Gane Index

All indexesEvery index and its categories GTMMarketing, sales, customer and revenue operations software ITSecurity, IT operations, cloud, developer and data software HRHR, payroll, recruiting, performance and learning software FinanceAccounting, planning, spend, billing and treasury software

Claim your listing

Index › IT › Products › ISO 27005 · November 2026 Edition

Cyber risk quantification · Named, not ranked

ISO 27005

–Too few to rank

1/14Models named it

0First choices

2Warnings

November 2026 Edition · all company sizes counted.

Ranked inCyber risk quantification #105 mid-market

What AI models recommend

Named, too few times to rank.

A product needs 10 labels in a category before a share is stated. ISO 27005 has 1.

Why models recommend it

No positive label carried a quote.

What gives them pause

“these are frameworks, not tools, and frequently criticized for subjectivity in academic literature”Grok 4.20 · Negative question · warning

Also on the shortlist

The products named in the same answers as ISO 27005, over the 2 answers that named it, and how often each was the first choice instead.

Product	Named together	Picked instead
RiskLens	2	1	View →
NIST SP 800-30	2	0	View →
Axio	1	0	View →
Axio360	1	0	View →
Balbix	1	0	View →
Bitsight Financial Quantification	1	0	View →
Citalid	1	0	View →
Kovrr	1	0	View →
NCSC	1	0	View →
OCTAVE	1	0	View →

A side-by-side page exists where both products are among a category's top eight.

How this is measured

Fourteen AI models from 12 labs are asked the same buying questions six ways, for three company sizes. Standings refresh every edition.

Gane sells AI visibility software. No company can pay to change a result.

Read the method →

Sources returned with these answers

The sites and pages the answers that named ISO 27005 came back with. A fact about retrieval, not a cause of the answer.

Fourteen of the fourteen models returned a source list in this edition: five return the pages they cited and nine the search results they consulted. These counts come from 2 of the 2 answers that named ISO 27005 and are not a share of its labels.

Domains cited

bpb-eu-w2.wpmucdn.com2

cyesec.com2

fairinstitute.org2

it.tenable.com2

techtarget.com2

cyberpress.org1

g2.com1

gane.ai/indexpublisher (Gane)1

github.com1

hackmd.io1

No domain is on file for ISO 27005, so its own site is not marked. One was to the publisher's own pages (the Gane Index), which the models cite like any other source; they are not counted as a third party.

Pages cited

bpb-eu-w2.wpmucdn.com/blogs.bristol.ac.uk/dist/3/939/files/2024/08/RISCS-Cyber-Risk-Quanti2

cyesec.com/blog/the-complete-guide-to-cyber-risk-quantification2

fairinstitute.org/blog/watch-out-for-these-5-cyber-risk-quantification-methods.-they-dont-2

it.tenable.com/cybersecurity-guide/learn/cyber-risk-quantification2

techtarget.com/news/Cyber-risk-quantification-challenges-and-tools-that-can-help/8369792

cyberpress.org/crq-tools-review1

fairinstitute.org/blog/crq-buyers-guide-cyber-risk-security-ratings-maturity-models-threat1

g2.com/categories/cyber-risk-quantification-crq-tools1

Pages are listed as the models cited them.

By model

How each model answered on ISO 27005 across every prompt where it was named for a mid-market B2B company. Fourteen models, six prompts per category.

Model	Warning	Labels
Claude Haiku 4.5	0	0
GPT-5.4 mini	0	0
Gemini 3.5 Flash	0	0
Perplexity Sonar	0	0
Grok 4.20	1	1
Mistral Small	0	0
DeepSeek V4 Flash	0	0
Llama 4 Maverick	0	0
Qwen 3.7 Flash	0	0
Kimi K2	0	0
GLM 4.7 FlashX	0	0
MiniMax M2.5	0	0
GPT-6 Luna	0	0
Muse Glimmer 30B	0	0