# Malcolm: how AI models rank it, November 2026

Gane Index, November 2026 Edition. Named in 2 judge labels across 2 categories by 2 of 14 models. Page: https://www.gane.ai/index/it/vendors/malcolm

## Standing by category

| Category | Share | Rank | Negative rate | Labels |
|---|---|---|---|---|
| [OT and IoT security](https://www.gane.ai/index/it/security/ot-and-iot-security/index.md) | 2% | 14 | 0% | 1 |
| [Network detection and response](https://www.gane.ai/index/it/security/network-detection-and-response/index.md) | 0% | 51 | 0% | 1 |

## What the models said for it

- "Start free with Malcolm + Zeek + Suricata (CISA ICSNPP) for passive monitoring" (Kimi K2, OT/IoT security)
- "Security Onion or Malcolm | Professional-grade capabilities with zero licensing fees." (Gemini 3.5 Flash, NDR)

## By model

| Model | First choice | Alternative | Mention | Warning | Labels |
|---|---|---|---|---|---|
| Claude Haiku 4.5 | 0 | 0 | 0 | 0 | 0 |
| GPT-5.4 mini | 0 | 0 | 0 | 0 | 0 |
| Gemini 3.5 Flash | 0 | 1 | 0 | 0 | 1 |
| Perplexity Sonar | 0 | 0 | 0 | 0 | 0 |
| Grok 4.20 | 0 | 0 | 0 | 0 | 0 |
| Mistral Small | 0 | 0 | 0 | 0 | 0 |
| DeepSeek V4 Flash | 0 | 0 | 0 | 0 | 0 |
| Llama 4 Maverick | 0 | 0 | 0 | 0 | 0 |
| Qwen 3.7 Flash | 0 | 0 | 0 | 0 | 0 |
| Kimi K2 | 1 | 0 | 0 | 0 | 1 |
| GLM 4.7 FlashX | 0 | 0 | 0 | 0 | 0 |
| MiniMax M2.5 | 0 | 0 | 0 | 0 | 0 |
| GPT-6 Luna | 0 | 0 | 0 | 0 | 0 |
| Muse Glimmer 30B | 0 | 0 | 0 | 0 | 0 |

## Sources returned with these answers

The sites and pages cited by the answers that named Malcolm, from 3 of the 3 answers that named it (only the models that return a source list).

### Domains cited

- g2.com: 3
- stellarcyber.ai: 2
- aws.amazon.com: 1
- csoonline.com: 1
- edwartens.co.uk: 1
- edwartens.com: 1
- exabeam.com: 1
- github.com: 1
- guideflow.com: 1
- huntress.com: 1

### Pages cited

- https://g2.com/categories/network-detection-and-response-ndr/small-business: 2
- https://stellarcyber.ai/learn/top-ndr-solutions: 2
- https://aws.amazon.com/marketplace/pp/prodview-e2sfusikn5lxw: 1
- https://csoonline.com/article/4055176/ot-security-why-it-pays-to-look-at-open-source.html: 1
- https://edwartens.co.uk/free/ot-network-monitoring-free-tools: 1
- https://edwartens.com/free/ot-network-monitoring-free-tools: 1
- https://exabeam.com/explainers/network-detection-and-response/ndr-solutions-key-features-and-7-tools-to-know-in-2025: 1
- https://g2.com/products/tenable-ot-security/reviews: 1

## In its own words

What Malcolm's own pages state, read 2026-10-06. Stated by the vendor, not checked by the index.

- Positioning: A powerful, easily deployable network traffic analysis tool suite for network security monitoring (https://malcolm.fyi/)

## What it publishes

Every page malcolm.fyi exposes, read 2026-10-05: 73 addresses. By kind, pages and the last 90 days:


## Record

- Method: https://www.gane.ai/index/it/methodology
- License: CC BY 4.0. Cite as Gane Index, November 2026 Edition, www.gane.ai/index/it.