# OWASP: how AI models rank it, November 2026

Gane Index, November 2026 Edition. Named in 1 judge label across 1 category by 1 of 14 models. Page: https://www.gane.ai/index/it/vendors/owasp

## Standing by category

| Category | Share | Rank | Negative rate | Labels |
|---|---|---|---|---|
| [Web application firewalls](https://www.gane.ai/index/it/network/web-application-firewalls/index.md) | 0% | 59 | 0% | 1 |

## By model

| Model | First choice | Alternative | Mention | Warning | Labels |
|---|---|---|---|---|---|
| Claude Haiku 4.5 | 0 | 0 | 0 | 0 | 0 |
| GPT-5.4 mini | 0 | 0 | 0 | 0 | 0 |
| Gemini 3.5 Flash | 0 | 0 | 0 | 0 | 0 |
| Perplexity Sonar | 0 | 0 | 0 | 0 | 0 |
| Grok 4.20 | 0 | 0 | 0 | 0 | 0 |
| Mistral Small | 0 | 0 | 0 | 0 | 0 |
| DeepSeek V4 Flash | 0 | 0 | 0 | 0 | 0 |
| Llama 4 Maverick | 0 | 0 | 1 | 0 | 1 |
| Qwen 3.7 Flash | 0 | 0 | 0 | 0 | 0 |
| Kimi K2 | 0 | 0 | 0 | 0 | 0 |
| GLM 4.7 FlashX | 0 | 0 | 0 | 0 | 0 |
| MiniMax M2.5 | 0 | 0 | 0 | 0 | 0 |
| GPT-6 Luna | 0 | 0 | 0 | 0 | 0 |
| Muse Glimmer 30B | 0 | 0 | 0 | 0 | 0 |

## Sources returned with these answers

The sites and pages cited by the answers that named OWASP, from 1 of the 1 answers that named it (only the models that return a source list).

### Domains cited

- akamai.com: 1
- csoonline.com: 1
- imperva.com: 1
- wiki.owasp.org: 1 (its own site)

### Pages cited

- https://akamai.com/site/en/documents/brief/2025/waf-evaluation-checklist.pdf: 1
- https://csoonline.com/article/4242913/choosing-a-waap-in-2026-3-questions-that-separate-the-shortlist.html: 1
- https://imperva.com/resources/case_study/CS_Fortune500.pdf: 1
- https://imperva.com/resources/ebooks/IM_Buyers_Guide_WAF.pdf: 1
- https://wiki.owasp.org/images/archive/a/a6/20080717161309!Best_Practices_Guide_WAF_v104.en.pdf: 1

## In its own words

What OWASP's own pages state, read 2026-10-06. Stated by the vendor, not checked by the index.

- Positioning: The Open Source Foundation for Application Security (https://owasp.org/)
- For: a global community (https://owasp.org/)
- Price stated: free for everyone, everywhere (https://owasp.org/)
- Free plan or trial: All resources are free and open to everyone. (https://owasp.org/)

## What it publishes

Every page owasp.org exposes, read 2026-09-29: 893 addresses. By kind, pages and the last 90 days:

- blog: 86 pages, 0 in the last 90 days, latest 2025-08-05
- webinar or virtual event: 7 pages, 0 in the last 90 days, latest 2026-05-13
- conference or event: 35 pages, 0 in the last 90 days, latest 2025-11-14
- template or tool: 3 pages, 0 in the last 90 days, latest 2024-05-08
- glossary or explainer: 1 pages, 0 in the last 90 days, latest undated
- podcast or video: 4 pages, 0 in the last 90 days, latest undated
- news or press: 18 pages, 0 in the last 90 days, latest 2024-11-20
- Recent: 2026-05-13 webinar or virtual event: Gen ai project application security risk virtual summit https://genai.owasp.org/event/gen-ai-project-application-security-risk-virtual-summit
- Recent: 2025-11-14 conference or event: Genai security project agentic ai summit europe https://genai.owasp.org/event/genai-security-project-agentic-ai-summit-europe
- Recent: 2025-08-30 conference or event: Genai security project uae summit hackathon https://genai.owasp.org/event/genai-security-project-uae-summit-hackathon
- Recent: 2025-08-28 conference or event: Owasp 2025 global appsec usa washington dc https://genai.owasp.org/event/owasp-2025-global-appsec-usa-washington-dc
- Recent: 2025-08-27 webinar or virtual event: Gen ai application security risk virtual conference https://genai.owasp.org/event/gen-ai-application-security-risk-virtual-conference
- Recent: 2025-08-06 webinar or virtual event: Owasp genai agentic security top 10 global kick off livestream https://genai.owasp.org/event/owasp-genai-agentic-security-top-10-global-kick-off-livestream

## Record

- Method: https://www.gane.ai/index/it/methodology
- License: CC BY 4.0. Cite as Gane Index, November 2026 Edition, www.gane.ai/index/it.