# Grype + Syft: how AI models rank it, November 2026

Gane Index, November 2026 Edition. Named in 3 judge labels across 2 categories by 2 of 14 models. Page: https://www.gane.ai/index/it/vendors/grype-syft

## Standing by category

| Category | Share | Rank | Negative rate | Labels |
|---|---|---|---|---|
| [Software composition analysis](https://www.gane.ai/index/it/developer/software-composition-analysis/index.md) | 0% | 24 | 0% | 2 |
| [Container and Kubernetes security](https://www.gane.ai/index/it/cloud/container-and-kubernetes-security/index.md) | 0% | 51 | 0% | 1 |

## What the models said for it

- "Need SBOM compliance generation (free) | Grype + Syft | Industry standard for SBOM generation and matching." (Gemini 3.5 Flash, SCA)
- "Teams focusing on SBOMs and supply chain transparency: Grype + Syft offers a clean, composable stack." (GLM 4.7 FlashX, SCA)
- "*Alternative:* Grype & Syft (by Anchore)" (Gemini 3.5 Flash, Container security)

## By model

| Model | First choice | Alternative | Mention | Warning | Labels |
|---|---|---|---|---|---|
| Claude Haiku 4.5 | 0 | 0 | 0 | 0 | 0 |
| GPT-5.4 mini | 0 | 0 | 0 | 0 | 0 |
| Gemini 3.5 Flash | 0 | 2 | 0 | 0 | 2 |
| Perplexity Sonar | 0 | 0 | 0 | 0 | 0 |
| Grok 4.20 | 0 | 0 | 0 | 0 | 0 |
| Mistral Small | 0 | 0 | 0 | 0 | 0 |
| DeepSeek V4 Flash | 0 | 0 | 0 | 0 | 0 |
| Llama 4 Maverick | 0 | 0 | 0 | 0 | 0 |
| Qwen 3.7 Flash | 0 | 0 | 0 | 0 | 0 |
| Kimi K2 | 0 | 0 | 0 | 0 | 0 |
| GLM 4.7 FlashX | 0 | 1 | 0 | 0 | 1 |
| MiniMax M2.5 | 0 | 0 | 0 | 0 | 0 |
| GPT-6 Luna | 0 | 0 | 0 | 0 | 0 |
| Muse Glimmer 30B | 0 | 0 | 0 | 0 | 0 |

## Sources returned with these answers

The sites and pages cited by the answers that named Grype + Syft, from 7 of the 8 answers that named it (only the models that return a source list).

### Domains cited

- appsecsanta.com: 5
- safeguard.sh: 5
- github.com: 4
- checkmarx.com: 3
- people.bu.edu: 3
- bestdevops.com: 2
- cheatsheetseries.owasp.org: 2
- docs.digital.gob.do: 2
- dupple.com: 2
- owasp.github.io: 2

### Pages cited

- https://people.bu.edu/staro/Vulnerability-Scanner-Survey.pdf: 3
- https://appsecsanta.com/sca-tools: 2
- https://appsecsanta.com/sca-tools/open-source-sca-tools: 2
- https://bestdevops.com/top-10-dependency-vulnerability-scanners-features-pros-cons-comparison: 2
- https://cheatsheetseries.owasp.org/cheatsheets/Vulnerable_Dependency_Management_Cheat_Sheet.html: 2
- https://checkmarx.com/learn/appsec-vendors/ultimate-snyk-solution-overview-and-10-alternatives-to-consider: 2
- https://docs.digital.gob.do/books/evaluacion-de-herramientas-para-la-evaluacion-de-seguridad-en-soluciones-desarrolladas/export/markdown: 2
- https://dupple.com/learn/best-software-composition-analysis-tools: 2

## Record

- Method: https://www.gane.ai/index/it/methodology
- License: CC BY 4.0. Cite as Gane Index, November 2026 Edition, www.gane.ai/index/it.