Application security posture management
Asked as “ASPM platform”, and as “application security posture management tool”, on behalf of a mid-market B2B company. 49 first choices recorded across the direct, paraphrase, budget and scale prompts, fourteen models each. Added to the October 2026 Edition on October 4, 2026; its answers are read by the distilled judge (ai-indexes-judge-qwen3-14b-run3), not the claude-opus-5 judge of the earlier categories: how the two compare.
Standing · first-choice share
37%
Contested · Snyk 14%
37Aikido Security14Snyk10DefectDojo39others
37% of first choices, contested.
By buyer segment
The same question asked on behalf of a different buyer. Each standing is computed within its segment; they sit side by side and are never added together.
The standing
Share is the count of first choices across the direct, paraphrase, budget and scale prompts, over all fourteen models, for a mid-market B2B company. Ordered by share.
ProductFirst-choice shareNegative rateLabelsQuadrantSince September 2026
Show the five products at 0%, ordered by negative rate
The floor is 11 points of share, measured: how far the models move a leader on their own when the same questions are asked twice with nothing changed. A larger change is movement; a smaller one is noise, and both are shown. Movement is read over the twelve models both editions asked; GPT-6 Luna, Muse Glimmer 30B joined this edition and are in the standing but not yet in the comparison. How the floor is measured
Bars are the share of first choices, 0 to 100Every product with at least 10 labels here. Every product name links to its product page.
For buyers
All twenty-one head-to-head pages: the top seven products, each against each
Aikido Security vs JitAikido Security vs ArmorCodeAikido Security vs WizSnyk vs DefectDojoSnyk vs Cycode ASPMSnyk vs JitSnyk vs ArmorCodeSnyk vs WizDefectDojo vs Cycode ASPMDefectDojo vs JitDefectDojo vs ArmorCodeDefectDojo vs WizCycode ASPM vs JitCycode ASPM vs ArmorCodeCycode ASPM vs WizJit vs ArmorCodeJit vs WizArmorCode vs Wiz
Recommended versus criticized
Every product with at least 10 labels here, on both axes. The 30% line names a quadrant, not the verdict above: that one needs more than 40%.
Criticized challengerCriticized default
Negative label rate →
01
02
03
04
05
06
07
08
09
10
11
12Accepted challengerEndorsed leader
0%First-choice share → · lines at 30% share and 25% negative50%
Key
01Aikido Security37%
Aikido Security37%02Snyk14%
Snyk14%03DefectDojo10%
DefectDojo10%04Cycode ASPM8%
Cycode ASPM8%05Jit6%
Jit6%06ArmorCode4%
ArmorCode4%07Wiz2%
Wiz2%08Checkmarx One0%
Checkmarx One0%09Snyk AppRisk0%
Snyk AppRisk0%10Legit Security0%
Legit Security0%11Apiiro0%
Apiiro0%12OX Security0%
OX Security0%What they warned about
Four of fourteen models held their first choice under the paraphrase. Claude Haiku 4.5, GPT-5.4 mini, Perplexity Sonar, Grok 4.1 Fast, Mistral Small, Qwen 3.7 Flash, Kimi K2, GLM 4.7 FlashX, MiniMax M2.5 and Muse Glimmer 30B changed. A high negative share on a product with few labels is a warning. A low share on a product with many labels is salience, not sentiment.
Apiiro32%
8 of 25 labels negative · 5 of 14 models · 2 hard negative
“What to Avoid - **Apiiro:** Strong platform but enterprise-focused pricing (starts ~$250K/year)” Kimi K2, paraphrase prompt
ArmorCode24%
8 of 33 labels negative · 5 of 14 models
“Enterprise-grade ASPM platforms (such as ArmorCode, Cycode, and Apiiro) are incredibly powerful, but their pricing models are built for large enterprises and often start at tens of thousands of dollars” Gemini 3.5 Flash, budget prompt
Cycode ASPM17%
6 of 36 labels negative · 4 of 14 models
“ASPM platforms like Apiiro, ArmorCode, Cycode, OX Security, AccuKnox, and Snyk AppRisk aggregate security findings into a unified posture view; they cannot test a compiled mobile binary” Muse Glimmer 30B, negative prompt
OX Security21%
4 of 19 labels negative · 4 of 14 models
“ASPM platforms like Apiiro, ArmorCode, Cycode, OX Security, AccuKnox, and Snyk AppRisk aggregate security findings into a unified posture view; they cannot test a compiled mobile binary” Muse Glimmer 30B, negative prompt
What they cite
Citations exist only for the models that return a source list: fourteen of the fourteen in this edition, and all six flagship models on the expanded tier.
Sites the answers cite
80 of 84 answers in this category came back with a source list, from 14 of 14 models: citations where the model returns them, or the search results it consulted. 1152 links across 180 sites, every framing counted. Ranked by the number of answers carrying the site or page. None of the 252 answers across every segment cited this index's own page for the category.
vendor site · Checkmarx41 answers · 59 citations · 14 models
vendor site · Cycode36 answers · 48 citations · 13 models
vendor site · Orca36 answers · 42 citations · 11 models
vendor site · Guideflow36 answers · 37 citations · 11 models
35 answers · 45 citations · 13 models
34 answers · 38 citations · 12 models
31 answers · 53 citations · 11 models
vendor site · StackHawk28 answers · 28 citations · 10 models
vendor site · G226 answers · 34 citations · 10 models
vendor site · OX26 answers · 30 citations · 11 models
vendor site · Jit24 answers · 30 citations · 11 models
vendor site · Palo Alto Networks20 answers · 38 citations · 10 models
Pages the answers cite
The ten pages named in the most answers, by full address. A page here is one the models returned with a recommendation, not one the index endorses.
35 answers · 10 models
34 answers · 13 models
34 answers · 11 models
28 answers · 10 models
26 answers · 11 models
24 answers · 9 models
24 answers · 12 models
23 answers · 11 models
23 answers · 11 models
20 answers · 10 models
Search against answers
Each company's standing in the answers beside its site's footprint in Google search, one row a site: the products the models named on it with their shares, and the share they add up to; monthly searches on Google, and DataForSEO's estimate of AI search demand (modeled from search signals, directional, not a count of queries to any assistant), for the most-searched of the company's and its products' names (the name is in each row's hover text); estimated monthly organic visits to the site; and its best position in Google's top ten for “aspm platform”, “aspm platforms”, “best aspm platform”. US estimates from DataForSEO and Google's Ads Transparency Center. A small company's site, or a mid-sized company's site for its flagship, is marked company; a product on a large parent's site (Google, Microsoft) has no site figures. A column with no figures for this category is left out, and an empty cell means none were seen, not none exist. Two measurements side by side: neither is read as the cause of the other.
| Company and products | Share | Own site cited | Name searches, Google | AI search demand, est. | Organic visits | Paid search a month, est. | Google ads, last 30 days | Best Google position |
|---|---|---|---|---|---|---|---|---|
| Aikido aikido.dev Aikido Security 37% | 37% | 342 | 2,400 | 51 | 6,442 company | $936 | 120 | |
| Snyk snyk.io Snyk 14%, Snyk AppRisk 0% | 14% | 143 | 12,100 | 581 | 61,651 | 60 | 6 | |
| DefectDojo defectdojo.com | 10% | 52 | 880 | 9 | 603 | 1 | ||
| Cycode ASPM cycode.com | 8% | 95 | 20 | 0 | 17,954 | 4 | 5 | |
| Jit jit.io | 6% | 67 | 33,100 | 6,450 | 5,093 | |||
| ArmorCode armorcode.com | 4% | 101 | 1,300 | 15 | 11,106 | 9 | ||
| Phoenix Security phoenix.security | 4% | 11 | 1,000 | 383 | 3,044 | 5 | ||
| Conviso Platform | 4% | 10 | 0 | |||||
| Strobes ASPM strobes.co | 4% | 10 | 0 | 1,487 | 0 | |||
| Wiz wiz.io | 2% | 688 | 40,500 | 16,751 | 102,573 | $6,856 | 120 | 4 |
Google's top ten for the three searches hold 23 sites; 7 of them are among the sites the models cited here (checkmarx.com, cycode.com, expertinsights.com, g2.com, gartner.com, orca.security, paloaltonetworks.com). The first result for “aspm platform” is gartner.com.
How they answered
Six framings of the same buying question, each sent to every model in a fresh session with search on. One row per model, so a row shows whether it held its answer under rewording, what it named when cost was the constraint, and what it argued against. Computed from the raw judge labels.ShowHide
How they answered
Six framings of the same buying question, each sent to every model in a fresh session with search on. One row per model, so a row shows whether it held its answer under rewording, what it named when cost was the constraint, and what it argued against. Computed from the raw judge labels.
ShowHideModelDirect“What is the best ASPM platform for a mid-market B2B company?”Paraphrase“Which application security posture management tool would you recommend to a mid-sized B2B company?”Comparative“What are the top ASPM platforms and how do they differ?”Budget-constrained“What is the best ASPM platform for a company with a limited budget?”Scale-constrained“We are a 500 person company evaluating a ASPM platform. What should we look at?”Negative“Which ASPM platforms should I avoid or be cautious about?”
Claude Haiku 4.5Aikido SecurityJit, Phoenix SecurityChangedno first choiceAikido Securityno first choicenothing named
Two alternatives
Cycode ASPM, SnykOne alternative
Aikido SecurityFive alternatives
Apiiro, ArmorCode, Cycode ASPM, OX Security, Snyk AppRiskThree alternatives
DefectDojo, OpenASPM, SnykGPT-5.4 miniCycode ASPMSnykChangedCheckmarx ASPM, Checkmarx OneAikido Securityno first choicenothing named
Three alternatives
ArmorCode, Legit Security, Snyk AppRiskSix alternatives
Aikido Security, AppCheck, CrowdStrike, Orca Security, Strobes, WizSix alternatives
Aikido Security, ArmorCode, CrowdStrike Falcon ASPM, Mend.io, Phoenix Security, WizOne alternative
Checkmarx OneGemini 3.5 FlashAikido SecurityAikido SecurityHeldagainst: ArmorCodeApiiroAikido Security, DefectDojoagainst: Apiiro, ArmorCode, Cycode ASPMno first choiceagainst: Bionic, Cider Security, CrowdStrike, Dazz, Longbow Security, Palo Alto Networks, Veracode Risk Manager, Wiz
Four alternatives
ArmorCode, Cycode ASPM, DefectDojo, Jit.ioFour alternatives
Cycode ASPM, DefectDojo, Jit, Legit SecurityFive alternatives
ArmorCode, Cycode ASPM, Legit Security, OX Security, Snyk AppRiskTwo alternatives
Jit, The Open ASPM ProjectPerplexity SonarWizagainst: Aikido SecurityCycode ASPMChangedno first choiceAikido Security, DefectDojono first choicenothing named
Three alternatives
ArmorCode, Checkmarx One, SnykTwo alternatives
Phoenix Security, WizOne alternative
SnykGrok 4.1 FastAikido Security, Strobes ASPMagainst: Cycode ASPMSnykChangedagainst: Checkmarx One, Veracode Risk ManagerArmorCode, Checkmarx OneConviso Platformagainst: ArmorCode, Cycode ASPMno first choiceagainst: Apiiro, ArmorCode, Checkmarx One, Cycode ASPM, OX Security, Snyk, Strobes
Two alternatives
Jit, StackHawkThree alternatives
Aikido Security, Cycode ASPM, JitThree alternatives
Cycode ASPM, Invicti ASPM, OX SecurityThree alternatives
Aikido Security, DefectDojo, SnykMistral SmallPhoenix SecurityJitChangedApiiroSecurStack, Strobes ASPMno first choiceagainst: DefectDojonothing named
Two alternatives
Aikido Security, Snyk AppRiskTwo alternatives
Apiiro, SnykFive alternatives
ArmorCode, Checkmarx One, Cycode ASPM, Snyk, WizDeepSeek V4 FlashAikido Securityagainst: Apiiro, ArmorCode, WizAikido SecurityHeldagainst: Apiiro, SnykApiiro, ArmorCodeDefectDojono first choiceagainst: DefectDojoagainst: Aikido Security, ArmorCode, Bionic, Dazz, Jit, OX Security, Tromzo
Five alternatives
Cycode ASPM, Jit.io, Legit Security, Snyk, Snyk AppRiskFour alternatives
Cycode ASPM, Legit Security, OX Security, SnykTwo alternatives
Jit.io, SnykLlama 4 MaverickAikido SecurityAikido SecurityHeldno first choiceLegit Security ASPMno first choicenothing named
Two alternatives
ArmorCode, Snyk AppRiskTwo alternatives
Cycode ASPM, Phoenix SecurityQwen 3.7 FlashAikido SecuritySnykChangedArmorCode, WizDefectDojono first choicenothing named
Three alternatives
ArmorCode, Jit, Snyk AppRiskThree alternatives
Sonatype, Veracode Risk Manager, WizThree alternatives
Checkmarx One, Mend.io, SnykThree alternatives
Aikido Security, Nucleus, OX SecurityKimi K2Aikido Security, SnykAikido Security, Cycode ASPMChangedagainst: ApiiroApiiroAikido Securityagainst: Apiiro, Checkmarx One, OpenText Fortifyno first choiceagainst: AccuKnox, Apiiro, ArmorCode, Cycode ASPM, OX Security, Snyk AppRisk, Xygeni
Four alternatives
Apiiro, Cycode ASPM, Jit, SemgrepOne alternative
WizFive alternatives
ArmorCode, Checkmarx One, CrowdStrike, Cycode ASPM, Snyk AppRiskThree alternatives
Cycode ASPM, DefectDojo, GitHub Advanced SecurityGLM 4.7 FlashXCycode ASPM, SnykSnykChangedno first choiceDefectDojono first choicenothing named
Three alternatives
Invicti ASPM, Strobes, XygeniTwo alternatives
Jit, StackHawkSix alternatives
Apiiro, ArmorCode, Conviso Platform, Cycode ASPM, OX Security, Snyk AppRiskThree alternatives
Aikido Security, Conviso Platform, Strobes ASPMMiniMax M2.5no first choiceStackHawkChangedCheckmarx OneAikido Security, Snykno first choicenothing named
Four alternatives
Checkmarx One, Jit.io, Snyk, Veracode Risk ManagerSeven alternatives
Apiiro, ArmorCode, CrowdStrike Falcon ASPM, Cycode ASPM, OX Security, Snyk, WizThree alternatives
Checkmarx ASPM, Invicti ASPM, Veracode Risk ManagerGPT-6 LunaArmorCodeArmorCodeHeldArmorCode, Veracode Risk ManagerAikido Securityno first choicenothing named
Three alternatives
CrowdStrike Falcon ASPM, Snyk AppRisk, Wiz ASPMTwo alternatives
CrowdStrike Falcon ASPM, GitLab’s security toolingSix alternatives
Apiiro, Checkmarx One, CrowdStrike Falcon ASPM, Cycode ASPM, Snyk AppRisk, Wiz ASPMThree alternatives
DefectDojo Open Source, Semgrep, SnykMuse Glimmer 30Bno first choiceJitChangedJitConviso Platformno first choiceagainst: AccuKnox, Aikido Security, Apiiro, ArmorCode, CTM360, CrowdStrike Falcon Cloud Security, Cycode ASPM, Dazz, Kondukto, OX Security, Snyk AppRisk
Three alternatives
Apiiro, Phoenix Security, SnykFive alternatives
ArmorCode, Palo Alto Networks Cortex Cloud, Prisma Cloud, Snyk, WizFive alternatives
Aikido Security, SOOS, Snyk, SonarQube, Strobes ASPMBold is the first choiceAlternatives are counted; the count opens them.What the answer argued against
The record
One row per call: the version string exactly as returned, whether the model searched, sources cited, and latency. Full answer text is in the free responses file. Download the record
Eighty-four rows: every prompt, every model, every answer.
| Prompt | Model | Version string | Time (UTC) | Searched | Sources | Latency |
|---|---|---|---|---|---|---|
| Direct recommendation | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-10-04 23:04 | yes | 18 | 9 s |
| Direct recommendation | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-10-05 00:02 | yes | 5 | 10 s |
| Direct recommendation | Gemini 3.5 Flash | gemini-3.5-flash | 2026-10-05 01:23 | yes | 20 | 31 s |
| Direct recommendation | Perplexity Sonar | sonar | 2026-10-05 01:19 | yes | 19 | 4 s |
| Direct recommendation | Grok 4.1 Fast | spacexai/grok-4.1-fast-non-reasoning via vertex | 2026-10-05 00:29 | yes | 20 | 12 s |
| Direct recommendation | Mistral Small | mistral/mistral-small via mistral | 2026-10-04 22:13 | yes | 5 | 4 s |
| Direct recommendation | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-10-05 00:36 | yes | 21 | 36 s |
| Direct recommendation | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-10-05 01:18 | yes | 5 | 2 s |
| Direct recommendation | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-10-05 00:01 | yes | 13 | 44 s |
| Direct recommendation | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-10-05 00:04 | yes | 20 | 26 s |
| Direct recommendation | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-10-05 01:29 | yes | 22 | 199 s |
| Direct recommendation | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-10-05 01:48 | yes | 5 | 19 s |
| Direct recommendation | GPT-6 Luna | gpt-6-luna | 2026-10-05 00:55 | yes | 3 | 22 s |
| Direct recommendation | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-10-05 00:24 | yes | 19 | 16 s |
| Paraphrase | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-10-04 23:37 | yes | 9 | 7 s |
| Paraphrase | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-10-05 01:20 | yes | 4 | 6 s |
| Paraphrase | Gemini 3.5 Flash | gemini-3.5-flash | 2026-10-05 00:48 | yes | 18 | 27 s |
| Paraphrase | Perplexity Sonar | sonar | 2026-10-05 01:22 | yes | 20 | 4 s |
| Paraphrase | Grok 4.1 Fast | spacexai/grok-4.1-fast-non-reasoning via vertex | 2026-10-05 01:27 | yes | 23 | 8 s |
| Paraphrase | Mistral Small | mistral/mistral-small via mistral | 2026-10-05 01:23 | yes | 22 | 11 s |
| Paraphrase | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-10-04 22:28 | yes | 23 | 23 s |
| Paraphrase | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-10-05 01:24 | yes | 7 | 3 s |
| Paraphrase | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-10-04 23:55 | no | 0 | 27 s |
| Paraphrase | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-10-05 00:05 | yes | 15 | 19 s |
| Paraphrase | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-10-05 01:25 | yes | 22 | 57 s |
| Paraphrase | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-10-04 22:42 | yes | 5 | 25 s |
| Paraphrase | GPT-6 Luna | gpt-6-luna | 2026-10-05 00:13 | yes | 3 | 17 s |
| Paraphrase | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-10-05 01:43 | yes | 15 | 17 s |
| Comparative | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-10-04 22:15 | yes | 9 | 8 s |
| Comparative | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-10-05 00:52 | yes | 5 | 6 s |
| Comparative | Gemini 3.5 Flash | gemini-3.5-flash | 2026-10-05 00:41 | yes | 30 | 29 s |
| Comparative | Perplexity Sonar | sonar | 2026-10-05 00:21 | yes | 27 | 8 s |
| Comparative | Grok 4.1 Fast | spacexai/grok-4.1-fast-non-reasoning via vertex | 2026-10-05 00:21 | yes | 18 | 11 s |
| Comparative | Mistral Small | mistral/mistral-small via mistral | 2026-10-05 01:29 | yes | 9 | 9 s |
| Comparative | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-10-05 01:50 | yes | 24 | 54 s |
| Comparative | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-10-04 23:45 | yes | 5 | 3 s |
| Comparative | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-10-04 23:57 | yes | 21 | 64 s |
| Comparative | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-10-05 00:48 | yes | 23 | 30 s |
| Comparative | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-10-05 01:40 | yes | 21 | 37 s |
| Comparative | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-10-05 01:40 | yes | 21 | 41 s |
| Comparative | GPT-6 Luna | gpt-6-luna | 2026-10-05 01:05 | yes | 8 | 29 s |
| Comparative | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-10-05 00:22 | yes | 24 | 38 s |
| Budget constrained | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-10-05 01:52 | yes | 15 | 7 s |
| Budget constrained | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-10-04 22:11 | yes | 3 | 5 s |
| Budget constrained | Gemini 3.5 Flash | gemini-3.5-flash | 2026-10-05 00:57 | yes | 12 | 24 s |
| Budget constrained | Perplexity Sonar | sonar | 2026-10-04 23:20 | yes | 24 | 3 s |
| Budget constrained | Grok 4.1 Fast | spacexai/grok-4.1-fast-non-reasoning via vertex | 2026-10-05 00:53 | yes | 20 | 102 s |
| Budget constrained | Mistral Small | mistral/mistral-small via mistral | 2026-10-05 01:10 | yes | 5 | 3 s |
| Budget constrained | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-10-05 01:01 | yes | 25 | 49 s |
| Budget constrained | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-10-04 23:33 | yes | 5 | 2 s |
| Budget constrained | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-10-05 01:31 | yes | 11 | 28 s |
| Budget constrained | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-10-04 22:14 | yes | 20 | 24 s |
| Budget constrained | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-10-05 00:29 | yes | 23 | 130 s |
| Budget constrained | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-10-05 01:16 | yes | 9 | 24 s |
| Budget constrained | GPT-6 Luna | gpt-6-luna | 2026-10-05 00:56 | yes | 4 | 21 s |
| Budget constrained | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-10-05 01:49 | yes | 14 | 18 s |
| Scale constrained | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-10-05 00:24 | yes | 18 | 16 s |
| Scale constrained | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-10-05 01:33 | yes | 1 | 14 s |
| Scale constrained | Gemini 3.5 Flash | gemini-3.5-flash | 2026-10-04 22:46 | yes | 10 | 26 s |
| Scale constrained | Perplexity Sonar | sonar | 2026-10-05 00:21 | yes | 14 | 6 s |
| Scale constrained | Grok 4.1 Fast | spacexai/grok-4.1-fast-non-reasoning via vertex | 2026-10-04 22:49 | yes | 14 | 10 s |
| Scale constrained | Mistral Small | mistral/mistral-small via mistral | 2026-10-05 00:43 | no | 0 | 8 s |
| Scale constrained | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-10-04 23:57 | yes | 19 | 41 s |
| Scale constrained | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-10-04 23:36 | yes | 5 | 2 s |
| Scale constrained | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-10-05 01:37 | no | 0 | 33 s |
| Scale constrained | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-10-04 23:56 | yes | 24 | 31 s |
| Scale constrained | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-10-05 00:40 | yes | 15 | 32 s |
| Scale constrained | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-10-04 23:40 | yes | 5 | 13 s |
| Scale constrained | GPT-6 Luna | gpt-6-luna | 2026-10-05 01:18 | yes | 2 | 18 s |
| Scale constrained | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-10-05 00:03 | yes | 14 | 22 s |
| Negative framing | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-10-05 00:41 | yes | 10 | 6 s |
| Negative framing | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-10-05 00:35 | yes | 3 | 6 s |
| Negative framing | Gemini 3.5 Flash | gemini-3.5-flash | 2026-10-05 00:45 | yes | 23 | 34 s |
| Negative framing | Perplexity Sonar | sonar | 2026-10-05 01:24 | yes | 17 | 5 s |
| Negative framing | Grok 4.1 Fast | spacexai/grok-4.1-fast-non-reasoning via vertex | 2026-10-05 01:29 | yes | 22 | 8 s |
| Negative framing | Mistral Small | mistral/mistral-small via mistral | 2026-10-04 23:20 | yes | 5 | 4 s |
| Negative framing | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-10-05 00:38 | yes | 22 | 56 s |
| Negative framing | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-10-04 23:15 | yes | 5 | 2 s |
| Negative framing | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-10-05 01:45 | yes | 15 | 31 s |
| Negative framing | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-10-05 01:40 | yes | 21 | 40 s |
| Negative framing | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-10-04 22:45 | yes | 25 | 28 s |
| Negative framing | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-10-05 00:46 | no | 0 | 7 s |
| Negative framing | GPT-6 Luna | gpt-6-luna | 2026-10-05 01:04 | yes | 3 | 24 s |
| Negative framing | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-10-05 01:54 | yes | 24 | 30 s |
Normalization in this category
Every judgment call made between the raw labels and the numbers above, listed so it is visible and reversible.
ShowHide
Category-scoped readings
Aikido read as Aikido Security
Checkmarx read as Checkmarx One
Checkmarx (Checkmarx One) read as Checkmarx One
Cycode read as Cycode ASPM
Invicti read as Invicti ASPM
Invicti (ASPM) read as Invicti ASPM
Orca read as Orca Security
Veracode read as Veracode Risk Manager
Veracode (Hyland) read as Veracode Risk Manager
Unresolved, counted raw
Datadog Application Security
DefectDojo Open Source
GitLab’s security tooling
Longbow Security
OpenASPM
Phoenix Security ASPM
SecurStack
ShiftLeft (now part of GitLab)
The Open ASPM Project
Discontinued, still offered
No shut-down product was recommended here.
Follow Application security posture management
An email the morning each edition publishes: where this category moved, where it held, and by how much against the noise floor. One address, confirmed by a click; a stop link in every email.
Already following? Everything you follow, with a stop for each.