# ThreatDown: how AI models rank it, November 2026

Gane Index, November 2026 Edition. Named in 3 judge labels across 3 categories by 2 of 14 models. Page: https://www.gane.ai/index/it/vendors/threatdown

## Standing by category

| Category | Share | Rank | Negative rate | Labels |
|---|---|---|---|---|
| [Email security](https://www.gane.ai/index/it/security/email-security/index.md) | 0% | 52 | 0% | 1 |
| [Endpoint protection](https://www.gane.ai/index/it/operations/endpoint-protection/index.md) | 0% | 35 | 0% | 1 |
| [Identity threat detection and response](https://www.gane.ai/index/it/identity/identity-threat-detection-and-response/index.md) | 0% | 108 | 0% | 1 |

## What the models said for it

- "ThreatDown is budget-oriented with good detection and starts low" (Grok 4.20, Endpoint protection)

## By model

| Model | First choice | Alternative | Mention | Warning | Labels |
|---|---|---|---|---|---|
| Claude Haiku 4.5 | 0 | 0 | 0 | 0 | 0 |
| GPT-5.4 mini | 0 | 0 | 0 | 0 | 0 |
| Gemini 3.5 Flash | 0 | 0 | 0 | 0 | 0 |
| Perplexity Sonar | 0 | 0 | 0 | 0 | 0 |
| Grok 4.20 | 0 | 1 | 1 | 0 | 2 |
| Mistral Small | 0 | 0 | 0 | 0 | 0 |
| DeepSeek V4 Flash | 0 | 0 | 0 | 0 | 0 |
| Llama 4 Maverick | 0 | 0 | 0 | 0 | 0 |
| Qwen 3.7 Flash | 0 | 0 | 0 | 0 | 0 |
| Kimi K2 | 0 | 0 | 0 | 0 | 0 |
| GLM 4.7 FlashX | 0 | 0 | 0 | 0 | 0 |
| MiniMax M2.5 | 0 | 0 | 0 | 0 | 0 |
| GPT-6 Luna | 0 | 0 | 0 | 0 | 0 |
| Muse Glimmer 30B | 0 | 0 | 1 | 0 | 1 |

## Sources returned with these answers

The sites and pages cited by the answers that named ThreatDown, from 12 of the 12 answers that named it (only the models that return a source list).

### Domains cited

- g2.com: 10
- softwareadvice.com: 8
- huntress.com: 7
- nexcess.com: 5
- microsoft.com: 4
- reddit.com: 4
- gane.ai/index: 3
- mspcompared.com: 3
- spotsaas.com: 3
- capterra.com: 2

### Pages cited

- https://g2.com/categories/endpoint-protection-platforms/small-business: 7
- https://softwareadvice.com/category/4777-endpoint-protection/small-business: 7
- https://huntress.com/internal-it-cybersecurity-guide/best-endpoint-protection-for-small-businesses: 5
- https://nexcess.com/blog/best-endpoint-security-solutions: 5
- https://softwareadvice.com/security/edr-comparison/small-business: 4
- https://mspcompared.com/best/endpoint-security/for-small-business: 3
- https://endpointindex.com/research/crowdstrike-vs-sentinelone-vs-microsoft-defender: 2
- https://www.gane.ai/index/it/security/client-side-protection/smb: 2

## In its own words

What ThreatDown's own pages state, read 2026-10-06. Stated by the vendor, not checked by the index.

- Positioning: All-in-One Cybersecurity Platform + MDR (https://threatdown.com/)
- For: SMBs, mid-market, and MSPs (https://threatdown.com/)
- Price stated: ~$10 per device/month (https://threatdown.com/)
- Starting price: 10 (https://threatdown.com/)
- Free plan or trial: Try it free (https://www.threatdown.com/products/)
- Customers named: HumanKind, PinkByte, Group Tyre Wholesale, Mannford Public Schools, Group Tyre, IT LeasingTeam, Contarini Leopoldo, St Bernard’s High School

## What it publishes

Every page threatdown.com exposes, read 2026-09-29: 8165 addresses. By kind, pages and the last 90 days:

- blog: 1010 pages, 7 in the last 90 days, latest 2026-09-23
- case study: 26 pages, 2 in the last 90 days, latest 2026-09-17
- webinar or virtual event: 63 pages, 9 in the last 90 days, latest 2026-08-12
- conference or event: 1 pages, 0 in the last 90 days, latest 2023-08-16
- report or ebook: 6 pages, 0 in the last 90 days, latest 2025-04-02
- comparison: 18 pages, 0 in the last 90 days, latest 2026-01-13
- template or tool: 10 pages, 0 in the last 90 days, latest 2026-02-24
- glossary or explainer: 137 pages, 0 in the last 90 days, latest 2025-06-10
- news or press: 89 pages, 14 in the last 90 days, latest 2026-09-24
- Recent: 2026-09-24 news or press: New carbonato malware uses ai agents to hijack exposed docker hosts https://www.threatdown.com/press/in-the-news/new-carbonato-malware-uses-ai-agents-to-hijack-exposed-docker-hosts/
- Recent: 2026-09-23 blog: Carbonato https://www.threatdown.com/blog/carbonato
- Recent: 2026-09-17 case study: Case studies mannford school https://www.threatdown.com/case-studies-mannford-school
- Recent: 2026-09-17 case study: Mannford public schools customer story https://www.threatdown.com/resources/mannford-public-schools-customer-story/
- Recent: 2026-09-10 news or press: Threatdown records 100 malware block rate in 17 consecutive avlab tests https://www.threatdown.com/press/releases/threatdown-records-100-malware-block-rate-in-17-consecutive-avlab-tests
- Recent: 2026-09-09 blog: This sonicwall bug is 2 years old akira ransomware is still exploiting it https://www.threatdown.com/blog/this-sonicwall-bug-is-2-years-old-akira-ransomware-is-still-exploiting-it

## Record

- Method: https://www.gane.ai/index/it/methodology
- License: CC BY 4.0. Cite as Gane Index, November 2026 Edition, www.gane.ai/index/it.