Zero of fourteen models named Trivy first on the direct prompt; two named Orca Security. Trivy was named by twelve of the fourteen models and Orca Security by ten and Trivy carries 44 labels and Orca Security 18, so the shares are not directly comparable.
Named in eight categories this edition.
Named in eleven categories this edition.
Share is the count of first choices across the direct, paraphrase, budget and scale prompts over all fourteen models, for a mid-market B2B company; rank is within the category; every quote names the model and the prompt it came from. Both figures come from the container and kubernetes security page.
| Model | Direct | Paraphrase | Comparative | Budget-constrained | Scale-constrained | Negative |
|---|---|---|---|---|---|---|
| Claude Haiku 4.5 | ||||||
| GPT-5.4 mini | ||||||
| Gemini 3.5 Flash | ||||||
| Perplexity Sonar | ||||||
| Grok 4.1 Fast | ||||||
| Mistral Small | ||||||
| DeepSeek V4 Flash | ||||||
| Llama 4 Maverick | ||||||
| Qwen 3.7 Flash | ||||||
| Kimi K2 | ||||||
| GLM 4.7 FlashX | ||||||
| MiniMax M2.5 | ||||||
| GPT-6 Luna | ||||||
| Muse Glimmer 30B |
Bold names in an answer are the products the judge labeled a first choice; a model naming several gives each of them that label. The full answer text for every row is in the record.
Every negative label with a quote, up to three, then the highest-weighted positives, up to three. Five of five in this category shown.
“In March 2026 Aqua Security’s Trivy open source vulnerability scanner was compromised in a multi-stage supply chain attack.” Muse Glimmer 30B · negative prompt · soft negative
“One caution: Trivy remains a capable scanner, but its project disclosed supply-chain compromises” GPT-6 Luna · budget prompt · soft negative
“Start with the open-source stack: Trivy for image scanning, Harbor for the registry, Kubescape for posture, Falco for runtime, and Cosign for signing.” GLM 4.7 FlashX · budget prompt · first choice
“If you have no budget for software licenses but have engineering time, this is the gold standard... best open-source scanner available right now.” Qwen 3.7 Flash · budget prompt · first choice
“Highly recommended for its open-source, free-to-use vulnerability scanner... making it a strong choice for budget-conscious teams.” Mistral Small · budget prompt · first choice
Every negative label with a quote, up to three, then the highest-weighted positives, up to three. One of one in this category shown.
“I'd recommend starting with Wiz or Orca for their agentless approach and strong risk prioritization” MiniMax M2.5 · direct prompt · first choice
Comparisons are drawn for the top eight products in each category, each against each. The output is the models' output; nothing here is a recommendation by the index.