.4 mini · Paraphrase question · first choice
“FortiSOAR is a security orchestration, automation, and response software designed to help organizations manage and streamline their security operations”Claude Haiku 4.5 · Paraphrase question · alternative
“Vendors worth shortlisting based on mid-market fit: Swimlane Turbine, Tines, Torq, FortiSOAR”DeepSeek V4 Flash · Scale-constrained question · alternative
“a fit when you're already invested in Fortinet products and want deep Security Fabric orchestration”GPT-5.4 mini · Comparative question · alternative
What gives them pause
“Avoid for tight budgets: Enterprise-heavy tools like Palo Alto Cortex XSOAR, Splunk SOAR, or FortiSOAR”Grok 4.20 · Budget-constrained question · warning
“FortiSOAR if your environment is heterogeneous or you expect to replace Fortinet products.”Perplexity Sonar · Negative question · warning
“or FortiSOAR) unless you are fully committed to that ecosystem”Qwen 3.7 Flash · Negative question · warning
“Avoid if you don't have a heavy Fortinet investment.”DeepSeek V4 Flash · Negative question · warning
Also on the shortlist
The products named in the same answers as FortiSOAR, over the 48 answers that named it, and how often each was the first choice instead.
| Product | Named together | Picked instead | |
|---|---|---|---|
| 44 | 21 | View → | |
| 44 | 2 | View → | |
| 40 | 9 | View → | |
| 33 | 2 | View → | |
| 33 | 1 | View → | |
| 32 | 1 | View → | |
| 31 | 0 | View → | |
| 17 | 0 | View → | |
| 13 | 3 | View → | |
| 9 | 1 | View → |
What the models named instead of FortiSOAR →
A side-by-side page exists where both products are among a category's top eight.
At a glance
Stated on FortiSOAR's own site, not checked by Gane.
- For
- SOC
How this is measured
Fourteen AI models from 12 labs are asked the same buying questions six ways, for three company sizes. Standings refresh every edition.
Gane sells AI visibility software. No company can pay to change a result.
Read the method →Sources returned with these answers
Fourteen of the fourteen models returned a source list in this edition: five return the pages they cited and nine the search results they consulted. These counts come from 48 of the 48 answers that named FortiSOAR and are not a share of its labels.
Domains cited
154 of the 154 domain citations in answers naming FortiSOAR came from a third party's page.
Pages cited
Pages are listed as the models cited them.
By model
| Model | First choice | Alternative | Mention | Warning | Labels |
|---|---|---|---|---|---|
| Claude Haiku 4.5 | 0 | 1 | 1 | 0 | 2 |
| GPT-5.4 mini | 1 | 2 | 0 | 0 | 3 |
| Gemini 3.5 Flash | 0 | 0 | 0 | 0 | 0 |
| Perplexity Sonar | 0 | 1 | 0 | 1 | 2 |
| Grok 4.20 | 0 | 1 | 0 | 1 | 2 |
| Mistral Small | 0 | 0 | 0 | 0 | 0 |
| DeepSeek V4 Flash | 0 | 1 | 1 | 1 | 3 |
| Llama 4 Maverick | 0 | 0 | 1 | 0 | 1 |
| Qwen 3.7 Flash | 0 | 0 | 0 | 1 | 1 |
| Kimi K2 | 0 | 0 | 0 | 0 | 0 |
| GLM 4.7 FlashX | 0 | 1 | 0 | 0 | 1 |
| MiniMax M2.5 | 0 | 0 | 0 | 0 | 0 |
| GPT-6 Luna | 0 | 1 | 0 | 0 | 1 |
| Muse Glimmer 30B | 0 | 0 | 2 | 0 | 2 |
What it publishes
| Kind | Pages | Last 90 days | 2025-10 to 2026-09 | Latest | Categories named |
|---|---|---|---|---|---|
| Blog | 1,852 | 3 | 2026-09-24 | SASE, DLP | |
| News or press | 1,828 | undated | SD-WAN, SASE | ||
| Case study | 1,549 | 0 | 2025-05-01 | ZTNA, ITAM | |
| Glossary or explainer | 203 | undated | CIAM, SIEM | ||
| Comparison | 94 | undated | SD-WAN, SASE | ||
| Report or ebook | 86 | undated | CNAPP, SASE | ||
| Conference or event | 55 | 1 | 2026-09-02 | SASE | |
| Template or tool | 9 | undated | DLP | ||
| Webinar or virtual event | 6 | undated |
Most recent
- 2026-09-24Uncovering a sectoprat variant embedded in legitimate software blog
- 2026-09-23Cloud intrusions now move at machine speed blog
- 2026-09-02Join 2026 sase summit building autonomous trust for ai era conference or event
- 2026-07-14Fortiendpoint expands security for the ai era blog
- 2026-06-30Update on fortinet use of frontier ai blog
- 2026-06-16Introducing fortisoc one platform total control blog
How it is countedHide how it is counted
Every page fortinet.com exposes, subdomains included. Kind is read from the address and title. The last 90 days, the latest date and the twelve months count pages by when they were published, from the site's feeds, a date in the address, or the page's own publication date, read from up to a hundred of its most recently changed pages; a page that says only when it last changed is counted in its kind but not in when, so the recent counts are a floor, and a kind none of whose pages gives a publication date reads undated. Of its titles that name a category, most name SD-WAN (172); 0 name the category the models place it in. An event counts as online when its address or title says so (webinar, on demand, virtual or online summit); a conference, summit, trade show, expo or roadshow that does not say so is counted as a conference or event, which on a vendor's site is mostly in person. Read September 29, 2026.