# Segment: Mid-market

# IT AI Recommendation Index, run edition-2026-09

402 prompts, 12 models, 28,065 raw judge labels, 28,189 scored labels after normalization. Published weights: first choice +3, alternative +2, mention +1, soft negative -2, hard negative -3.

Scored under vendor alias table version v2026-09.2. Raw judge labels are the permanent record; the numbers below are derived from them and are regenerated for every run whenever the alias table changes, so the whole series is always scored under one table version. Resolution of raw names: 24,880 by alias or canonical name, 2145 by category-scoped alias, 259 from combined answers split into their products, 0 excluded by rule, 896 unresolved and counted under the raw name.

## Paraphrase stability

Share of categories where a model's first choice set on the direct prompt equals its set on the paraphrase.

| Model | Same | Different | Stability |
|---|---|---|---|
| Claude Haiku 4.5 | 12 | 52 | 19% |
| GPT-5.4 mini | 32 | 35 | 48% |
| Gemini 3.5 Flash | 26 | 41 | 39% |
| Perplexity Sonar | 26 | 41 | 39% |
| Grok 4.1 Fast | 36 | 31 | 54% |
| Mistral Small | 12 | 55 | 18% |
| DeepSeek V4 Flash | 20 | 47 | 30% |
| Llama 4 Maverick | 9 | 53 | 15% |
| Qwen 3.7 Flash | 22 | 45 | 33% |
| Kimi K2 | 27 | 40 | 40% |
| GLM 4.7 FlashX | 22 | 45 | 33% |
| MiniMax M2.5 | 10 | 57 | 15% |

A looser measure, whether a direct first choice survives as a first choice or alternative on the paraphrase, is in the appendix.

## Standing by category

First choice share across the direct, paraphrase, budget and scale prompts and all 12 models. The top product's share is published alongside the label: contested means the top share is at or below 40%, and a category just above the line is not meaningfully different from one just below it. Consensus means every model's direct-prompt first choice is the same single product.

| Category | Top product | Top share | First choices | Status |
|---|---|---|---|---|
| ai-coding-assistants | GitHub Copilot | 67% | 48 | clear leader |
| api-gateways | Kong Gateway | 61% | 51 | clear leader |
| api-management | Kong Gateway | 37% | 46 | contested |
| application-performance-monitoring | New Relic | 54% | 46 | clear leader |
| attack-surface-management | Intruder | 59% | 44 | clear leader |
| backup-and-disaster-recovery | Veeam | 18% | 40 | contested |
| business-password-managers | Bitwarden | 49% | 45 | clear leader |
| ci-cd-platforms | GitHub Actions | 65% | 49 | clear leader |
| cloud-cost-management | Vantage | 54% | 52 | clear leader |
| cloud-hosting | Amazon Web Services | 29% | 45 | contested |
| cloud-native-application-protection | Wiz | 46% | 50 | clear leader |
| cloud-security-posture-management | Wiz | 43% | 51 | clear leader |
| compliance-automation | Drata | 37% | 52 | contested |
| container-and-kubernetes-security | Aqua Security | 18% | 49 | contested |
| content-delivery-networks | Cloudflare | 80% | 46 | clear leader |
| customer-identity-and-access-management | WorkOS | 22% | 54 | contested |
| data-loss-prevention | Microsoft Purview DLP | 39% | 49 | contested |
| data-warehouses | Snowflake | 47% | 45 | clear leader |
| ddos-protection | Cloudflare | 93% | 43 | clear leader |
| email-security | Microsoft Defender for Office 365 | 31% | 58 | contested |
| endpoint-detection-and-response | Microsoft Defender for Endpoint | 20% | 51 | contested |
| endpoint-protection | Microsoft Defender for Cloud | 22% | 50 | contested |
| error-and-crash-monitoring | Sentry | 82% | 44 | clear leader |
| etl-and-elt | Fivetran | 32% | 47 | contested |
| extended-detection-and-response | Microsoft Defender XDR | 63% | 41 | clear leader |
| feature-flags | LaunchDarkly | 30% | 47 | contested |
| grc-platforms | Vanta | 14% | 57 | contested |
| identity-governance | Lumos | 20% | 59 | contested |
| incident-management-and-on-call | incident.io | 25% | 51 | contested |
| infrastructure-as-code | Terraform | 46% | 56 | clear leader |
| infrastructure-monitoring | Site24x7 | 24% | 45 | contested |
| it-asset-management | Snipe-IT | 24% | 45 | contested |
| it-service-management | Freshservice | 58% | 48 | clear leader |
| llm-gateways-and-observability | LiteLLM | 38% | 45 | contested |
| log-management | Datadog Log Management | 20% | 50 | contested |
| managed-detection-and-response | Arctic Wolf Managed Detection and Response | 39% | 46 | contested |
| managed-kubernetes-platforms | Google Kubernetes Engine | 39% | 51 | contested |
| managed-relational-databases | Amazon RDS | 32% | 53 | contested |
| ml-platforms | Azure Machine Learning | 17% | 48 | contested |
| multi-factor-authentication | Cisco Duo | 42% | 53 | clear leader |
| next-generation-firewalls | Fortinet FortiGate | 61% | 46 | clear leader |
| nosql-databases | MongoDB | 59% | 54 | clear leader |
| object-storage | Backblaze B2 | 46% | 39 | clear leader |
| observability-platforms | Grafana | 29% | 52 | contested |
| patch-management | Action1 | 27% | 52 | contested |
| penetration-testing-as-a-service | Cobalt | 44% | 45 | clear leader |
| privileged-access-management | ManageEngine PAM360 | 21% | 47 | contested |
| remote-monitoring-and-management | NinjaOne | 50% | 46 | clear leader |
| sase-platforms | Cato SASE Cloud | 28% | 43 | contested |
| sd-wan | Fortinet Secure SD-WAN | 41% | 44 | clear leader |
| secrets-management | Doppler | 33% | 57 | contested |
| security-awareness-training | KnowBe4 | 42% | 45 | clear leader |
| siem-platforms | Microsoft Sentinel | 41% | 49 | clear leader |
| soar-platforms | Tines | 47% | 47 | clear leader |
| software-composition-analysis | Trivy | 40% | 43 | contested |
| source-control-hosting | GitHub | 74% | 47 | clear leader |
| static-application-security-testing | Semgrep | 47% | 45 | clear leader |
| streaming-platforms | Confluent Cloud | 32% | 53 | contested |
| third-party-risk-management | UpGuard | 53% | 49 | clear leader |
| threat-intelligence-platforms | NordStellar | 13% | 47 | contested |
| unified-endpoint-management | Microsoft Intune | 43% | 46 | clear leader |
| vector-databases | Qdrant | 37% | 51 | contested |
| vulnerability-management-platforms | Rapid7 InsightVM | 45% | 44 | clear leader |
| web-application-firewalls | Cloudflare | 55% | 44 | clear leader |
| workflow-orchestration | Prefect | 24% | 49 | contested |
| workforce-identity-and-sso | Microsoft Entra ID | 36% | 47 | contested |
| zero-trust-network-access | Cloudflare One | 35% | 40 | contested |

**ai-coding-assistants**: GitHub Copilot 67%, Windsurf 10%, Cline 4%, Cursor 4%, Aider 2%

**api-gateways**: Kong Gateway 61%, Zuplo 16%, Tyk 10%, Amazon API Gateway 6%, Apache APISIX 4%

**api-management**: Kong Gateway 37%, Tyk 13%, Gravitee 11%, Zuplo 11%, Azure API Management 7%

**application-performance-monitoring**: New Relic 54%, SigNoz 13%, Datadog 11%, Grafana Cloud 4%, Honeycomb 2%

**attack-surface-management**: Intruder 59%, Attaxion 11%, Detectify 7%, Censys ASM 5%, Cisco Vulnerability Management 2%

**backup-and-disaster-recovery**: Veeam 18%, Veeam Data Platform 15%, Acronis Cyber Protect 12%, IDrive Business 12%, Datto SIRIS 10%

**business-password-managers**: Bitwarden 49%, 1Password 42%, NordPass 4%, RoboForm 2%, Zoho Vault 2%

**ci-cd-platforms**: GitHub Actions 65%, GitLab CI/CD 27%, CircleCI 4%, GitHub 2%, Jenkins 2%

**cloud-cost-management**: Vantage 54%, CloudZero 10%, Economize 6%, AWS Cost Explorer 4%, Finout 4%

**cloud-hosting**: Amazon Web Services 29%, Microsoft Azure 24%, DigitalOcean 13%, Hetzner 9%, Hostinger 7%

**cloud-native-application-protection**: Wiz 46%, Microsoft Defender for Cloud 30%, Orca Security 16%, Aikido Security 4%, Orca 2%

**cloud-security-posture-management**: Wiz 43%, Prowler 16%, Microsoft Defender for Cloud 14%, Orca Security 12%, Aikido Security 6%

**compliance-automation**: Drata 37%, Vanta 23%, Sprinto 8%, CATAAM 6%, LowerPlane 6%

**container-and-kubernetes-security**: Aqua Security 18%, Sysdig Secure 16%, Trivy 16%, Sysdig 12%, Falco 10%

**content-delivery-networks**: Cloudflare 80%, Bunny.net 15%, Fastly 2%, jsDelivr 2%

**customer-identity-and-access-management**: Auth0 22%, WorkOS 22%, Frontegg 17%, Clerk 7%, Supabase Auth 6%

**data-loss-prevention**: Microsoft Purview DLP 39%, CurrentWare 18%, Safetica 16%, Nightfall AI 8%, Cyberhaven 4%

**data-warehouses**: Snowflake 47%, Google BigQuery 44%, ClickHouse Cloud 2%, Domo 2%, Firebolt 2%

**ddos-protection**: Cloudflare 93%, LevelBlue 5%, EdgeOne 2%

**email-security**: Microsoft Defender for Office 365 31%, Abnormal AI 12%, Check Point Harmony Email & Collaboration 10%, Proofpoint Email Protection 10%, IRONSCALES 9%

**endpoint-detection-and-response**: Bitdefender GravityZone 20%, Microsoft Defender for Endpoint 20%, Huntress Managed EDR 14%, Microsoft Defender for Cloud 14%, CrowdStrike Falcon 12%

**endpoint-protection**: Microsoft Defender for Cloud 22%, Bitdefender GravityZone 20%, Microsoft Defender for Endpoint 18%, CrowdStrike 4%, CrowdStrike Falcon 4%

**error-and-crash-monitoring**: Sentry 82%, Rollbar 14%, GlitchTip 2%, Scout Monitoring 2%

**etl-and-elt**: Airbyte 32%, Fivetran 32%, Integrate.io 15%, Hevo Data 6%, Stitch 4%

**extended-detection-and-response**: Microsoft Defender XDR 63%, Coro 7%, Bitdefender 5%, Cynet 5%, SentinelOne Singularity 5%

**feature-flags**: LaunchDarkly 30%, ConfigCat 17%, Flagsmith 17%, Unleash 13%, Statsig 9%

**grc-platforms**: Vanta 14%, Hyperproof 12%, LogicGate 11%, LogicGate Risk Cloud 11%, SimpleRisk 11%

**identity-governance**: Lumos 20%, Microsoft Entra ID Governance 12%, ConductorOne 8%, Iden 8%, Zluri 7%

**incident-management-and-on-call**: incident.io 25%, PagerDuty 22%, Squadcast 10%, Hyperping 8%, Opsgenie 8%

**infrastructure-as-code**: Terraform 46%, OpenTofu 39%, Pulumi 7%, Terraform/OpenTofu 5%, AWS CDK 2%

**infrastructure-monitoring**: Site24x7 24%, New Relic 22%, Zabbix 18%, Datadog 13%, Netdata 7%

**it-asset-management**: Snipe-IT 24%, ManageEngine AssetExplorer 20%, Freshservice 18%, Lansweeper 16%, InvGate Asset Management 7%

**it-service-management**: Freshservice 58%, Jira Service Management 21%, ManageEngine ServiceDesk Plus 10%, Spiceworks Cloud Help Desk 6%, GLPI 2%

**llm-gateways-and-observability**: LiteLLM 38%, Portkey 27%, Helicone 9%, Langfuse 9%, Braintrust 2%

**log-management**: Datadog Log Management 20%, Grafana Loki 16%, Graylog 10%, New Relic Logs 10%, Better Stack 8%

**managed-detection-and-response**: Arctic Wolf Managed Detection and Response 39%, Huntress Managed EDR 26%, Sophos MDR 11%, eSentire 11%, Expel 4%

**managed-kubernetes-platforms**: Google Kubernetes Engine 39%, DigitalOcean Kubernetes 22%, Civo 10%, Linode Kubernetes Engine 10%, Azure Kubernetes Service 8%

**managed-relational-databases**: Amazon RDS 32%, Amazon Aurora 11%, Google Cloud SQL 11%, DigitalOcean Managed Databases 8%, Neon 6%

**ml-platforms**: Azure Machine Learning 17%, Databricks 12%, Amazon SageMaker 10%, Google Vertex AI 8%, Databricks Mosaic AI 6%

**multi-factor-authentication**: Cisco Duo 42%, Microsoft Entra ID 30%, Okta 9%, Microsoft Authenticator 6%, Google Authenticator 4%

**next-generation-firewalls**: Fortinet FortiGate 61%, Fortinet 9%, SonicWall TZ Series 4%, WatchGuard Firebox T45 4%, Check Point 2%

**nosql-databases**: MongoDB 59%, Amazon DynamoDB 11%, Couchbase 7%, Redis 6%, Azure Cosmos DB 4%

**object-storage**: Backblaze B2 46%, Cloudflare R2 21%, Amazon S3 15%, Azure Blob Storage 8%, Wasabi 5%

**observability-platforms**: Grafana 29%, New Relic 27%, Datadog 23%, SigNoz 8%, Honeycomb 4%

**patch-management**: Action1 27%, Automox 19%, ManageEngine Patch Manager Plus 17%, NinjaOne 13%, Syxsense 6%

**penetration-testing-as-a-service**: Cobalt 44%, Astra Security 13%, BreachLock 9%, Bug Circuit 7%, Affordable Pentesting 2%

**privileged-access-management**: ManageEngine PAM360 21%, Delinea 19%, Securden Unified PAM 15%, Delinea Secret Server 11%, KeeperPAM 11%

**remote-monitoring-and-management**: NinjaOne 50%, Syncro 13%, Action1 11%, Atera 7%, ConnectWise RMM 4%

**sase-platforms**: Cato SASE Cloud 28%, Cato Networks 26%, Cloudflare One 23%, Cisco Umbrella 7%, Check Point Harmony SASE 5%

**sd-wan**: Fortinet Secure SD-WAN 41%, Cisco Meraki SD-WAN 30%, Cisco Catalyst SD-WAN 9%, Aryaka 5%, Cisco 2%

**secrets-management**: Doppler 33%, HashiCorp Vault 30%, Infisical 18%, Bitwarden Secrets Manager 5%, 1Password 4%

**security-awareness-training**: KnowBe4 42%, Wizer 20%, Hoxhunt 13%, Huntress Managed Security Awareness Training 9%, Hook Security 4%

**siem-platforms**: Microsoft Sentinel 41%, Rapid7 InsightIDR 22%, Wazuh 18%, Elastic Security 6%, Blumira 4%

**soar-platforms**: Tines 47%, Rapid7 InsightConnect 15%, Shuffle 11%, Swimlane Turbine 4%, Torq 4%

**software-composition-analysis**: Trivy 40%, Snyk Open Source 16%, Mend.io 14%, OWASP Dependency-Check 14%, Aikido Security 5%

**source-control-hosting**: GitHub 74%, GitLab 19%, Bitbucket 4%, Gitea 2%

**static-application-security-testing**: Semgrep 47%, SonarQube 22%, Snyk Code 13%, Snyk 7%, Aikido Security 4%

**streaming-platforms**: Confluent Cloud 32%, Apache Kafka 17%, Redpanda 17%, Amazon MSK 6%, Goldcast 6%

**third-party-risk-management**: UpGuard 53%, Panorays 10%, Sprinto 6%, Vanta 6%, ThirdProof 4%

**threat-intelligence-platforms**: NordStellar 13%, MISP 11%, Rapid7 Threat Command 11%, Recorded Future 9%, Cyble Vision 6%

**unified-endpoint-management**: Microsoft Intune 43%, ManageEngine Endpoint Central 24%, JumpCloud 9%, Miradore 7%, NinjaOne 4%

**vector-databases**: Qdrant 37%, pgvector 35%, Pinecone 14%, Weaviate 6%, Chroma 4%

**vulnerability-management-platforms**: Rapid7 InsightVM 45%, Intruder 16%, ManageEngine Vulnerability Manager Plus 9%, OpenVAS 9%, Tenable Vulnerability Management 7%

**web-application-firewalls**: Cloudflare 55%, Cloudflare WAF 34%, AWS WAF 5%, Cloudflare WAF + Cloudflare Bot Management 2%, Fastly 2%

**workflow-orchestration**: Prefect 24%, Dagster 18%, Apache Airflow 16%, Make 10%, n8n 8%

**workforce-identity-and-sso**: Microsoft Entra ID 36%, Okta 17%, Okta Workforce Identity 15%, OneLogin 15%, JumpCloud 11%

**zero-trust-network-access**: Cloudflare One 35%, Twingate 28%, Cato Networks 12%, OpenVPN CloudConnexa 10%, Cloudflare Access / Cloudflare One 5%

## Anti-recommendations

Products most often labeled soft or hard negative, with the number of models that did so at least once in the category, and the share of that product's labels in the category that were negative. A high negative share on a product with few labels is a warning; a low share on a product with many labels is salience, not sentiment.

- **ai-coding-assistants**: Cursor (8 models, 3 hard; 10 of 52 labels negative), GitHub Copilot (7 models, 3 hard; 9 of 70 labels negative), Windsurf (5 models, 3 hard; 5 of 26 labels negative), Amazon Q Developer (5 models; 6 of 35 labels negative)
- **api-gateways**: Apigee (9 models, 5 hard; 20 of 48 labels negative), Amazon API Gateway (7 models, 1 hard; 9 of 58 labels negative), Kong Gateway (6 models, 1 hard; 9 of 71 labels negative), Azure API Management (5 models, 1 hard; 6 of 33 labels negative)
- **api-management**: Apigee (10 models, 4 hard; 19 of 44 labels negative), MuleSoft Anypoint Platform (9 models, 3 hard; 13 of 34 labels negative), Amazon API Gateway (8 models, 2 hard; 14 of 45 labels negative), IBM API Connect (6 models, 3 hard; 6 of 17 labels negative)
- **application-performance-monitoring**: Datadog (11 models, 2 hard; 23 of 62 labels negative), Dynatrace (10 models, 2 hard; 19 of 45 labels negative), New Relic (8 models, 1 hard; 10 of 67 labels negative), AppDynamics (7 models, 2 hard; 7 of 26 labels negative)
- **attack-surface-management**: Censys ASM (9 models, 1 hard; 14 of 26 labels negative), Cortex Xpanse (8 models, 5 hard; 18 of 32 labels negative), CyCognito (6 models, 4 hard; 12 of 31 labels negative), Microsoft Defender External Attack Surface Management (5 models, 4 hard; 7 of 30 labels negative)
- **backup-and-disaster-recovery**: IDrive Business (3 models, 1 hard; 3 of 14 labels negative), Dropbox (2 models, 2 hard; 2 of 2 labels negative), Google Drive (2 models, 2 hard; 2 of 3 labels negative), Spanning (2 models, 2 hard; 2 of 3 labels negative)
- **business-password-managers**: LastPass (12 models, 17 hard; 23 of 27 labels negative), Dashlane (8 models, 2 hard; 11 of 42 labels negative), 1Password (7 models; 9 of 62 labels negative), Bitwarden (7 models; 7 of 65 labels negative)
- **ci-cd-platforms**: Jenkins (12 models, 9 hard; 36 of 57 labels negative), CircleCI (8 models, 1 hard; 9 of 58 labels negative), JetBrains TeamCity (8 models, 1 hard; 8 of 17 labels negative), Atlassian Bamboo (5 models, 4 hard; 5 of 6 labels negative)
- **cloud-cost-management**: VMware Tanzu CloudHealth (10 models, 7 hard; 17 of 33 labels negative), IBM Apptio Cloudability (6 models, 3 hard; 13 of 32 labels negative), Spot by NetApp (5 models, 2 hard; 5 of 11 labels negative), AWS Cost Explorer (5 models, 1 hard; 8 of 24 labels negative)
- **cloud-hosting**: Bluehost (7 models, 7 hard; 7 of 7 labels negative), HostGator (7 models, 7 hard; 7 of 8 labels negative), Newfold Digital (7 models, 7 hard; 7 of 7 labels negative), OVHcloud (7 models, 3 hard; 7 of 15 labels negative)
- **cloud-native-application-protection**: Wiz (9 models, 1 hard; 10 of 55 labels negative), Prisma Cloud (8 models; 12 of 38 labels negative), FortiCNAPP (5 models, 2 hard; 6 of 14 labels negative), Aqua Security (4 models, 1 hard; 5 of 19 labels negative)
- **cloud-security-posture-management**: Prisma Cloud (10 models, 5 hard; 23 of 49 labels negative), Wiz (8 models, 2 hard; 9 of 59 labels negative), Microsoft Defender for Cloud (6 models; 8 of 53 labels negative), Lacework FortiCNAPP (3 models, 3 hard; 5 of 14 labels negative)
- **compliance-automation**: Drata (9 models, 2 hard; 15 of 59 labels negative), Vanta (9 models, 2 hard; 15 of 59 labels negative), Secureframe (7 models; 9 of 53 labels negative), OneTrust (4 models, 1 hard; 4 of 10 labels negative)
- **container-and-kubernetes-security**: Prisma Cloud (8 models, 3 hard; 16 of 43 labels negative), Wiz (7 models, 1 hard; 11 of 38 labels negative), Aqua Security (7 models; 8 of 52 labels negative), Snyk (4 models, 1 hard; 4 of 23 labels negative)
- **content-delivery-networks**: Akamai (8 models, 3 hard; 17 of 42 labels negative), Amazon CloudFront (8 models; 9 of 51 labels negative), cdnjs (6 models, 4 hard; 6 of 6 labels negative), Cloudflare (6 models, 1 hard; 6 of 64 labels negative)
- **customer-identity-and-access-management**: Auth0 (8 models, 2 hard; 15 of 67 labels negative), Amazon Cognito (7 models; 7 of 25 labels negative), Keycloak (4 models, 2 hard; 5 of 15 labels negative), IDMerit (3 models, 2 hard; 3 of 3 labels negative)
- **data-loss-prevention**: Symantec Data Loss Prevention (11 models, 10 hard; 25 of 35 labels negative), Forcepoint DLP (8 models, 4 hard; 15 of 49 labels negative), Microsoft Purview DLP (5 models, 1 hard; 6 of 56 labels negative), OpenDLP (5 models, 1 hard; 6 of 9 labels negative)
- **data-warehouses**: Amazon Redshift (11 models, 3 hard; 15 of 62 labels negative), Snowflake (11 models, 1 hard; 18 of 65 labels negative), Google BigQuery (11 models; 11 of 67 labels negative), Databricks (6 models; 11 of 37 labels negative)
- **ddos-protection**: DDoS-Guard (7 models, 6 hard; 7 of 7 labels negative), Akamai Prolexic (5 models, 3 hard; 9 of 50 labels negative), AWS Shield (4 models, 2 hard; 7 of 59 labels negative), Azure DDoS Protection (4 models, 1 hard; 5 of 35 labels negative)
- **email-security**: Mimecast Email Security (6 models; 6 of 45 labels negative), Proofpoint Email Protection (4 models; 6 of 49 labels negative), Barracuda Email Security Gateway (3 models, 2 hard; 3 of 6 labels negative), Cisco Secure Email (3 models, 1 hard; 3 of 11 labels negative)
- **endpoint-detection-and-response**: VMware Carbon Black (6 models, 4 hard; 7 of 12 labels negative), SentinelOne Singularity (6 models; 7 of 45 labels negative), CrowdStrike Falcon (5 models; 7 of 35 labels negative), Datto EDR (4 models, 3 hard; 4 of 4 labels negative)
- **endpoint-protection**: CrowdStrike Falcon (6 models; 7 of 33 labels negative), Kaspersky (4 models, 2 hard; 4 of 4 labels negative), SentinelOne (3 models; 4 of 27 labels negative), VMware Carbon Black (3 models; 3 of 3 labels negative)
- **error-and-crash-monitoring**: Datadog (12 models, 1 hard; 24 of 40 labels negative), New Relic (10 models; 14 of 27 labels negative), Sentry (9 models, 1 hard; 9 of 65 labels negative), Rollbar (7 models, 1 hard; 8 of 63 labels negative)
- **etl-and-elt**: Talend (8 models, 6 hard; 12 of 30 labels negative), Fivetran (7 models, 1 hard; 9 of 53 labels negative), Microsoft SQL Server Integration Services (5 models, 3 hard; 5 of 8 labels negative), Informatica PowerCenter (5 models, 2 hard; 5 of 8 labels negative)
- **extended-detection-and-response**: CrowdStrike Falcon (7 models; 8 of 29 labels negative), Microsoft Defender XDR (6 models; 6 of 57 labels negative), Palo Alto Networks Cortex XDR (5 models; 6 of 29 labels negative), Trend Vision One (5 models; 5 of 21 labels negative)
- **feature-flags**: LaunchDarkly (10 models, 3 hard; 19 of 61 labels negative), Split (6 models, 1 hard; 10 of 33 labels negative), Flagsmith (5 models, 1 hard; 5 of 56 labels negative), Unleash (4 models, 2 hard; 4 of 50 labels negative)
- **grc-platforms**: ServiceNow Integrated Risk Management (9 models, 5 hard; 21 of 35 labels negative), MetricStream (9 models, 4 hard; 17 of 30 labels negative), Archer (8 models, 2 hard; 13 of 24 labels negative), OneTrust (6 models, 2 hard; 10 of 27 labels negative)
- **identity-governance**: SailPoint (11 models, 8 hard; 28 of 42 labels negative), Saviynt Enterprise Identity Cloud (10 models, 6 hard; 24 of 41 labels negative), Okta Identity Governance (9 models, 1 hard; 12 of 35 labels negative), One Identity Manager (6 models, 3 hard; 8 of 23 labels negative)
- **incident-management-and-on-call**: Opsgenie (11 models, 21 hard; 27 of 46 labels negative), PagerDuty (9 models, 2 hard; 18 of 59 labels negative), Splunk On-Call (7 models, 2 hard; 8 of 17 labels negative), ServiceNow (5 models, 2 hard; 7 of 12 labels negative)
- **infrastructure-as-code**: Puppet (9 models, 4 hard; 11 of 16 labels negative), Chef (8 models, 4 hard; 9 of 13 labels negative), Terraform (8 models, 1 hard; 14 of 70 labels negative), SaltStack (5 models, 3 hard; 5 of 7 labels negative)
- **infrastructure-monitoring**: Zabbix (10 models, 3 hard; 11 of 44 labels negative), Datadog (10 models, 1 hard; 23 of 54 labels negative), Nagios (8 models, 5 hard; 12 of 22 labels negative), Dynatrace (7 models; 11 of 37 labels negative)
- **it-asset-management**: ServiceNow IT Asset Management (10 models, 2 hard; 16 of 36 labels negative), ManageEngine AssetExplorer (6 models, 1 hard; 6 of 43 labels negative), Flexera One (5 models, 1 hard; 5 of 19 labels negative), Snipe-IT (5 models, 1 hard; 7 of 42 labels negative)
- **it-service-management**: ServiceNow (10 models, 8 hard; 27 of 44 labels negative), BMC Helix ITSM (9 models, 9 hard; 13 of 27 labels negative), Ivanti Neurons for ITSM (5 models, 2 hard; 5 of 15 labels negative), ManageEngine ServiceDesk Plus (5 models; 5 of 33 labels negative)
- **llm-gateways-and-observability**: LiteLLM (9 models, 5 hard; 9 of 51 labels negative), OpenRouter (5 models; 7 of 31 labels negative), Helicone (3 models, 2 hard; 4 of 30 labels negative), Kong AI Gateway (3 models; 3 of 18 labels negative)
- **log-management**: Splunk (11 models, 6 hard; 27 of 51 labels negative), Datadog Log Management (11 models, 4 hard; 17 of 58 labels negative), Elastic Stack (9 models, 6 hard; 19 of 55 labels negative), Graylog (5 models; 5 of 37 labels negative)
- **managed-detection-and-response**: Arctic Wolf Managed Detection and Response (6 models, 2 hard; 6 of 43 labels negative), CrowdStrike Falcon Complete (3 models, 1 hard; 3 of 26 labels negative), Expel (1 model, 1 hard; 1 of 23 labels negative), Red Canary (1 model, 1 hard; 1 of 21 labels negative)
- **managed-kubernetes-platforms**: Amazon EKS (8 models, 6 hard; 18 of 58 labels negative), Red Hat OpenShift (7 models, 2 hard; 8 of 27 labels negative), Azure Kubernetes Service (6 models, 2 hard; 8 of 61 labels negative), Google Kubernetes Engine (5 models, 3 hard; 7 of 63 labels negative)
- **managed-relational-databases**: Amazon RDS (12 models; 13 of 59 labels negative), Google Cloud SQL (7 models; 8 of 53 labels negative), Azure SQL Database (6 models, 1 hard; 6 of 40 labels negative), Neon (5 models; 5 of 24 labels negative)
- **ml-platforms**: Amazon SageMaker (10 models, 1 hard; 14 of 49 labels negative), Google Vertex AI (8 models, 1 hard; 9 of 44 labels negative), Azure Machine Learning (7 models, 1 hard; 9 of 49 labels negative), DeepSeek (4 models, 4 hard; 4 of 4 labels negative)
- **multi-factor-authentication**: Google Authenticator (6 models; 7 of 22 labels negative), Okta (4 models; 6 of 49 labels negative), Authy (3 models, 1 hard; 4 of 16 labels negative), 1Password (2 models; 2 of 2 labels negative)
- **next-generation-firewalls**: SonicWall (8 models, 2 hard; 8 of 16 labels negative), Palo Alto Networks (7 models; 9 of 31 labels negative), Fortinet (5 models, 1 hard; 5 of 19 labels negative), Fortinet FortiGate (3 models; 3 of 38 labels negative)
- **nosql-databases**: MongoDB (8 models, 1 hard; 9 of 69 labels negative), Redis (8 models, 1 hard; 12 of 54 labels negative), Apache Cassandra (8 models; 13 of 43 labels negative), Amazon DynamoDB (7 models, 2 hard; 7 of 51 labels negative)
- **object-storage**: Wasabi (10 models, 3 hard; 19 of 50 labels negative), DigitalOcean Spaces (8 models, 2 hard; 9 of 24 labels negative), Azure Blob Storage (8 models, 1 hard; 10 of 46 labels negative), Google Cloud Storage (8 models, 1 hard; 11 of 45 labels negative)
- **observability-platforms**: Datadog (11 models, 5 hard; 24 of 63 labels negative), New Relic (10 models, 5 hard; 16 of 64 labels negative), Dynatrace (8 models, 2 hard; 13 of 41 labels negative), Splunk (7 models, 2 hard; 9 of 19 labels negative)
- **patch-management**: Windows Server Update Services (8 models, 5 hard; 10 of 17 labels negative), Ivanti (4 models, 2 hard; 4 of 12 labels negative), Kaseya VSA (4 models, 1 hard; 4 of 8 labels negative), Microsoft Configuration Manager (4 models, 1 hard; 4 of 7 labels negative)
- **penetration-testing-as-a-service**: HackerOne (3 models; 3 of 10 labels negative), Acunetix (2 models; 2 of 6 labels negative), Bugcrowd (2 models; 3 of 10 labels negative), Cobalt (2 models; 2 of 40 labels negative)
- **privileged-access-management**: CyberArk (11 models, 2 hard; 32 of 51 labels negative), BeyondTrust (10 models, 2 hard; 18 of 44 labels negative), Delinea (5 models, 1 hard; 6 of 44 labels negative), One Identity (5 models; 5 of 8 labels negative)
- **remote-monitoring-and-management**: SimpleHelp (9 models, 4 hard; 9 of 9 labels negative), Datto RMM (9 models, 2 hard; 13 of 33 labels negative), ConnectWise ScreenConnect (8 models, 3 hard; 8 of 8 labels negative), ConnectWise RMM (8 models, 2 hard; 10 of 25 labels negative)
- **sase-platforms**: Zscaler Zero Trust Exchange (7 models, 1 hard; 13 of 46 labels negative), Palo Alto Networks Prisma SASE (6 models, 3 hard; 12 of 33 labels negative), Fortinet FortiSASE (5 models; 6 of 41 labels negative), Cisco (4 models, 1 hard; 4 of 13 labels negative)
- **sd-wan**: Cisco Catalyst SD-WAN (10 models, 5 hard; 15 of 32 labels negative), VMware VeloCloud SD-WAN (9 models, 1 hard; 15 of 42 labels negative), Palo Alto Networks Prisma SD-WAN (7 models, 4 hard; 7 of 32 labels negative), Cisco Meraki SD-WAN (6 models, 1 hard; 7 of 34 labels negative)
- **secrets-management**: HashiCorp Vault (11 models, 2 hard; 22 of 66 labels negative), Kubernetes Secrets (6 models, 4 hard; 6 of 7 labels negative), AWS Secrets Manager (5 models; 8 of 60 labels negative), Azure Key Vault (5 models; 6 of 42 labels negative)
- **security-awareness-training**: KnowBe4 (8 models, 2 hard; 12 of 59 labels negative), Proofpoint ZenGuide (6 models, 1 hard; 7 of 40 labels negative), Nimblr Security Awareness (4 models, 2 hard; 4 of 4 labels negative), Cofense PhishMe (2 models; 2 of 8 labels negative)
- **siem-platforms**: LogRhythm (9 models, 7 hard; 10 of 29 labels negative), Securonix (8 models, 7 hard; 8 of 14 labels negative), IBM QRadar (8 models, 5 hard; 11 of 30 labels negative), Splunk Enterprise Security (8 models, 3 hard; 11 of 26 labels negative)
- **soar-platforms**: Splunk SOAR (11 models, 2 hard; 23 of 54 labels negative), Cortex XSOAR (10 models, 4 hard; 22 of 47 labels negative), IBM QRadar SOAR (5 models, 3 hard; 5 of 20 labels negative), Google Security Operations SOAR (4 models; 4 of 14 labels negative)
- **software-composition-analysis**: OWASP Dependency-Check (7 models, 2 hard; 12 of 32 labels negative), Snyk Open Source (7 models; 7 of 47 labels negative), Black Duck (5 models; 6 of 34 labels negative), Mend.io (5 models; 5 of 34 labels negative)
- **source-control-hosting**: GitHub (11 models, 1 hard; 12 of 72 labels negative), GitLab (9 models, 1 hard; 11 of 70 labels negative), Bitbucket (8 models; 12 of 69 labels negative), SourceForge (7 models, 7 hard; 8 of 9 labels negative)
- **static-application-security-testing**: Checkmarx One (9 models, 4 hard; 22 of 46 labels negative), Veracode (7 models, 5 hard; 14 of 34 labels negative), OpenText Fortify (7 models, 3 hard; 12 of 23 labels negative), SonarQube (5 models; 5 of 48 labels negative)
- **streaming-platforms**: Apache Kafka (10 models, 1 hard; 15 of 51 labels negative), Amazon Kinesis Data Streams (7 models, 1 hard; 9 of 36 labels negative), Apache Pulsar (7 models, 1 hard; 10 of 37 labels negative), Confluent Cloud (7 models; 8 of 50 labels negative)
- **third-party-risk-management**: OneTrust Third-Party Risk Management (6 models, 2 hard; 11 of 30 labels negative), Panorays (6 models, 1 hard; 6 of 35 labels negative), ProcessUnity (5 models, 1 hard; 8 of 23 labels negative), Bitsight (5 models; 7 of 29 labels negative)
- **threat-intelligence-platforms**: Recorded Future (8 models, 2 hard; 19 of 46 labels negative), ThreatConnect (6 models, 1 hard; 10 of 28 labels negative), Mandiant (6 models; 7 of 9 labels negative), Anomali (3 models, 1 hard; 3 of 13 labels negative)
- **unified-endpoint-management**: Omnissa Workspace ONE (9 models, 1 hard; 16 of 37 labels negative), Ivanti (7 models, 1 hard; 9 of 20 labels negative), ManageEngine Endpoint Central (6 models; 7 of 42 labels negative), Microsoft Intune (5 models; 5 of 57 labels negative)
- **vector-databases**: Pinecone (11 models, 5 hard; 16 of 58 labels negative), Milvus (8 models, 1 hard; 14 of 38 labels negative), Weaviate (8 models, 1 hard; 9 of 61 labels negative), pgvector (7 models; 7 of 51 labels negative)
- **vulnerability-management-platforms**: Qualys (5 models; 7 of 23 labels negative), Tenable (5 models; 6 of 25 labels negative), Tenable Nessus (4 models, 1 hard; 4 of 12 labels negative), Microsoft Defender Vulnerability Management (4 models; 5 of 27 labels negative)
- **web-application-firewalls**: ModSecurity (8 models, 2 hard; 10 of 18 labels negative), Imperva (6 models, 2 hard; 10 of 27 labels negative), Akamai (5 models, 1 hard; 6 of 22 labels negative), AWS WAF (4 models; 5 of 38 labels negative)
- **workflow-orchestration**: Apache Airflow (10 models, 1 hard; 18 of 56 labels negative), Zapier (7 models, 1 hard; 8 of 25 labels negative), AWS Step Functions (7 models; 7 of 18 labels negative), Temporal (5 models, 1 hard; 6 of 38 labels negative)
- **workforce-identity-and-sso**: Okta (11 models, 1 hard; 15 of 36 labels negative), Microsoft Entra ID (8 models; 8 of 63 labels negative), Ping Identity (6 models, 1 hard; 9 of 30 labels negative), OneLogin (5 models, 1 hard; 6 of 33 labels negative)
- **zero-trust-network-access**: Zscaler (7 models, 2 hard; 10 of 16 labels negative), Netskope (7 models, 1 hard; 7 of 15 labels negative), Check Point Harmony SASE (6 models, 1 hard; 8 of 30 labels negative), Zscaler Private Access (5 models, 1 hard; 6 of 29 labels negative)

## Leadership and criticism

First-choice share and negative label rate are independent, so every product with at least 10 labels in a category is placed on both axes. Cutoffs: leader at 30% or more of first choices, criticized at 25% or more negative labels. An endorsed leader is recommended and not criticized; a criticized default is recommended while the models list its problems; a criticized challenger is named mostly to be warned against.

| Category | Product | First-choice share | Negative rate | Labels | Quadrant |
|---|---|---|---|---|---|
| ai-coding-assistants | GitHub Copilot | 67% | 13% | 70 | endorsed leader |
| ai-coding-assistants | Windsurf | 10% | 19% | 26 | accepted challenger |
| ai-coding-assistants | Cline | 4% | 8% | 12 | accepted challenger |
| ai-coding-assistants | Cursor | 4% | 19% | 52 | accepted challenger |
| ai-coding-assistants | Aider | 2% | 17% | 12 | accepted challenger |
| ai-coding-assistants | Amazon Q Developer | 2% | 17% | 35 | accepted challenger |
| ai-coding-assistants | Tabnine | 0% | 5% | 39 | accepted challenger |
| ai-coding-assistants | Claude Code | 0% | 14% | 28 | accepted challenger |
| api-gateways | Kong Gateway | 61% | 13% | 71 | endorsed leader |
| api-gateways | Zuplo | 16% | 0% | 27 | accepted challenger |
| api-gateways | Tyk | 10% | 4% | 50 | accepted challenger |
| api-gateways | Amazon API Gateway | 6% | 16% | 58 | accepted challenger |
| api-gateways | Apache APISIX | 4% | 9% | 22 | accepted challenger |
| api-gateways | Traefik | 0% | 0% | 21 | accepted challenger |
| api-gateways | Azure API Management | 0% | 18% | 33 | accepted challenger |
| api-gateways | NGINX | 0% | 27% | 15 | criticized challenger |
| api-gateways | Apigee | 0% | 42% | 48 | criticized challenger |
| api-gateways | MuleSoft Anypoint Platform | 0% | 42% | 12 | criticized challenger |
| api-management | Kong Gateway | 37% | 9% | 64 | endorsed leader |
| api-management | Tyk | 13% | 7% | 41 | accepted challenger |
| api-management | Gravitee | 11% | 0% | 21 | accepted challenger |
| api-management | Zuplo | 11% | 12% | 16 | accepted challenger |
| api-management | Azure API Management | 7% | 20% | 41 | accepted challenger |
| api-management | WSO2 API Manager | 4% | 20% | 20 | accepted challenger |
| api-management | Postman | 2% | 13% | 15 | accepted challenger |
| api-management | Amazon API Gateway | 0% | 31% | 45 | criticized challenger |
| api-management | IBM API Connect | 0% | 35% | 17 | criticized challenger |
| api-management | MuleSoft Anypoint Platform | 0% | 38% | 34 | criticized challenger |
| api-management | Apigee | 0% | 43% | 44 | criticized challenger |
| application-performance-monitoring | New Relic | 54% | 15% | 67 | endorsed leader |
| application-performance-monitoring | SigNoz | 13% | 4% | 23 | accepted challenger |
| application-performance-monitoring | Datadog | 11% | 37% | 62 | criticized challenger |
| application-performance-monitoring | Grafana Cloud | 4% | 0% | 24 | accepted challenger |
| application-performance-monitoring | IBM Instana | 2% | 7% | 14 | accepted challenger |
| application-performance-monitoring | Honeycomb | 2% | 9% | 11 | accepted challenger |
| application-performance-monitoring | Sentry | 0% | 0% | 14 | accepted challenger |
| application-performance-monitoring | Elastic APM | 0% | 0% | 13 | accepted challenger |
| application-performance-monitoring | AppDynamics | 0% | 27% | 26 | criticized challenger |
| application-performance-monitoring | Dynatrace | 0% | 42% | 45 | criticized challenger |
| attack-surface-management | Intruder | 59% | 3% | 32 | endorsed leader |
| attack-surface-management | Attaxion | 11% | 5% | 21 | accepted challenger |
| attack-surface-management | Detectify | 7% | 10% | 29 | accepted challenger |
| attack-surface-management | Censys ASM | 5% | 54% | 26 | criticized challenger |
| attack-surface-management | UpGuard BreachSight | 2% | 0% | 14 | accepted challenger |
| attack-surface-management | Microsoft Defender External Attack Surface Management | 2% | 23% | 30 | accepted challenger |
| attack-surface-management | CyCognito | 2% | 39% | 31 | criticized challenger |
| attack-surface-management | Synack | 0% | 0% | 10 | accepted challenger |
| attack-surface-management | Wiz | 0% | 8% | 13 | accepted challenger |
| attack-surface-management | Mandiant Attack Surface Management | 0% | 20% | 10 | accepted challenger |
| attack-surface-management | IBM Randori | 0% | 23% | 13 | accepted challenger |
| attack-surface-management | Bitsight | 0% | 39% | 18 | criticized challenger |
| attack-surface-management | Cortex Xpanse | 0% | 56% | 32 | criticized challenger |
| backup-and-disaster-recovery | Veeam | 18% | 9% | 23 | accepted challenger |
| backup-and-disaster-recovery | Veeam Data Platform | 15% | 0% | 13 | accepted challenger |
| backup-and-disaster-recovery | Acronis Cyber Protect | 12% | 8% | 24 | accepted challenger |
| backup-and-disaster-recovery | IDrive Business | 12% | 21% | 14 | accepted challenger |
| backup-and-disaster-recovery | Datto SIRIS | 10% | 10% | 10 | accepted challenger |
| backup-and-disaster-recovery | Druva | 2% | 0% | 11 | accepted challenger |
| backup-and-disaster-recovery | Acronis | 2% | 15% | 13 | accepted challenger |
| backup-and-disaster-recovery | Datto | 2% | 18% | 11 | accepted challenger |
| backup-and-disaster-recovery | Rubrik | 0% | 5% | 21 | accepted challenger |
| backup-and-disaster-recovery | Cohesity | 0% | 6% | 16 | accepted challenger |
| backup-and-disaster-recovery | Commvault | 0% | 9% | 23 | accepted challenger |
| backup-and-disaster-recovery | Zerto | 0% | 9% | 11 | accepted challenger |
| backup-and-disaster-recovery | Azure Site Recovery | 0% | 18% | 11 | accepted challenger |
| business-password-managers | Bitwarden | 49% | 11% | 65 | endorsed leader |
| business-password-managers | 1Password | 42% | 15% | 62 | endorsed leader |
| business-password-managers | NordPass | 4% | 3% | 34 | accepted challenger |
| business-password-managers | Zoho Vault | 2% | 10% | 10 | accepted challenger |
| business-password-managers | RoboForm | 2% | 12% | 16 | accepted challenger |
| business-password-managers | Proton Pass | 0% | 0% | 12 | accepted challenger |
| business-password-managers | Keeper Security | 0% | 4% | 45 | accepted challenger |
| business-password-managers | Dashlane | 0% | 26% | 42 | criticized challenger |
| business-password-managers | LastPass | 0% | 85% | 27 | criticized challenger |
| ci-cd-platforms | GitHub Actions | 65% | 8% | 63 | endorsed leader |
| ci-cd-platforms | GitLab CI/CD | 27% | 5% | 64 | accepted challenger |
| ci-cd-platforms | CircleCI | 4% | 16% | 58 | accepted challenger |
| ci-cd-platforms | Jenkins | 2% | 63% | 57 | criticized challenger |
| ci-cd-platforms | Harness | 0% | 0% | 12 | accepted challenger |
| ci-cd-platforms | Argo CD | 0% | 8% | 12 | accepted challenger |
| ci-cd-platforms | Azure DevOps | 0% | 12% | 25 | accepted challenger |
| ci-cd-platforms | Buildkite | 0% | 19% | 21 | accepted challenger |
| ci-cd-platforms | JetBrains TeamCity | 0% | 47% | 17 | criticized challenger |
| cloud-cost-management | Vantage | 54% | 0% | 48 | endorsed leader |
| cloud-cost-management | CloudZero | 10% | 10% | 41 | accepted challenger |
| cloud-cost-management | Finout | 4% | 8% | 25 | accepted challenger |
| cloud-cost-management | Microsoft Cost Management | 4% | 23% | 22 | accepted challenger |
| cloud-cost-management | AWS Cost Explorer | 4% | 33% | 24 | criticized challenger |
| cloud-cost-management | Infracost | 2% | 0% | 13 | accepted challenger |
| cloud-cost-management | nOps | 2% | 6% | 18 | accepted challenger |
| cloud-cost-management | Harness Cloud Cost Management | 0% | 0% | 16 | accepted challenger |
| cloud-cost-management | Kubecost | 0% | 0% | 24 | accepted challenger |
| cloud-cost-management | Flexera One | 0% | 8% | 12 | accepted challenger |
| cloud-cost-management | OpenCost | 0% | 8% | 12 | accepted challenger |
| cloud-cost-management | ProsperOps | 0% | 10% | 21 | accepted challenger |
| cloud-cost-management | CAST AI | 0% | 17% | 18 | accepted challenger |
| cloud-cost-management | Cloudaware | 0% | 20% | 10 | accepted challenger |
| cloud-cost-management | IBM Apptio Cloudability | 0% | 41% | 32 | criticized challenger |
| cloud-cost-management | Spot by NetApp | 0% | 45% | 11 | criticized challenger |
| cloud-cost-management | VMware Tanzu CloudHealth | 0% | 52% | 33 | criticized challenger |
| cloud-hosting | Amazon Web Services | 29% | 17% | 58 | accepted challenger |
| cloud-hosting | Microsoft Azure | 24% | 3% | 35 | accepted challenger |
| cloud-hosting | DigitalOcean | 13% | 11% | 46 | accepted challenger |
| cloud-hosting | Hetzner | 9% | 6% | 18 | accepted challenger |
| cloud-hosting | Kamatera | 4% | 0% | 11 | accepted challenger |
| cloud-hosting | Vultr | 2% | 11% | 27 | accepted challenger |
| cloud-hosting | Cloudways | 2% | 23% | 13 | accepted challenger |
| cloud-hosting | OVHcloud | 2% | 47% | 15 | criticized challenger |
| cloud-hosting | Akamai Connected Cloud | 0% | 9% | 34 | accepted challenger |
| cloud-hosting | Google Cloud | 0% | 11% | 46 | accepted challenger |
| cloud-hosting | Oracle Cloud Infrastructure | 0% | 15% | 13 | accepted challenger |
| cloud-hosting | Azure | 0% | 35% | 20 | criticized challenger |
| cloud-native-application-protection | Wiz | 46% | 18% | 55 | endorsed leader |
| cloud-native-application-protection | Microsoft Defender for Cloud | 30% | 4% | 47 | endorsed leader |
| cloud-native-application-protection | Orca Security | 16% | 5% | 40 | accepted challenger |
| cloud-native-application-protection | Orca | 2% | 20% | 10 | accepted challenger |
| cloud-native-application-protection | Prisma Cloud | 2% | 32% | 38 | criticized challenger |
| cloud-native-application-protection | Sysdig Secure | 0% | 0% | 12 | accepted challenger |
| cloud-native-application-protection | SentinelOne Singularity Cloud Security | 0% | 0% | 12 | accepted challenger |
| cloud-native-application-protection | Sysdig | 0% | 4% | 26 | accepted challenger |
| cloud-native-application-protection | CrowdStrike Falcon Cloud Security | 0% | 22% | 18 | accepted challenger |
| cloud-native-application-protection | Aqua Security | 0% | 26% | 19 | criticized challenger |
| cloud-native-application-protection | FortiCNAPP | 0% | 43% | 14 | criticized challenger |
| cloud-security-posture-management | Wiz | 43% | 15% | 59 | endorsed leader |
| cloud-security-posture-management | Prowler | 16% | 4% | 24 | accepted challenger |
| cloud-security-posture-management | Microsoft Defender for Cloud | 14% | 15% | 53 | accepted challenger |
| cloud-security-posture-management | Orca Security | 12% | 8% | 38 | accepted challenger |
| cloud-security-posture-management | AWS Security Hub | 4% | 6% | 17 | accepted challenger |
| cloud-security-posture-management | Cloudaware | 2% | 9% | 11 | accepted challenger |
| cloud-security-posture-management | Uptycs | 0% | 0% | 10 | accepted challenger |
| cloud-security-posture-management | Tenable Cloud Security | 0% | 5% | 21 | accepted challenger |
| cloud-security-posture-management | CrowdStrike Falcon Cloud Security | 0% | 9% | 22 | accepted challenger |
| cloud-security-posture-management | Lacework FortiCNAPP | 0% | 36% | 14 | criticized challenger |
| cloud-security-posture-management | Prisma Cloud | 0% | 47% | 49 | criticized challenger |
| compliance-automation | Drata | 37% | 25% | 59 | criticized default |
| compliance-automation | Vanta | 23% | 25% | 59 | criticized challenger |
| compliance-automation | Sprinto | 8% | 11% | 38 | accepted challenger |
| compliance-automation | Secureframe | 4% | 17% | 53 | accepted challenger |
| compliance-automation | Thoropass | 0% | 8% | 13 | accepted challenger |
| compliance-automation | Scytale | 0% | 8% | 13 | accepted challenger |
| compliance-automation | Hyperproof | 0% | 14% | 22 | accepted challenger |
| compliance-automation | AuditBoard | 0% | 18% | 11 | accepted challenger |
| compliance-automation | OneTrust | 0% | 40% | 10 | criticized challenger |
| container-and-kubernetes-security | Aqua Security | 18% | 15% | 52 | accepted challenger |
| container-and-kubernetes-security | Trivy | 16% | 5% | 39 | accepted challenger |
| container-and-kubernetes-security | Sysdig Secure | 16% | 7% | 29 | accepted challenger |
| container-and-kubernetes-security | Sysdig | 12% | 17% | 29 | accepted challenger |
| container-and-kubernetes-security | Kubescape | 10% | 4% | 27 | accepted challenger |
| container-and-kubernetes-security | Falco | 10% | 4% | 47 | accepted challenger |
| container-and-kubernetes-security | Wiz | 4% | 29% | 38 | criticized challenger |
| container-and-kubernetes-security | SUSE NeuVector | 2% | 4% | 24 | accepted challenger |
| container-and-kubernetes-security | Snyk | 2% | 17% | 23 | accepted challenger |
| container-and-kubernetes-security | Red Hat Advanced Cluster Security for Kubernetes | 0% | 0% | 10 | accepted challenger |
| container-and-kubernetes-security | Snyk Container | 0% | 0% | 13 | accepted challenger |
| container-and-kubernetes-security | Prisma Cloud | 0% | 37% | 43 | criticized challenger |
| content-delivery-networks | Cloudflare | 80% | 9% | 64 | endorsed leader |
| content-delivery-networks | Bunny.net | 15% | 5% | 43 | accepted challenger |
| content-delivery-networks | Fastly | 2% | 18% | 49 | accepted challenger |
| content-delivery-networks | CDN77 | 0% | 0% | 11 | accepted challenger |
| content-delivery-networks | Google Cloud CDN | 0% | 5% | 19 | accepted challenger |
| content-delivery-networks | KeyCDN | 0% | 6% | 16 | accepted challenger |
| content-delivery-networks | Amazon CloudFront | 0% | 18% | 51 | accepted challenger |
| content-delivery-networks | Akamai | 0% | 40% | 42 | criticized challenger |
| customer-identity-and-access-management | WorkOS | 22% | 7% | 30 | accepted challenger |
| customer-identity-and-access-management | Auth0 | 22% | 22% | 67 | accepted challenger |
| customer-identity-and-access-management | Frontegg | 17% | 0% | 32 | accepted challenger |
| customer-identity-and-access-management | Clerk | 7% | 10% | 21 | accepted challenger |
| customer-identity-and-access-management | Microsoft Entra External ID | 4% | 9% | 32 | accepted challenger |
| customer-identity-and-access-management | FusionAuth | 4% | 13% | 15 | accepted challenger |
| customer-identity-and-access-management | Ping Identity | 4% | 14% | 22 | accepted challenger |
| customer-identity-and-access-management | Amazon Cognito | 4% | 28% | 25 | criticized challenger |
| customer-identity-and-access-management | LoginRadius | 2% | 7% | 14 | accepted challenger |
| customer-identity-and-access-management | Stytch | 0% | 0% | 19 | accepted challenger |
| customer-identity-and-access-management | Descope | 0% | 8% | 26 | accepted challenger |
| customer-identity-and-access-management | IBM Verify | 0% | 30% | 10 | criticized challenger |
| customer-identity-and-access-management | Keycloak | 0% | 33% | 15 | criticized challenger |
| data-loss-prevention | Microsoft Purview DLP | 39% | 11% | 56 | endorsed leader |
| data-loss-prevention | CurrentWare | 18% | 0% | 24 | accepted challenger |
| data-loss-prevention | Safetica | 16% | 3% | 33 | accepted challenger |
| data-loss-prevention | Nightfall AI | 8% | 0% | 24 | accepted challenger |
| data-loss-prevention | miniOrange | 4% | 0% | 10 | accepted challenger |
| data-loss-prevention | Cyberhaven | 4% | 0% | 15 | accepted challenger |
| data-loss-prevention | Forcepoint DLP | 4% | 31% | 49 | criticized challenger |
| data-loss-prevention | Netskope DLP | 2% | 5% | 22 | accepted challenger |
| data-loss-prevention | Varonis | 0% | 0% | 10 | accepted challenger |
| data-loss-prevention | Strac | 0% | 0% | 10 | accepted challenger |
| data-loss-prevention | Zscaler | 0% | 6% | 18 | accepted challenger |
| data-loss-prevention | Proofpoint Enterprise DLP | 0% | 11% | 19 | accepted challenger |
| data-loss-prevention | Netwrix Endpoint Protector | 0% | 12% | 16 | accepted challenger |
| data-loss-prevention | Symantec Data Loss Prevention | 0% | 71% | 35 | criticized challenger |
| data-warehouses | Snowflake | 47% | 28% | 65 | criticized default |
| data-warehouses | Google BigQuery | 44% | 16% | 67 | endorsed leader |
| data-warehouses | ClickHouse Cloud | 2% | 14% | 22 | accepted challenger |
| data-warehouses | Microsoft Fabric | 0% | 8% | 13 | accepted challenger |
| data-warehouses | Azure Synapse Analytics | 0% | 21% | 24 | accepted challenger |
| data-warehouses | Amazon Redshift | 0% | 24% | 62 | accepted challenger |
| data-warehouses | Databricks | 0% | 30% | 37 | criticized challenger |
| ddos-protection | Cloudflare | 93% | 2% | 66 | endorsed leader |
| ddos-protection | Fastly | 0% | 0% | 14 | accepted challenger |
| ddos-protection | Flowtriq | 0% | 0% | 10 | accepted challenger |
| ddos-protection | Sucuri | 0% | 0% | 13 | accepted challenger |
| ddos-protection | Radware | 0% | 5% | 22 | accepted challenger |
| ddos-protection | Imperva | 0% | 6% | 36 | accepted challenger |
| ddos-protection | Google Cloud Armor | 0% | 7% | 15 | accepted challenger |
| ddos-protection | AWS Shield | 0% | 12% | 59 | accepted challenger |
| ddos-protection | Azure DDoS Protection | 0% | 14% | 35 | accepted challenger |
| ddos-protection | Akamai Prolexic | 0% | 18% | 50 | accepted challenger |
| email-security | Microsoft Defender for Office 365 | 31% | 9% | 47 | endorsed leader |
| email-security | Abnormal AI | 12% | 4% | 45 | accepted challenger |
| email-security | Check Point Harmony Email & Collaboration | 10% | 8% | 26 | accepted challenger |
| email-security | Proofpoint Email Protection | 10% | 12% | 49 | accepted challenger |
| email-security | IRONSCALES | 9% | 0% | 29 | accepted challenger |
| email-security | Barracuda Email Protection | 7% | 6% | 34 | accepted challenger |
| email-security | Mimecast Email Security | 7% | 13% | 45 | accepted challenger |
| email-security | SpamTitan | 5% | 7% | 15 | accepted challenger |
| email-security | Cisco Secure Email | 0% | 27% | 11 | criticized challenger |
| endpoint-detection-and-response | Bitdefender GravityZone | 20% | 0% | 42 | accepted challenger |
| endpoint-detection-and-response | Microsoft Defender for Endpoint | 20% | 11% | 38 | accepted challenger |
| endpoint-detection-and-response | Huntress Managed EDR | 14% | 0% | 34 | accepted challenger |
| endpoint-detection-and-response | Microsoft Defender for Cloud | 14% | 0% | 10 | accepted challenger |
| endpoint-detection-and-response | CrowdStrike Falcon | 12% | 20% | 35 | accepted challenger |
| endpoint-detection-and-response | SentinelOne Singularity | 8% | 16% | 45 | accepted challenger |
| endpoint-detection-and-response | CrowdStrike | 6% | 31% | 13 | criticized challenger |
| endpoint-detection-and-response | Cynet | 0% | 0% | 11 | accepted challenger |
| endpoint-detection-and-response | Sophos Intercept X | 0% | 5% | 22 | accepted challenger |
| endpoint-detection-and-response | Trend Micro | 0% | 8% | 13 | accepted challenger |
| endpoint-detection-and-response | Palo Alto Networks Cortex XDR | 0% | 11% | 19 | accepted challenger |
| endpoint-detection-and-response | ThreatDown EDR | 0% | 30% | 10 | criticized challenger |
| endpoint-detection-and-response | VMware Carbon Black | 0% | 58% | 12 | criticized challenger |
| endpoint-protection | Microsoft Defender for Cloud | 22% | 0% | 13 | accepted challenger |
| endpoint-protection | Bitdefender GravityZone | 20% | 0% | 29 | accepted challenger |
| endpoint-protection | Microsoft Defender for Endpoint | 18% | 5% | 38 | accepted challenger |
| endpoint-protection | SentinelOne Singularity | 4% | 0% | 20 | accepted challenger |
| endpoint-protection | Sophos Intercept X | 4% | 0% | 20 | accepted challenger |
| endpoint-protection | SentinelOne | 4% | 15% | 27 | accepted challenger |
| endpoint-protection | CrowdStrike | 4% | 17% | 18 | accepted challenger |
| endpoint-protection | CrowdStrike Falcon | 4% | 21% | 33 | accepted challenger |
| endpoint-protection | ESET PROTECT | 2% | 0% | 11 | accepted challenger |
| endpoint-protection | Palo Alto Networks Cortex XDR | 0% | 0% | 14 | accepted challenger |
| endpoint-protection | Bitdefender | 0% | 0% | 13 | accepted challenger |
| endpoint-protection | Trend Micro | 0% | 20% | 10 | accepted challenger |
| error-and-crash-monitoring | Sentry | 82% | 14% | 65 | endorsed leader |
| error-and-crash-monitoring | Rollbar | 14% | 13% | 63 | accepted challenger |
| error-and-crash-monitoring | GlitchTip | 2% | 0% | 14 | accepted challenger |
| error-and-crash-monitoring | Raygun | 0% | 7% | 15 | accepted challenger |
| error-and-crash-monitoring | LogRocket | 0% | 7% | 15 | accepted challenger |
| error-and-crash-monitoring | Honeybadger | 0% | 10% | 30 | accepted challenger |
| error-and-crash-monitoring | Bugsnag | 0% | 17% | 41 | accepted challenger |
| error-and-crash-monitoring | Airbrake | 0% | 30% | 10 | criticized challenger |
| error-and-crash-monitoring | New Relic | 0% | 52% | 27 | criticized challenger |
| error-and-crash-monitoring | Datadog | 0% | 60% | 40 | criticized challenger |
| etl-and-elt | Airbyte | 32% | 4% | 50 | endorsed leader |
| etl-and-elt | Fivetran | 32% | 17% | 53 | endorsed leader |
| etl-and-elt | Integrate.io | 15% | 8% | 24 | accepted challenger |
| etl-and-elt | Hevo Data | 6% | 12% | 25 | accepted challenger |
| etl-and-elt | Stitch | 4% | 21% | 29 | accepted challenger |
| etl-and-elt | Talend | 4% | 40% | 30 | criticized challenger |
| etl-and-elt | Apache NiFi | 2% | 18% | 11 | accepted challenger |
| etl-and-elt | dbt | 0% | 0% | 39 | accepted challenger |
| etl-and-elt | Skyvia | 0% | 0% | 10 | accepted challenger |
| etl-and-elt | Apache Airflow | 0% | 0% | 27 | accepted challenger |
| etl-and-elt | Azure Data Factory | 0% | 0% | 15 | accepted challenger |
| etl-and-elt | Matillion | 0% | 12% | 26 | accepted challenger |
| etl-and-elt | AWS Glue | 0% | 17% | 18 | accepted challenger |
| etl-and-elt | Informatica | 0% | 45% | 11 | criticized challenger |
| extended-detection-and-response | Microsoft Defender XDR | 63% | 11% | 57 | endorsed leader |
| extended-detection-and-response | Coro | 7% | 8% | 13 | accepted challenger |
| extended-detection-and-response | SentinelOne Singularity | 5% | 5% | 37 | accepted challenger |
| extended-detection-and-response | Bitdefender | 5% | 6% | 17 | accepted challenger |
| extended-detection-and-response | CrowdStrike Falcon XDR | 2% | 7% | 14 | accepted challenger |
| extended-detection-and-response | Sophos Intercept X | 2% | 14% | 14 | accepted challenger |
| extended-detection-and-response | Stellar Cyber | 0% | 5% | 19 | accepted challenger |
| extended-detection-and-response | Palo Alto Networks Cortex XDR | 0% | 21% | 29 | accepted challenger |
| extended-detection-and-response | Cisco XDR | 0% | 24% | 17 | accepted challenger |
| extended-detection-and-response | Trend Vision One | 0% | 24% | 21 | accepted challenger |
| extended-detection-and-response | CrowdStrike Falcon | 0% | 28% | 29 | criticized challenger |
| feature-flags | LaunchDarkly | 30% | 31% | 61 | criticized challenger |
| feature-flags | Flagsmith | 17% | 9% | 56 | accepted challenger |
| feature-flags | ConfigCat | 17% | 11% | 36 | accepted challenger |
| feature-flags | Unleash | 13% | 8% | 50 | accepted challenger |
| feature-flags | Statsig | 9% | 7% | 42 | accepted challenger |
| feature-flags | GrowthBook | 6% | 2% | 40 | accepted challenger |
| feature-flags | PostHog | 6% | 12% | 24 | accepted challenger |
| feature-flags | DevCycle | 0% | 0% | 10 | accepted challenger |
| feature-flags | Split | 0% | 30% | 33 | criticized challenger |
| grc-platforms | Vanta | 14% | 16% | 37 | accepted challenger |
| grc-platforms | Hyperproof | 12% | 6% | 34 | accepted challenger |
| grc-platforms | LogicGate Risk Cloud | 11% | 0% | 16 | accepted challenger |
| grc-platforms | LogicGate | 11% | 0% | 15 | accepted challenger |
| grc-platforms | ZenGRC | 7% | 7% | 14 | accepted challenger |
| grc-platforms | Sprinto | 5% | 0% | 19 | accepted challenger |
| grc-platforms | Drata | 5% | 12% | 40 | accepted challenger |
| grc-platforms | Secureframe | 2% | 8% | 12 | accepted challenger |
| grc-platforms | AuditBoard | 2% | 11% | 19 | accepted challenger |
| grc-platforms | OneTrust | 0% | 37% | 27 | criticized challenger |
| grc-platforms | Archer | 0% | 54% | 24 | criticized challenger |
| grc-platforms | MetricStream | 0% | 57% | 30 | criticized challenger |
| grc-platforms | ServiceNow Integrated Risk Management | 0% | 60% | 35 | criticized challenger |
| identity-governance | Lumos | 20% | 0% | 23 | accepted challenger |
| identity-governance | Microsoft Entra ID Governance | 12% | 18% | 38 | accepted challenger |
| identity-governance | Iden | 8% | 0% | 13 | accepted challenger |
| identity-governance | ConductorOne | 8% | 10% | 10 | accepted challenger |
| identity-governance | Zluri | 7% | 0% | 18 | accepted challenger |
| identity-governance | Okta Identity Governance | 3% | 34% | 35 | criticized challenger |
| identity-governance | One Identity Manager | 3% | 35% | 23 | criticized challenger |
| identity-governance | SailPoint | 3% | 67% | 42 | criticized challenger |
| identity-governance | Omada Identity | 2% | 0% | 17 | accepted challenger |
| identity-governance | Saviynt Enterprise Identity Cloud | 2% | 59% | 41 | criticized challenger |
| incident-management-and-on-call | incident.io | 25% | 0% | 50 | accepted challenger |
| incident-management-and-on-call | PagerDuty | 22% | 31% | 59 | criticized challenger |
| incident-management-and-on-call | Squadcast | 10% | 0% | 25 | accepted challenger |
| incident-management-and-on-call | Hyperping | 8% | 0% | 14 | accepted challenger |
| incident-management-and-on-call | Rootly | 8% | 0% | 42 | accepted challenger |
| incident-management-and-on-call | Opsgenie | 8% | 59% | 46 | criticized challenger |
| incident-management-and-on-call | Better Stack | 6% | 6% | 17 | accepted challenger |
| incident-management-and-on-call | xMatters | 2% | 36% | 11 | criticized challenger |
| incident-management-and-on-call | Jira Service Management | 0% | 11% | 28 | accepted challenger |
| incident-management-and-on-call | FireHydrant | 0% | 18% | 17 | accepted challenger |
| incident-management-and-on-call | Freshservice | 0% | 20% | 15 | accepted challenger |
| incident-management-and-on-call | Grafana IRM | 0% | 29% | 14 | criticized challenger |
| incident-management-and-on-call | Splunk On-Call | 0% | 47% | 17 | criticized challenger |
| incident-management-and-on-call | ServiceNow | 0% | 58% | 12 | criticized challenger |
| infrastructure-as-code | Terraform | 46% | 20% | 70 | endorsed leader |
| infrastructure-as-code | OpenTofu | 39% | 0% | 49 | endorsed leader |
| infrastructure-as-code | Pulumi | 7% | 6% | 66 | accepted challenger |
| infrastructure-as-code | AWS CDK | 2% | 11% | 28 | accepted challenger |
| infrastructure-as-code | Azure Bicep | 0% | 5% | 21 | accepted challenger |
| infrastructure-as-code | Ansible | 0% | 8% | 39 | accepted challenger |
| infrastructure-as-code | Spacelift | 0% | 10% | 10 | accepted challenger |
| infrastructure-as-code | Crossplane | 0% | 12% | 25 | accepted challenger |
| infrastructure-as-code | AWS CloudFormation | 0% | 16% | 38 | accepted challenger |
| infrastructure-as-code | Azure Resource Manager templates | 0% | 21% | 14 | accepted challenger |
| infrastructure-as-code | Puppet | 0% | 69% | 16 | criticized challenger |
| infrastructure-as-code | Chef | 0% | 69% | 13 | criticized challenger |
| infrastructure-monitoring | Site24x7 | 24% | 4% | 25 | accepted challenger |
| infrastructure-monitoring | New Relic | 22% | 15% | 48 | accepted challenger |
| infrastructure-monitoring | Zabbix | 18% | 25% | 44 | criticized challenger |
| infrastructure-monitoring | Datadog | 13% | 43% | 54 | criticized challenger |
| infrastructure-monitoring | Netdata | 7% | 0% | 20 | accepted challenger |
| infrastructure-monitoring | Grafana | 4% | 9% | 32 | accepted challenger |
| infrastructure-monitoring | Prometheus | 4% | 25% | 28 | criticized challenger |
| infrastructure-monitoring | LogicMonitor | 2% | 0% | 15 | accepted challenger |
| infrastructure-monitoring | Dynatrace | 2% | 30% | 37 | criticized challenger |
| infrastructure-monitoring | Prometheus + Grafana | 0% | 11% | 18 | accepted challenger |
| infrastructure-monitoring | Paessler PRTG | 0% | 12% | 16 | accepted challenger |
| infrastructure-monitoring | Nagios | 0% | 55% | 22 | criticized challenger |
| it-asset-management | Snipe-IT | 24% | 17% | 42 | accepted challenger |
| it-asset-management | ManageEngine AssetExplorer | 20% | 14% | 43 | accepted challenger |
| it-asset-management | Freshservice | 18% | 6% | 33 | accepted challenger |
| it-asset-management | Lansweeper | 16% | 11% | 38 | accepted challenger |
| it-asset-management | InvGate Asset Management | 7% | 0% | 17 | accepted challenger |
| it-asset-management | GLPI | 2% | 10% | 10 | accepted challenger |
| it-asset-management | Device42 | 0% | 7% | 15 | accepted challenger |
| it-asset-management | Ivanti Neurons for ITAM | 0% | 14% | 21 | accepted challenger |
| it-asset-management | Asset Panda | 0% | 14% | 21 | accepted challenger |
| it-asset-management | Flexera One | 0% | 26% | 19 | criticized challenger |
| it-asset-management | ServiceNow IT Asset Management | 0% | 44% | 36 | criticized challenger |
| it-service-management | Freshservice | 58% | 0% | 51 | endorsed leader |
| it-service-management | Jira Service Management | 21% | 6% | 53 | accepted challenger |
| it-service-management | ManageEngine ServiceDesk Plus | 10% | 15% | 33 | accepted challenger |
| it-service-management | Spiceworks Cloud Help Desk | 6% | 9% | 11 | accepted challenger |
| it-service-management | InvGate Service Management | 2% | 0% | 18 | accepted challenger |
| it-service-management | SysAid | 0% | 0% | 13 | accepted challenger |
| it-service-management | HaloITSM | 0% | 7% | 15 | accepted challenger |
| it-service-management | SolarWinds Service Desk | 0% | 21% | 14 | accepted challenger |
| it-service-management | Ivanti Neurons for ITSM | 0% | 33% | 15 | criticized challenger |
| it-service-management | Zendesk | 0% | 36% | 14 | criticized challenger |
| it-service-management | BMC Helix ITSM | 0% | 48% | 27 | criticized challenger |
| it-service-management | ServiceNow | 0% | 61% | 44 | criticized challenger |
| llm-gateways-and-observability | LiteLLM | 38% | 18% | 51 | endorsed leader |
| llm-gateways-and-observability | Portkey | 27% | 2% | 43 | accepted challenger |
| llm-gateways-and-observability | Langfuse | 9% | 0% | 11 | accepted challenger |
| llm-gateways-and-observability | Helicone | 9% | 13% | 30 | accepted challenger |
| llm-gateways-and-observability | Braintrust | 2% | 0% | 11 | accepted challenger |
| llm-gateways-and-observability | Cloudflare AI Gateway | 2% | 4% | 23 | accepted challenger |
| llm-gateways-and-observability | Kong AI Gateway | 2% | 17% | 18 | accepted challenger |
| llm-gateways-and-observability | OpenRouter | 2% | 23% | 31 | accepted challenger |
| llm-gateways-and-observability | Bifrost | 0% | 0% | 21 | accepted challenger |
| log-management | Datadog Log Management | 20% | 29% | 58 | criticized challenger |
| log-management | Grafana Loki | 16% | 7% | 44 | accepted challenger |
| log-management | New Relic Logs | 10% | 7% | 27 | accepted challenger |
| log-management | Graylog | 10% | 14% | 37 | accepted challenger |
| log-management | Better Stack | 8% | 0% | 19 | accepted challenger |
| log-management | OpenObserve | 8% | 5% | 22 | accepted challenger |
| log-management | SigNoz | 6% | 0% | 13 | accepted challenger |
| log-management | Elastic Stack | 2% | 35% | 55 | criticized challenger |
| log-management | Cribl | 0% | 0% | 12 | accepted challenger |
| log-management | Sumo Logic | 0% | 11% | 18 | accepted challenger |
| log-management | Splunk | 0% | 53% | 51 | criticized challenger |
| managed-detection-and-response | Arctic Wolf Managed Detection and Response | 39% | 14% | 43 | endorsed leader |
| managed-detection-and-response | Huntress Managed EDR | 26% | 0% | 38 | accepted challenger |
| managed-detection-and-response | Sophos MDR | 11% | 0% | 43 | accepted challenger |
| managed-detection-and-response | eSentire | 11% | 0% | 20 | accepted challenger |
| managed-detection-and-response | Expel | 4% | 4% | 23 | accepted challenger |
| managed-detection-and-response | SentinelOne Singularity MDR | 2% | 0% | 18 | accepted challenger |
| managed-detection-and-response | CrowdStrike Falcon Complete | 2% | 12% | 26 | accepted challenger |
| managed-detection-and-response | Ontinue | 0% | 0% | 13 | accepted challenger |
| managed-detection-and-response | Rapid7 MDR | 0% | 0% | 17 | accepted challenger |
| managed-detection-and-response | Red Canary | 0% | 5% | 21 | accepted challenger |
| managed-kubernetes-platforms | Google Kubernetes Engine | 39% | 11% | 63 | endorsed leader |
| managed-kubernetes-platforms | DigitalOcean Kubernetes | 22% | 12% | 42 | accepted challenger |
| managed-kubernetes-platforms | Civo | 10% | 0% | 22 | accepted challenger |
| managed-kubernetes-platforms | Linode Kubernetes Engine | 10% | 5% | 21 | accepted challenger |
| managed-kubernetes-platforms | Azure Kubernetes Service | 8% | 13% | 61 | accepted challenger |
| managed-kubernetes-platforms | Amazon EKS | 6% | 31% | 58 | criticized challenger |
| managed-kubernetes-platforms | Rancher | 2% | 8% | 24 | accepted challenger |
| managed-kubernetes-platforms | Scaleway Kapsule | 0% | 0% | 10 | accepted challenger |
| managed-kubernetes-platforms | Vultr Kubernetes Engine | 0% | 9% | 11 | accepted challenger |
| managed-kubernetes-platforms | Red Hat OpenShift | 0% | 30% | 27 | criticized challenger |
| managed-kubernetes-platforms | VMware Tanzu | 0% | 31% | 13 | criticized challenger |
| managed-relational-databases | Amazon RDS | 32% | 22% | 59 | endorsed leader |
| managed-relational-databases | Google Cloud SQL | 11% | 15% | 53 | accepted challenger |
| managed-relational-databases | Amazon Aurora | 11% | 17% | 30 | accepted challenger |
| managed-relational-databases | DigitalOcean Managed Databases | 8% | 11% | 19 | accepted challenger |
| managed-relational-databases | Neon | 6% | 21% | 24 | accepted challenger |
| managed-relational-databases | Azure SQL Database | 4% | 15% | 40 | accepted challenger |
| managed-relational-databases | Supabase | 4% | 27% | 22 | criticized challenger |
| managed-relational-databases | AlloyDB for PostgreSQL | 2% | 0% | 13 | accepted challenger |
| managed-relational-databases | PlanetScale | 2% | 31% | 13 | criticized challenger |
| ml-platforms | Azure Machine Learning | 17% | 18% | 49 | accepted challenger |
| ml-platforms | Databricks | 12% | 10% | 30 | accepted challenger |
| ml-platforms | Amazon SageMaker | 10% | 29% | 49 | criticized challenger |
| ml-platforms | Google Vertex AI | 8% | 20% | 44 | accepted challenger |
| ml-platforms | Dataiku | 6% | 0% | 15 | accepted challenger |
| ml-platforms | Databricks Mosaic AI | 6% | 0% | 10 | accepted challenger |
| ml-platforms | TensorFlow | 4% | 0% | 10 | accepted challenger |
| ml-platforms | MLflow | 2% | 12% | 25 | accepted challenger |
| ml-platforms | H2O.ai | 0% | 13% | 15 | accepted challenger |
| ml-platforms | DataRobot | 0% | 16% | 19 | accepted challenger |
| ml-platforms | Weights & Biases | 0% | 25% | 12 | criticized challenger |
| ml-platforms | Kubeflow | 0% | 38% | 13 | criticized challenger |
| multi-factor-authentication | Cisco Duo | 42% | 2% | 60 | endorsed leader |
| multi-factor-authentication | Microsoft Entra ID | 30% | 2% | 49 | endorsed leader |
| multi-factor-authentication | Okta | 9% | 12% | 49 | accepted challenger |
| multi-factor-authentication | Microsoft Authenticator | 6% | 6% | 18 | accepted challenger |
| multi-factor-authentication | Google Authenticator | 4% | 32% | 22 | criticized challenger |
| multi-factor-authentication | Ping Identity | 2% | 13% | 15 | accepted challenger |
| multi-factor-authentication | Authy | 2% | 25% | 16 | criticized challenger |
| multi-factor-authentication | YubiKey | 0% | 0% | 29 | accepted challenger |
| multi-factor-authentication | RSA SecurID | 0% | 17% | 12 | accepted challenger |
| next-generation-firewalls | Fortinet FortiGate | 61% | 8% | 38 | endorsed leader |
| next-generation-firewalls | Fortinet | 9% | 26% | 19 | criticized challenger |
| next-generation-firewalls | Sophos Firewall | 2% | 0% | 13 | accepted challenger |
| next-generation-firewalls | Check Point | 2% | 9% | 23 | accepted challenger |
| next-generation-firewalls | Palo Alto Networks | 2% | 29% | 31 | criticized challenger |
| next-generation-firewalls | SonicWall | 2% | 50% | 16 | criticized challenger |
| next-generation-firewalls | WatchGuard Firebox | 0% | 10% | 10 | accepted challenger |
| next-generation-firewalls | Sophos | 0% | 10% | 10 | accepted challenger |
| next-generation-firewalls | Cisco Secure Firewall | 0% | 11% | 18 | accepted challenger |
| next-generation-firewalls | Cisco | 0% | 18% | 11 | accepted challenger |
| nosql-databases | MongoDB | 59% | 13% | 69 | endorsed leader |
| nosql-databases | Amazon DynamoDB | 11% | 14% | 51 | accepted challenger |
| nosql-databases | Couchbase | 7% | 8% | 38 | accepted challenger |
| nosql-databases | Redis | 6% | 22% | 54 | accepted challenger |
| nosql-databases | PostgreSQL | 4% | 0% | 11 | accepted challenger |
| nosql-databases | Azure Cosmos DB | 4% | 4% | 23 | accepted challenger |
| nosql-databases | Neo4j | 2% | 8% | 25 | accepted challenger |
| nosql-databases | Google Cloud Firestore | 0% | 0% | 10 | accepted challenger |
| nosql-databases | Apache CouchDB | 0% | 25% | 12 | criticized challenger |
| nosql-databases | ScyllaDB | 0% | 27% | 22 | criticized challenger |
| nosql-databases | Apache Cassandra | 0% | 30% | 43 | criticized challenger |
| nosql-databases | Apache HBase | 0% | 31% | 13 | criticized challenger |
| object-storage | Backblaze B2 | 46% | 4% | 52 | endorsed leader |
| object-storage | Cloudflare R2 | 21% | 7% | 43 | accepted challenger |
| object-storage | Amazon S3 | 15% | 23% | 60 | accepted challenger |
| object-storage | Azure Blob Storage | 8% | 22% | 46 | accepted challenger |
| object-storage | Wasabi | 5% | 38% | 50 | criticized challenger |
| object-storage | IDrive e2 | 3% | 17% | 12 | accepted challenger |
| object-storage | Storj | 3% | 27% | 11 | criticized challenger |
| object-storage | MinIO | 0% | 15% | 27 | accepted challenger |
| object-storage | Google Cloud Storage | 0% | 24% | 45 | accepted challenger |
| object-storage | DigitalOcean Spaces | 0% | 38% | 24 | criticized challenger |
| observability-platforms | Grafana | 29% | 4% | 53 | accepted challenger |
| observability-platforms | New Relic | 27% | 25% | 64 | criticized challenger |
| observability-platforms | Datadog | 23% | 38% | 63 | criticized challenger |
| observability-platforms | SigNoz | 8% | 0% | 18 | accepted challenger |
| observability-platforms | Honeycomb | 4% | 0% | 25 | accepted challenger |
| observability-platforms | OpenObserve | 2% | 0% | 13 | accepted challenger |
| observability-platforms | Elastic Observability | 0% | 0% | 12 | accepted challenger |
| observability-platforms | Splunk Observability Cloud | 0% | 27% | 11 | criticized challenger |
| observability-platforms | Dynatrace | 0% | 32% | 41 | criticized challenger |
| observability-platforms | Splunk | 0% | 47% | 19 | criticized challenger |
| patch-management | Action1 | 27% | 2% | 42 | accepted challenger |
| patch-management | Automox | 19% | 11% | 36 | accepted challenger |
| patch-management | ManageEngine Patch Manager Plus | 17% | 6% | 33 | accepted challenger |
| patch-management | NinjaOne | 13% | 8% | 38 | accepted challenger |
| patch-management | Syxsense | 6% | 0% | 15 | accepted challenger |
| patch-management | Heimdal | 4% | 0% | 16 | accepted challenger |
| patch-management | Microsoft Intune | 2% | 12% | 16 | accepted challenger |
| patch-management | Windows Server Update Services | 2% | 59% | 17 | criticized challenger |
| patch-management | Patch My PC | 0% | 8% | 13 | accepted challenger |
| patch-management | ManageEngine Endpoint Central | 0% | 8% | 12 | accepted challenger |
| patch-management | Atera | 0% | 9% | 11 | accepted challenger |
| patch-management | Tanium | 0% | 13% | 15 | accepted challenger |
| patch-management | Ivanti | 0% | 33% | 12 | criticized challenger |
| penetration-testing-as-a-service | Cobalt | 44% | 5% | 40 | endorsed leader |
| penetration-testing-as-a-service | Astra Security | 13% | 0% | 26 | accepted challenger |
| penetration-testing-as-a-service | BreachLock | 9% | 3% | 30 | accepted challenger |
| penetration-testing-as-a-service | NetSPI | 2% | 9% | 22 | accepted challenger |
| penetration-testing-as-a-service | Bishop Fox | 0% | 6% | 16 | accepted challenger |
| penetration-testing-as-a-service | Synack | 0% | 11% | 18 | accepted challenger |
| penetration-testing-as-a-service | Bugcrowd | 0% | 30% | 10 | criticized challenger |
| penetration-testing-as-a-service | HackerOne | 0% | 30% | 10 | criticized challenger |
| privileged-access-management | ManageEngine PAM360 | 21% | 6% | 35 | accepted challenger |
| privileged-access-management | Delinea | 19% | 14% | 44 | accepted challenger |
| privileged-access-management | Securden Unified PAM | 15% | 11% | 18 | accepted challenger |
| privileged-access-management | KeeperPAM | 11% | 9% | 23 | accepted challenger |
| privileged-access-management | Delinea Secret Server | 11% | 30% | 10 | criticized challenger |
| privileged-access-management | Teleport | 4% | 9% | 22 | accepted challenger |
| privileged-access-management | BeyondTrust | 4% | 41% | 44 | criticized challenger |
| privileged-access-management | miniOrange PAM | 2% | 0% | 12 | accepted challenger |
| privileged-access-management | Netwrix Privilege Secure | 0% | 0% | 12 | accepted challenger |
| privileged-access-management | StrongDM | 0% | 6% | 17 | accepted challenger |
| privileged-access-management | HashiCorp Vault | 0% | 18% | 11 | accepted challenger |
| privileged-access-management | CyberArk | 0% | 63% | 51 | criticized challenger |
| remote-monitoring-and-management | NinjaOne | 50% | 9% | 56 | endorsed leader |
| remote-monitoring-and-management | Syncro | 13% | 7% | 44 | accepted challenger |
| remote-monitoring-and-management | Action1 | 11% | 9% | 11 | accepted challenger |
| remote-monitoring-and-management | Atera | 7% | 10% | 51 | accepted challenger |
| remote-monitoring-and-management | ConnectWise RMM | 4% | 40% | 25 | criticized challenger |
| remote-monitoring-and-management | SuperOps | 2% | 0% | 20 | accepted challenger |
| remote-monitoring-and-management | ManageEngine Endpoint Central | 2% | 0% | 10 | accepted challenger |
| remote-monitoring-and-management | N-able N-sight | 2% | 27% | 11 | criticized challenger |
| remote-monitoring-and-management | N-able N-central | 0% | 17% | 18 | accepted challenger |
| remote-monitoring-and-management | ConnectWise Automate | 0% | 25% | 12 | criticized challenger |
| remote-monitoring-and-management | Datto RMM | 0% | 39% | 33 | criticized challenger |
| remote-monitoring-and-management | Kaseya VSA | 0% | 82% | 11 | criticized challenger |
| sase-platforms | Cato SASE Cloud | 28% | 0% | 16 | accepted challenger |
| sase-platforms | Cato Networks | 26% | 8% | 25 | accepted challenger |
| sase-platforms | Cloudflare One | 23% | 11% | 44 | accepted challenger |
| sase-platforms | Cisco Umbrella | 7% | 18% | 17 | accepted challenger |
| sase-platforms | Check Point Harmony SASE | 5% | 13% | 15 | accepted challenger |
| sase-platforms | Netskope One | 2% | 10% | 30 | accepted challenger |
| sase-platforms | Fortinet FortiSASE | 0% | 15% | 41 | accepted challenger |
| sase-platforms | Cisco Secure Access | 0% | 18% | 11 | accepted challenger |
| sase-platforms | Zscaler Zero Trust Exchange | 0% | 28% | 46 | criticized challenger |
| sase-platforms | Cisco | 0% | 31% | 13 | criticized challenger |
| sase-platforms | Palo Alto Networks Prisma SASE | 0% | 36% | 33 | criticized challenger |
| sd-wan | Fortinet Secure SD-WAN | 41% | 7% | 58 | endorsed leader |
| sd-wan | Cisco Meraki SD-WAN | 30% | 21% | 34 | accepted challenger |
| sd-wan | Cisco Catalyst SD-WAN | 9% | 47% | 32 | criticized challenger |
| sd-wan | Aryaka | 5% | 0% | 10 | accepted challenger |
| sd-wan | Cisco | 2% | 6% | 18 | accepted challenger |
| sd-wan | HPE Aruba EdgeConnect | 2% | 6% | 31 | accepted challenger |
| sd-wan | Versa Secure SD-WAN | 2% | 21% | 28 | accepted challenger |
| sd-wan | VMware VeloCloud SD-WAN | 2% | 36% | 42 | criticized challenger |
| sd-wan | Cato Networks | 0% | 6% | 18 | accepted challenger |
| sd-wan | Palo Alto Networks Prisma SD-WAN | 0% | 22% | 32 | accepted challenger |
| sd-wan | Peplink | 0% | 40% | 10 | criticized challenger |
| secrets-management | Doppler | 33% | 7% | 54 | endorsed leader |
| secrets-management | HashiCorp Vault | 30% | 33% | 66 | criticized challenger |
| secrets-management | Infisical | 18% | 5% | 40 | accepted challenger |
| secrets-management | Bitwarden Secrets Manager | 5% | 7% | 14 | accepted challenger |
| secrets-management | Akeyless | 4% | 5% | 22 | accepted challenger |
| secrets-management | AWS Secrets Manager | 4% | 13% | 60 | accepted challenger |
| secrets-management | 1Password | 4% | 19% | 26 | accepted challenger |
| secrets-management | OpenBao | 2% | 12% | 17 | accepted challenger |
| secrets-management | Azure Key Vault | 2% | 14% | 42 | accepted challenger |
| secrets-management | Google Secret Manager | 0% | 10% | 31 | accepted challenger |
| secrets-management | CyberArk Conjur | 0% | 25% | 12 | criticized challenger |
| security-awareness-training | KnowBe4 | 42% | 20% | 59 | endorsed leader |
| security-awareness-training | Wizer | 20% | 0% | 11 | accepted challenger |
| security-awareness-training | Hoxhunt | 13% | 0% | 41 | accepted challenger |
| security-awareness-training | Huntress Managed Security Awareness Training | 9% | 0% | 16 | accepted challenger |
| security-awareness-training | Hook Security | 4% | 0% | 14 | accepted challenger |
| security-awareness-training | Infosec IQ | 4% | 11% | 19 | accepted challenger |
| security-awareness-training | Arctic Wolf Managed Security Awareness | 2% | 0% | 13 | accepted challenger |
| security-awareness-training | SoSafe | 0% | 0% | 20 | accepted challenger |
| security-awareness-training | NINJIO | 0% | 0% | 16 | accepted challenger |
| security-awareness-training | Adaptive Security | 0% | 0% | 12 | accepted challenger |
| security-awareness-training | Proofpoint ZenGuide | 0% | 18% | 40 | accepted challenger |
| security-awareness-training | MetaCompliance | 0% | 19% | 16 | accepted challenger |
| siem-platforms | Microsoft Sentinel | 41% | 12% | 56 | endorsed leader |
| siem-platforms | Rapid7 InsightIDR | 22% | 4% | 28 | accepted challenger |
| siem-platforms | Wazuh | 18% | 7% | 15 | accepted challenger |
| siem-platforms | Elastic Security | 6% | 0% | 32 | accepted challenger |
| siem-platforms | Blumira | 4% | 0% | 12 | accepted challenger |
| siem-platforms | ManageEngine Log360 | 4% | 6% | 16 | accepted challenger |
| siem-platforms | LogRhythm | 2% | 34% | 29 | criticized challenger |
| siem-platforms | Palo Alto Networks Cortex XSIAM | 0% | 8% | 13 | accepted challenger |
| siem-platforms | Google Security Operations | 0% | 8% | 12 | accepted challenger |
| siem-platforms | Exabeam | 0% | 15% | 13 | accepted challenger |
| siem-platforms | Sumo Logic | 0% | 17% | 18 | accepted challenger |
| siem-platforms | Graylog | 0% | 30% | 10 | criticized challenger |
| siem-platforms | IBM QRadar | 0% | 37% | 30 | criticized challenger |
| siem-platforms | Splunk Enterprise Security | 0% | 42% | 26 | criticized challenger |
| siem-platforms | Securonix | 0% | 57% | 14 | criticized challenger |
| siem-platforms | Splunk | 0% | 59% | 22 | criticized challenger |
| soar-platforms | Tines | 47% | 0% | 48 | endorsed leader |
| soar-platforms | Rapid7 InsightConnect | 15% | 8% | 25 | accepted challenger |
| soar-platforms | Shuffle | 11% | 0% | 10 | accepted challenger |
| soar-platforms | Swimlane Turbine | 4% | 0% | 14 | accepted challenger |
| soar-platforms | Torq | 4% | 10% | 29 | accepted challenger |
| soar-platforms | FortiSOAR | 2% | 6% | 18 | accepted challenger |
| soar-platforms | Microsoft Sentinel | 2% | 11% | 28 | accepted challenger |
| soar-platforms | Splunk SOAR | 2% | 43% | 54 | criticized challenger |
| soar-platforms | Cortex XSOAR | 2% | 47% | 47 | criticized challenger |
| soar-platforms | Swimlane | 0% | 11% | 18 | accepted challenger |
| soar-platforms | IBM QRadar SOAR | 0% | 25% | 20 | criticized challenger |
| soar-platforms | Google Security Operations SOAR | 0% | 29% | 14 | criticized challenger |
| software-composition-analysis | Trivy | 40% | 3% | 30 | endorsed leader |
| software-composition-analysis | Snyk Open Source | 16% | 15% | 47 | accepted challenger |
| software-composition-analysis | Mend.io | 14% | 15% | 34 | accepted challenger |
| software-composition-analysis | OWASP Dependency-Check | 14% | 38% | 32 | criticized challenger |
| software-composition-analysis | OWASP Dependency-Track | 2% | 0% | 11 | accepted challenger |
| software-composition-analysis | Endor Labs | 0% | 0% | 19 | accepted challenger |
| software-composition-analysis | FOSSA | 0% | 0% | 18 | accepted challenger |
| software-composition-analysis | OSV-Scanner | 0% | 0% | 13 | accepted challenger |
| software-composition-analysis | Grype | 0% | 7% | 14 | accepted challenger |
| software-composition-analysis | JFrog Xray | 0% | 8% | 13 | accepted challenger |
| software-composition-analysis | GitHub Advanced Security | 0% | 17% | 12 | accepted challenger |
| software-composition-analysis | Black Duck | 0% | 18% | 34 | accepted challenger |
| software-composition-analysis | Sonatype Lifecycle | 0% | 19% | 31 | accepted challenger |
| source-control-hosting | GitHub | 74% | 17% | 72 | endorsed leader |
| source-control-hosting | GitLab | 19% | 16% | 70 | accepted challenger |
| source-control-hosting | Bitbucket | 4% | 17% | 69 | accepted challenger |
| source-control-hosting | Gitea | 2% | 16% | 25 | accepted challenger |
| source-control-hosting | Azure Repos | 0% | 0% | 13 | accepted challenger |
| source-control-hosting | Codeberg | 0% | 0% | 11 | accepted challenger |
| source-control-hosting | Azure DevOps | 0% | 14% | 22 | accepted challenger |
| source-control-hosting | Forgejo | 0% | 22% | 18 | accepted challenger |
| source-control-hosting | AWS CodeCommit | 0% | 36% | 11 | criticized challenger |
| static-application-security-testing | Semgrep | 47% | 0% | 56 | endorsed leader |
| static-application-security-testing | SonarQube | 22% | 10% | 48 | accepted challenger |
| static-application-security-testing | Snyk Code | 13% | 6% | 36 | accepted challenger |
| static-application-security-testing | Aikido Security | 4% | 0% | 16 | accepted challenger |
| static-application-security-testing | CodeQL | 2% | 8% | 26 | accepted challenger |
| static-application-security-testing | Veracode | 2% | 41% | 34 | criticized challenger |
| static-application-security-testing | gosec | 0% | 0% | 10 | accepted challenger |
| static-application-security-testing | GitHub Advanced Security | 0% | 8% | 12 | accepted challenger |
| static-application-security-testing | Bandit | 0% | 18% | 11 | accepted challenger |
| static-application-security-testing | Checkmarx One | 0% | 48% | 46 | criticized challenger |
| static-application-security-testing | OpenText Fortify | 0% | 52% | 23 | criticized challenger |
| streaming-platforms | Confluent Cloud | 32% | 16% | 50 | endorsed leader |
| streaming-platforms | Redpanda | 17% | 9% | 57 | accepted challenger |
| streaming-platforms | Apache Kafka | 17% | 29% | 51 | criticized challenger |
| streaming-platforms | Amazon MSK | 6% | 18% | 33 | accepted challenger |
| streaming-platforms | Aiven for Apache Kafka | 4% | 0% | 27 | accepted challenger |
| streaming-platforms | WarpStream | 4% | 27% | 11 | criticized challenger |
| streaming-platforms | Azure Event Hubs | 2% | 19% | 27 | accepted challenger |
| streaming-platforms | Amazon Kinesis Data Streams | 2% | 25% | 36 | criticized challenger |
| streaming-platforms | Apache Pulsar | 2% | 27% | 37 | criticized challenger |
| streaming-platforms | Google Cloud Pub/Sub | 0% | 19% | 27 | accepted challenger |
| streaming-platforms | RabbitMQ | 0% | 42% | 12 | criticized challenger |
| third-party-risk-management | UpGuard | 53% | 9% | 47 | endorsed leader |
| third-party-risk-management | Panorays | 10% | 17% | 35 | accepted challenger |
| third-party-risk-management | Vanta | 6% | 17% | 30 | accepted challenger |
| third-party-risk-management | SecurityScorecard | 2% | 21% | 29 | accepted challenger |
| third-party-risk-management | Bitsight | 2% | 24% | 29 | accepted challenger |
| third-party-risk-management | Prevalent | 2% | 26% | 23 | criticized challenger |
| third-party-risk-management | ProcessUnity | 2% | 35% | 23 | criticized challenger |
| third-party-risk-management | Riskonnect | 0% | 18% | 11 | accepted challenger |
| third-party-risk-management | OneTrust Third-Party Risk Management | 0% | 37% | 30 | criticized challenger |
| third-party-risk-management | Archer | 0% | 50% | 16 | criticized challenger |
| third-party-risk-management | ServiceNow | 0% | 55% | 11 | criticized challenger |
| threat-intelligence-platforms | NordStellar | 13% | 0% | 13 | accepted challenger |
| threat-intelligence-platforms | Rapid7 Threat Command | 11% | 0% | 11 | accepted challenger |
| threat-intelligence-platforms | MISP | 11% | 8% | 24 | accepted challenger |
| threat-intelligence-platforms | Recorded Future | 9% | 41% | 46 | criticized challenger |
| threat-intelligence-platforms | Cyble Vision | 6% | 0% | 12 | accepted challenger |
| threat-intelligence-platforms | OpenCTI | 6% | 9% | 23 | accepted challenger |
| threat-intelligence-platforms | AlienVault OTX | 4% | 15% | 13 | accepted challenger |
| threat-intelligence-platforms | ThreatConnect | 4% | 36% | 28 | criticized challenger |
| threat-intelligence-platforms | Anomali | 2% | 23% | 13 | accepted challenger |
| threat-intelligence-platforms | Flashpoint | 0% | 0% | 10 | accepted challenger |
| threat-intelligence-platforms | Abuse.ch | 0% | 0% | 10 | accepted challenger |
| threat-intelligence-platforms | Anomali ThreatStream | 0% | 14% | 14 | accepted challenger |
| unified-endpoint-management | Microsoft Intune | 43% | 9% | 57 | endorsed leader |
| unified-endpoint-management | ManageEngine Endpoint Central | 24% | 17% | 42 | accepted challenger |
| unified-endpoint-management | JumpCloud | 9% | 0% | 14 | accepted challenger |
| unified-endpoint-management | Miradore | 7% | 0% | 11 | accepted challenger |
| unified-endpoint-management | Scalefusion | 4% | 0% | 17 | accepted challenger |
| unified-endpoint-management | NinjaOne | 4% | 9% | 32 | accepted challenger |
| unified-endpoint-management | ManageEngine | 2% | 9% | 11 | accepted challenger |
| unified-endpoint-management | 42Gears SureMDM | 0% | 0% | 13 | accepted challenger |
| unified-endpoint-management | Hexnode UEM | 0% | 6% | 16 | accepted challenger |
| unified-endpoint-management | Jamf | 0% | 10% | 39 | accepted challenger |
| unified-endpoint-management | SOTI | 0% | 12% | 16 | accepted challenger |
| unified-endpoint-management | IBM MaaS360 | 0% | 33% | 15 | criticized challenger |
| unified-endpoint-management | Omnissa Workspace ONE | 0% | 43% | 37 | criticized challenger |
| unified-endpoint-management | Ivanti | 0% | 45% | 20 | criticized challenger |
| vector-databases | Qdrant | 37% | 5% | 63 | endorsed leader |
| vector-databases | pgvector | 35% | 14% | 51 | endorsed leader |
| vector-databases | Pinecone | 14% | 28% | 58 | criticized challenger |
| vector-databases | Weaviate | 6% | 15% | 61 | accepted challenger |
| vector-databases | Chroma | 4% | 27% | 30 | criticized challenger |
| vector-databases | Milvus | 2% | 37% | 38 | criticized challenger |
| vector-databases | FAISS | 0% | 18% | 11 | accepted challenger |
| vector-databases | Milvus / Zilliz Cloud | 0% | 36% | 14 | criticized challenger |
| vulnerability-management-platforms | Rapid7 InsightVM | 45% | 8% | 36 | endorsed leader |
| vulnerability-management-platforms | Intruder | 16% | 0% | 19 | accepted challenger |
| vulnerability-management-platforms | ManageEngine Vulnerability Manager Plus | 9% | 0% | 14 | accepted challenger |
| vulnerability-management-platforms | OpenVAS | 9% | 24% | 21 | accepted challenger |
| vulnerability-management-platforms | Tenable Vulnerability Management | 7% | 0% | 18 | accepted challenger |
| vulnerability-management-platforms | Microsoft Defender Vulnerability Management | 2% | 19% | 27 | accepted challenger |
| vulnerability-management-platforms | Tenable Nessus | 2% | 33% | 12 | criticized challenger |
| vulnerability-management-platforms | Qualys VMDR | 0% | 4% | 24 | accepted challenger |
| vulnerability-management-platforms | Wiz | 0% | 6% | 16 | accepted challenger |
| vulnerability-management-platforms | Tenable | 0% | 24% | 25 | accepted challenger |
| vulnerability-management-platforms | Qualys | 0% | 30% | 23 | criticized challenger |
| vulnerability-management-platforms | Rapid7 | 0% | 38% | 13 | criticized challenger |
| web-application-firewalls | Cloudflare | 55% | 0% | 33 | endorsed leader |
| web-application-firewalls | Cloudflare WAF | 34% | 11% | 27 | endorsed leader |
| web-application-firewalls | AWS WAF | 5% | 13% | 38 | accepted challenger |
| web-application-firewalls | Fastly | 2% | 10% | 10 | accepted challenger |
| web-application-firewalls | Barracuda | 0% | 20% | 15 | accepted challenger |
| web-application-firewalls | Akamai | 0% | 27% | 22 | criticized challenger |
| web-application-firewalls | Imperva | 0% | 37% | 27 | criticized challenger |
| web-application-firewalls | ModSecurity | 0% | 56% | 18 | criticized challenger |
| workflow-orchestration | Prefect | 24% | 2% | 48 | accepted challenger |
| workflow-orchestration | Dagster | 18% | 5% | 39 | accepted challenger |
| workflow-orchestration | Apache Airflow | 16% | 32% | 56 | criticized challenger |
| workflow-orchestration | Make | 10% | 14% | 22 | accepted challenger |
| workflow-orchestration | n8n | 8% | 12% | 26 | accepted challenger |
| workflow-orchestration | Workato | 6% | 27% | 15 | criticized challenger |
| workflow-orchestration | Zapier | 4% | 32% | 25 | criticized challenger |
| workflow-orchestration | Kestra | 2% | 0% | 16 | accepted challenger |
| workflow-orchestration | Astronomer Astro | 0% | 8% | 13 | accepted challenger |
| workflow-orchestration | Microsoft Power Automate | 0% | 10% | 10 | accepted challenger |
| workflow-orchestration | Temporal | 0% | 16% | 38 | accepted challenger |
| workflow-orchestration | Camunda | 0% | 16% | 19 | accepted challenger |
| workflow-orchestration | Argo Workflows | 0% | 21% | 19 | accepted challenger |
| workflow-orchestration | ServiceNow | 0% | 36% | 11 | criticized challenger |
| workflow-orchestration | AWS Step Functions | 0% | 39% | 18 | criticized challenger |
| workflow-orchestration | Pega | 0% | 40% | 10 | criticized challenger |
| workforce-identity-and-sso | Microsoft Entra ID | 36% | 13% | 63 | endorsed leader |
| workforce-identity-and-sso | Okta | 17% | 42% | 36 | criticized challenger |
| workforce-identity-and-sso | Okta Workforce Identity | 15% | 7% | 27 | accepted challenger |
| workforce-identity-and-sso | OneLogin | 15% | 18% | 33 | accepted challenger |
| workforce-identity-and-sso | JumpCloud | 11% | 4% | 46 | accepted challenger |
| workforce-identity-and-sso | SailPoint | 0% | 10% | 10 | accepted challenger |
| workforce-identity-and-sso | IBM Verify | 0% | 10% | 10 | accepted challenger |
| workforce-identity-and-sso | CyberArk Identity | 0% | 13% | 23 | accepted challenger |
| workforce-identity-and-sso | ForgeRock | 0% | 27% | 11 | criticized challenger |
| workforce-identity-and-sso | Ping Identity | 0% | 30% | 30 | criticized challenger |
| zero-trust-network-access | Cloudflare One | 35% | 0% | 29 | endorsed leader |
| zero-trust-network-access | Twingate | 28% | 0% | 44 | accepted challenger |
| zero-trust-network-access | Cato Networks | 12% | 0% | 16 | accepted challenger |
| zero-trust-network-access | OpenVPN CloudConnexa | 10% | 0% | 11 | accepted challenger |
| zero-trust-network-access | NordLayer | 2% | 6% | 17 | accepted challenger |
| zero-trust-network-access | Check Point Harmony SASE | 2% | 27% | 30 | criticized challenger |
| zero-trust-network-access | Zscaler | 2% | 62% | 16 | criticized challenger |
| zero-trust-network-access | Cloudflare Access | 0% | 0% | 14 | accepted challenger |
| zero-trust-network-access | Netskope Private Access | 0% | 0% | 10 | accepted challenger |
| zero-trust-network-access | Tailscale | 0% | 11% | 19 | accepted challenger |
| zero-trust-network-access | Palo Alto Networks Prisma Access | 0% | 12% | 16 | accepted challenger |
| zero-trust-network-access | Zscaler Private Access | 0% | 21% | 29 | accepted challenger |
| zero-trust-network-access | Netskope | 0% | 47% | 15 | criticized challenger |

## Treatment of lab-affiliated products by model

Self-preference is only measurable with a control group: how the lab's own model treats its products compared with how every other model treats the same products. Anthropic, OpenAI, Google have no products in the covered categories with enough labels to measure, so nothing is claimed about them.

## Discontinued products recommended

None in this run.

## Normalization

Unresolved, 896 labels counted under the raw name, for human review:

11:11 Systems in cloud-hosting (1), 12Port in privileged-access-management (1), 1Kosmos BlockID in customer-identity-and-access-management (1), 2FAS in multi-factor-authentication (1), 2slick in cloud-hosting (1), 360 Netlab in threat-intelligence-platforms (1), 6sense in ml-platforms (1), AMG in it-asset-management (1), AOL in email-security (1), APIwiz in api-management (1), ARCON Converged Identity in identity-governance (1), ARCON Security Compliance Management in identity-governance (1), AU10TIX in customer-identity-and-access-management (1), AVG in endpoint-protection (1), AWS Backup & AWS Disaster Recovery in backup-and-disaster-recovery (1), AWS Backup/DR in backup-and-disaster-recovery (1), AWS Bedrock Guardrails in llm-gateways-and-observability (1), AWS Billing and Cost Management / Cost Explorer / Cost Optimization Hub in cloud-cost-management (1), AWS CloudWatch / Azure Monitor / GCP Operations in observability-platforms (1), AWS Config/Security Hub in cloud-security-posture-management (1), AWS Cost Explorer + AWS Organizations in cloud-cost-management (1), AWS Cost Explorer / native tools in cloud-cost-management (1), AWS RDS Free Tier / Amazon Aurora Serverless in managed-relational-databases (1), AWS SageMaker Studio (Free Tier) in ml-platforms (1), AWS Systems Manager Patch Manager in patch-management (1), AWS native in cloud-cost-management (1), Absolute Secure Access in zero-trust-network-access (1), Abuse.ch Feeds in threat-intelligence-platforms (1), AccuWebHosting in cloud-hosting (1), Acronis RMM / Cyber Protect in patch-management (1), Actian NoSQL in nosql-databases (1), Actian VectorAI in vector-databases (1), Adaptiv Enterprise Connect in sd-wan (1), Adaptive in security-awareness-training (1), Admyral in soar-platforms (1), Aegis in multi-factor-authentication (1), Akamai – Enterprise Threat Protection (ETP) + Edge DNS in zero-trust-network-access (1), Alcatel-Lucent (ALC) in next-generation-firewalls (1), AlgoSec in cloud-security-posture-management (1), Alibaba Cloud AnalyticDB in data-warehouses (1), Alibaba Cloud OSS (Object Storage Service) in object-storage (1), AlienVault OSSIM in siem-platforms (1), AlmaLinux in patch-management (1), Altova MapForce in etl-and-elt (1), Amazon Inspector in cloud-native-application-protection (1), Amazon Q / Amazon Kiro in ai-coding-assistants (1), Amazon Q Developer / AWS Kiro in ai-coding-assistants (1), Amazon QLDB in nosql-databases (1), Amazon Ring in streaming-platforms (1), Amazon Security Lake in extended-detection-and-response (1), Amazon Shield in web-application-firewalls (1), Amazon SimpleDB (AWS) in data-warehouses (1), Amplemarket in ml-platforms (1), Anchore Community in container-and-kubernetes-security (1), Anchore Engine in container-and-kubernetes-security (1), AnnDB in nosql-databases (1), Anomali Limo in threat-intelligence-platforms (1), AnuDB Serverless in nosql-databases (1), Apache Directory in identity-governance (1), Apache Guacamole in privileged-access-management (1), Apache Samza in streaming-platforms (1), Apache Storm in streaming-platforms (1), Apache Storm 2.x in streaming-platforms (1), AppRiver in email-security (1), Apple Configurator in patch-management (1), Apple iCloud Mail in email-security (1), Arakoon in nosql-databases (1), Archer Regulatory and Corporate Compliance in compliance-automation (1), Arcserve / StorageCraft (ShadowProtect) in backup-and-disaster-recovery (1), Arcserve Continuous Availability in backup-and-disaster-recovery (1), Arelio API Gateway by DigitalAPI in api-gateways (1), Arista Edge Threat Management (NGFW) in next-generation-firewalls (1), Arista NG Firewall in next-generation-firewalls (1), Artifice Security in penetration-testing-as-a-service (1), Arubacloud in cloud-hosting (1), Arweave in object-storage (1), Asset Management Global (AMG) in it-asset-management (1), AssetLoom in it-asset-management (1), AssetWorks in it-asset-management (1), Atmosly in managed-kubernetes-platforms (1), Audit Prodigy in grc-platforms (1), Aura in customer-identity-and-access-management (1), Avast Home in endpoint-protection (1), Avatier in privileged-access-management (1), Axis Security in zero-trust-network-access (1), Azure AI in llm-gateways-and-observability (1), Azure AI Content Safety in llm-gateways-and-observability (1), Azure API Management + Azure API Center in api-management (1), Azure Data Factory (ADF) Mapping Data Flows in etl-and-elt (1), Azure Database for PostgreSQL/MySQL Flexible Server in managed-relational-databases (1), Azure Firewall WAF in web-application-firewalls (1), Azure Log Analytics Agent (MMA) in log-management (1), Azure ML Designer in ml-platforms (1), Azure SQL Database / Azure Database services (Microsoft Azure) in managed-relational-databases (1), Azure SQL Database or Azure Database for PostgreSQL in managed-relational-databases (1), Azure backup and DR services in backup-and-disaster-recovery (1), Azure/AWS-based protection in ddos-protection (1), BDRShield in backup-and-disaster-recovery (1), BackConnect (BackConnect Security, Inc.) in ddos-protection (1), Backup and DR Service in backup-and-disaster-recovery (1), Baidu Cloud in content-delivery-networks (1), Barracuda Managed XDR in extended-detection-and-response (1), Barracuda WAF-as-a-Service in web-application-firewalls (1), Barracuda WAF/WAAP in web-application-firewalls (1), Baserow in grc-platforms (1), Beacon in vulnerability-management-platforms (1), BetterAuth in customer-identity-and-access-management (1), BeyondTrust Enterprise Vulnerability Management (Legacy) in vulnerability-management-platforms (1), BeyondTrust PAM / EPM in privileged-access-management (1), BeyondTrust Privilege Management in privileged-access-management (1), BeyondTrust Retina (Retina CS / Retina Network Security Scanner) in vulnerability-management-platforms (1), Bigleaf in sd-wan (1), BitSight / CyberScore in managed-detection-and-response (1), Bitdefender Email Security in email-security (1), Bitdefender MDR in managed-detection-and-response (1), Bitdefender MXDR in extended-detection-and-response (1), Bitsight CTI in threat-intelligence-platforms (1), Bitsight-style ratings tools in third-party-risk-management (1), BlackBerry Cylance in endpoint-protection (1), Blueflood in nosql-databases (1), BootCDN in content-delivery-networks (1), Bootcss in content-delivery-networks (1), BreachDefense in penetration-testing-as-a-service (1), BreachSecureNow in security-awareness-training (1), Breacon in penetration-testing-as-a-service (1), Breyta in workflow-orchestration (1), Bright Defense Sentry in compliance-automation (1), Brightbox in cloud-hosting (1), Broadcom Layer 7 in api-management (1), Broadcom/CA SiteMinder in workforce-identity-and-sso (1), Browser-Built Password Managers (Chrome, Safari, Edge) in business-password-managers (1), BuildJet in ci-cd-platforms (1), BuiltWith in attack-surface-management (1), Business Radar in third-party-risk-management (1), CA API Gateway in api-management (1), CA Siteminder in customer-identity-and-access-management (1), CDXgen in software-composition-analysis (1), CISA Automated Shared Threat Information in threat-intelligence-platforms (1), CISA KEV catalog in threat-intelligence-platforms (1), CMDBuild in it-asset-management (1), CVETodo in vulnerability-management-platforms (1), CYFIRMA DeCYFIR in threat-intelligence-platforms (1), Canonical Landscape in patch-management (1), Carbonite Personal in backup-and-disaster-recovery (1), Carbonite Recover in backup-and-disaster-recovery (1), Centre Technologies' BDRaaS in backup-and-disaster-recovery (1), Centreon Infra Monitoring in infrastructure-monitoring (1), Cequence Security in web-application-firewalls (1), Chaos Genius in cloud-cost-management (1), ChatGPT Business with Codex in ai-coding-assistants (1), ChatGPT/GPT-4 in ai-coding-assistants (1), Check Point CloudGuard/Cloud Firewall in cloud-security-posture-management (1), Check Point Gaia/CNS in next-generation-firewalls (1), Check Point Infinity in attack-surface-management (1), Check Point Quantum/Harmony SASE in zero-trust-network-access (1), Chef 360 Platform in infrastructure-as-code (1), Chef Infra Server in infrastructure-as-code (1), Chronograf + InfluxDB in observability-platforms (1), Cirrus CI in ci-cd-platforms (1), Cisco ASA (Adaptive Security Appliance) in next-generation-firewalls (1), Cisco ASA and FTD Firewalls in next-generation-firewalls (1), Cisco Duo / Secure Access in zero-trust-network-access (1), Cisco Duo Access Gateway (Free Tier) in multi-factor-authentication (1), Cisco Kenna Security in siem-platforms (1), Cisco Meraki MX85-HW in next-generation-firewalls (1), Cisco Panoptica in cloud-native-application-protection (1), Cisco Secure Access + Meraki/SD-WAN in sase-platforms (1), Cisco Secure Access / Umbrella in sase-platforms (1), Cisco Security in security-awareness-training (1), Cisco Security Cloud – Threat Intelligence in threat-intelligence-platforms (1), Cisco Security Firewall in next-generation-firewalls (1), Cisco Umbrella/Secure Access in sase-platforms (1), Cisco – Duo + Cisco ISE (Zero Trust) in zero-trust-network-access (1), Claude Code / Claude Cowork (Anthropic) in ai-coding-assistants (1), Cloud-native firewalls (AWS/Azure native) in next-generation-firewalls (1), Cloud4U in cloud-hosting (1), CloudAtCost in cloud-hosting (1), CloudCone in cloud-hosting (1), CloudDefense.AI in cloud-native-application-protection (1), CloudDefense.AI QINA in cloud-native-application-protection (1), CloudMapper in cloud-security-posture-management (1), CloudNuro in cloud-cost-management (1), CloudSEK BeVigil in attack-surface-management (1), CloudSEK Threat Intelligence in threat-intelligence-platforms (1), CloudSEK XVigil in threat-intelligence-platforms (1), CloudServer.net in cloud-hosting (1), CloudWave in cloud-hosting (1), Cloudflare Area 1 in email-security (1), Cloudflare Pages in ci-cd-platforms (1), Cloudflare WAF + Cloudflare Bot Management in web-application-firewalls (1), Cloudflare Workflows in workflow-orchestration (1), Cloudify in infrastructure-as-code (1), Code42 in data-loss-prevention (1), Code42 Incydr in data-loss-prevention (1), Cohesive in security-awareness-training (1), Comodo in patch-management (1), CompTIA in security-awareness-training (1), Compliance Quest in compliance-automation (1), Contrast Assess in static-application-security-testing (1), ControlD in email-security (1), Copilot Workspace in ai-coding-assistants (1), Corridor in static-application-security-testing (1), CreeperCastle in cloud-hosting (1), Criminal IP ASM in attack-surface-management (1), CrocOTT in streaming-platforms (1), CrowdStrike Falcon LogScale / Next-Gen SIEM in siem-platforms (1), CrowdStrike Falcon Next\u2011Gen SIEM in siem-platforms (1), CrowdStrike Falcon Pro/Insight in endpoint-detection-and-response (1), CrowdStrike Falcon Spotlight / Exposure Management in vulnerability-management-platforms (1), CrowdStrike Falcon Spotlight / Exposure Mgmt in vulnerability-management-platforms (1), CrowdStrike Falcon X in threat-intelligence-platforms (1), CrowdStrike Threat Intel in threat-intelligence-platforms (1), CurioDB in nosql-databases (1), Cvent in streaming-platforms (1), CybSafe in security-awareness-training (1), CyberArk Conjur / Secrets Manager in secrets-management (1), CyberArk Privileged Access Security (PAS) in secrets-management (1), CyberFOX AutoElevate in privileged-access-management (1), CyberGhost in managed-detection-and-response (1), CyberGhost Password Manager in business-password-managers (1), CyberGuard360 in security-awareness-training (1), CyberMark in endpoint-detection-and-response (1), CyberStrong in grc-platforms (1), Cyclops in attack-surface-management (1), Cyolo in zero-trust-network-access (1), Cyro Host in ddos-protection (1), Cyware CTIX in threat-intelligence-platforms (1), DTEX in data-loss-prevention (1), DTonomy in soar-platforms (1), Data Infrastructure Insights in infrastructure-monitoring (1), Databricks Lakeflow in etl-and-elt (1), Datadog APM / Error Tracking in error-and-crash-monitoring (1), Datadog Agent Observability in llm-gateways-and-observability (1), Datadog Incidents in incident-management-and-on-call (1), Datto Endpoint Backup with Disaster Recovery in backup-and-disaster-recovery (1), Datto SIRIS/ALTO in backup-and-disaster-recovery (1), Datto SaaS Protection in backup-and-disaster-recovery (1), Decentralized Log Aggregation in log-management (1), Deemkay in vulnerability-management-platforms (1), Deep Lake in ml-platforms (1), DeepSCA in software-composition-analysis (1), Defined.net / Nebula-based solutions in zero-trust-network-access (1), Dell EMC PowerProtect in backup-and-disaster-recovery (1), Dell Object Storage in object-storage (1), Deloitte or EY's IGA solutions in identity-governance (1), Deming in grc-platforms (1), DenyAll in web-application-firewalls (1), Dependabot + Dependency Review in software-composition-analysis (1), DeviceLock in data-loss-prevention (1), Devolutions Hub (Free) in privileged-access-management (1), DigitalMint in threat-intelligence-platforms (1), DigitalOcean LKE in managed-kubernetes-platforms (1), Digitale in data-loss-prevention (1), Diligent ThirdPartyBond in third-party-risk-management (1), Disney+ in streaming-platforms (1), Docker Bench for Security in container-and-kubernetes-security (1), Dokku in cloud-hosting (1), Dokploy in ci-cd-platforms (1), DoubleCloud Managed Service for Apache Kafka in streaming-platforms (1), DrayTek in next-generation-firewalls (1), DreamFactory in api-management (1), Dropbox Passwords in business-password-managers (1), Druva Resilience Cloud in backup-and-disaster-recovery (1), Druva Security Cloud in backup-and-disaster-recovery (1), Duende in customer-identity-and-access-management (1), Dun & Bradstreet in third-party-risk-management (1), ELK / OpenSearch Stack in log-management (1), ESET Business Solutions in endpoint-protection (1), ESET Mail Security in email-security (1), ESET PROTECT Advanced/Complete in endpoint-protection (1), ESET Password Manager in business-password-managers (1), ESET Threat Intelligence Feed in threat-intelligence-platforms (1), ESLint (with security plugins) in static-application-security-testing (1), ESLint + Security Plugins (JavaScript) in static-application-security-testing (1), Echelon Cyber in penetration-testing-as-a-service (1), Echelon Risk + Cyber in penetration-testing-as-a-service (1), Edgescan in vulnerability-management-platforms (1), Elasticsearch with ANN in vector-databases (1), Elastic’s "Defend for Containers" (D4C) in container-and-kubernetes-security (1), Emerging Threats (ET) in threat-intelligence-platforms (1), Emerging Threats Open in threat-intelligence-platforms (1), EmergingThreats in threat-intelligence-platforms (1), Emissary in api-gateways (1), Envoy/Istio Gateway in api-gateways (1), Eventzilla in streaming-platforms (1), Everbridge in incident-management-and-on-call (1), Excel & Google Sheets in it-asset-management (1), Experian in customer-identity-and-access-management (1), Eye Security in managed-detection-and-response (1), F5 Advanced WAF & Distributed Cloud WAF in web-application-firewalls (1), F5 BIG-IP / NGINX App Protect in web-application-firewalls (1), F5 BIG-IP Advanced WAF / NGINX App Protect in web-application-firewalls (1), FIDO2/WebAuthn hardware keys in multi-factor-authentication (1), FS-ISAC in threat-intelligence-platforms (1), Fable Security in security-awareness-training (1), Falcon in attack-surface-management (1), Falcongaze SecureTower in data-loss-prevention (1), Farnsworth Intelligence in threat-intelligence-platforms (1), Fastly Compute@Edge in api-gateways (1), Feedly (Feedly Threat Intelligence) in threat-intelligence-platforms (1), Feedly Threat Intelligence in threat-intelligence-platforms (1), Feitian/EchoKey in multi-factor-authentication (1), FerretDB in nosql-databases (1), Fidelis Security in cloud-native-application-protection (1), Findomain in attack-surface-management (1), FireEye (Mandiant) – Legacy On-Premises Solutions in endpoint-detection-and-response (1), FireEye's EDR in endpoint-detection-and-response (1), Firebase Firestore / Google Cloud Datastore in nosql-databases (1), Firewalla Purple SE in next-generation-firewalls (1), Firezone in zero-trust-network-access (1), Fiverr in penetration-testing-as-a-service (1), Flokuri in cloud-cost-management (1), Flowise / OpenAI Agent Builder in workflow-orchestration (1), Foreman in patch-management (1), Foreman / Katello in patch-management (1), Fortect in endpoint-protection (1), FortiGate\u2011VM in next-generation-firewalls (1), FortiWeb / FortiWeb Cloud in web-application-firewalls (1), Fortinet FG-200/FG-100 Legacy Series in next-generation-firewalls (1), Fortinet FortiClient EMS in zero-trust-network-access (1), Fortinet FortiGate 30E / 40F in next-generation-firewalls (1), Fortinet FortiGate 40F Hardware in next-generation-firewalls (1), Fortinet FortiGate 40F/60F in next-generation-firewalls (1), Fortinet FortiGuard in threat-intelligence-platforms (1), Fortinet FortiNAC in zero-trust-network-access (1), Fortinet FortiWAF in web-application-firewalls (1), Fortinet FortiXDR in extended-detection-and-response (1), Fortinet ZTNA/FortiGate/FortiClient in zero-trust-network-access (1), Fortra Human Risk Management in security-awareness-training (1), FossID in software-composition-analysis (1), FreeIPA in multi-factor-authentication (1), FreeRADIUS in multi-factor-authentication (1), FreeScout in it-service-management (1), Freshstatus in incident-management-and-on-call (1), FutureAGI in llm-gateways-and-observability (1), G Data in endpoint-protection (1), GA4 in api-gateways (1), GCP Operations Suite in infrastructure-monitoring (1), GCP Vertex AI in llm-gateways-and-observability (1), GDS Technology – Managed Backup & Recovery for SMBs / Mid-Market in backup-and-disaster-recovery (1), GO Feature Flag in feature-flags (1), GTB Technologies in data-loss-prevention (1), Generic ISP-Managed SD-WAN in sd-wan (1), GitHub Advanced Security / dependency review in software-composition-analysis (1), GitHub Advanced Security scans in secrets-management (1), GitLab Container Scanning in container-and-kubernetes-security (1), GlitchReplay in error-and-crash-monitoring (1), Google APIs in content-delivery-networks (1), Google Authenticator with Google Workspace MFA in multi-factor-authentication (1), Google Chronicle / CSD in data-loss-prevention (1), Google Chronicle Security Operations Suite in extended-detection-and-response (1), Google Cloud AI/ML in ml-platforms (1), Google Cloud Asset Inventory + Patch Management (Beta) in patch-management (1), Google Cloud Backup & DR in backup-and-disaster-recovery (1), Google Cloud Backup and DR in backup-and-disaster-recovery (1), Google Cloud Build in ci-cd-platforms (1), Google Cloud Cost Management / FinOps hub in cloud-cost-management (1), Google Cloud Firewall in next-generation-firewalls (1), Google Cloud Mandiant Threat Intelligence (Mandiant Advantage) in threat-intelligence-platforms (1), Google Cloud Memorystore in nosql-databases (1), Google Cloud Memorystore for Redis in nosql-databases (1), Google Cloud WAF in web-application-firewalls (1), Google Titan in multi-factor-authentication (1), Google Titan keys in multi-factor-authentication (1), Google Titanium Key in multi-factor-authentication (1), Google Vertex AutoML in ml-platforms (1), Google Workforce Identity in multi-factor-authentication (1), Google Workspace Advanced Protection in email-security (1), Goose in ai-coding-assistants (1), GovReady-Q in grc-platforms (1), Government/free resources (e.g., CISA's FedVTE, NIST catalog, CDSE) in security-awareness-training (1), Grafana Cloud + Prometheus/Loki/Tempo in infrastructure-monitoring (1), Grafana Cloud / Open Source Stack in application-performance-monitoring (1), Granica in cloud-cost-management (1), Greencloud in cloud-hosting (1), Grok in ml-platforms (1), Grouper in identity-governance (1), Grove in observability-platforms (1), GuardNest in vulnerability-management-platforms (1), Guardicore in container-and-kubernetes-security (1), Gumloop in workflow-orchestration (1), HPE OpsRamp in observability-platforms (1), HUMAN Technologies in web-application-firewalls (1), Habits.io in error-and-crash-monitoring (1), Hackrate in attack-surface-management (1), Hadrian in attack-surface-management (1), Hanko in multi-factor-authentication (1), Have I Been Pwned in threat-intelligence-platforms (1), Heimdal Patch & Asset Management in patch-management (1), Heimdal Privileged Access Management in privileged-access-management (1), Hetzner Managed Databases in managed-relational-databases (1), Hideez in customer-identity-and-access-management (1), Hitachi Energy UNEM (Industrial UEM) in unified-endpoint-management (1), HiveCode in data-loss-prevention (1), HolmesGPT in incident-management-and-on-call (1), HostLiger in cloud-hosting (1), Hotmail in email-security (1), Huawei USG in next-generation-firewalls (1), HubSpot AI in ml-platforms (1), Hubilo in streaming-platforms (1), Hushmail in email-security (1), Hypertable in nosql-databases (1), Hypertune in feature-flags (1), IBM AppScan Source in static-application-security-testing (1), IBM Cloud Databases for PostgreSQL in managed-relational-databases (1), IBM Netezza in data-warehouses (1), IBM Security Identity and Access Manager (SAM) in privileged-access-management (1), IBM X-Force Exchange & Threat Intelligence in threat-intelligence-platforms (1), IBM/WebSphere in workflow-orchestration (1), IDScan in workforce-identity-and-sso (1), IDScan.net in customer-identity-and-access-management (1), IDnow.io in customer-identity-and-access-management (1), IONOS Cloud Backup in backup-and-disaster-recovery (1), ISP-Bundled SD-WAN (e.g., Carrier Proprietary Solutions) in sd-wan (1), ITRS Analytics API Gateway in api-gateways (1), Imperva Cloud WAF / Gateway in web-application-firewalls (1), Imperva Incapsula in next-generation-firewalls (1), Imperva WAF / Application Security in web-application-firewalls (1), Informatica CDI in etl-and-elt (1), Informatica PowerCenter / Cloud Data Integration (CDI) in etl-and-elt (1), Infosec Skills in security-awareness-training (1), Infraon in it-asset-management (1), Inmotion Hosting in cloud-hosting (1), Inspectlet in error-and-crash-monitoring (1), Integrately in api-management (1), IntelOwl in threat-intelligence-platforms (1), IntelliBreach in attack-surface-management (1), Intrigue in attack-surface-management (1), Iru Vulnerability Management in vulnerability-management-platforms (1), Iru Workforce Identity in workforce-identity-and-sso (1), Ivanti / Heat / Shavlik (Legacy Leaders) in patch-management (1), Ivanti Endpoint Manager (EPM) / Connect Secure / CSA in patch-management (1), Ivanti Endpoint Manager / Ivanti Endpoint Manager Mobile (EPMM) in unified-endpoint-management (1), Ivanti Neurons for MDM / Autonomous Endpoint Management in unified-endpoint-management (1), Ivanti ZTNA in zero-trust-network-access (1), JFrog Artifactory (with Xray for security) in container-and-kubernetes-security (1), JW Player in streaming-platforms (1), JWP Connatix in streaming-platforms (1), Jamf Protect Profile in endpoint-detection-and-response (1), JanusGraph in nosql-databases (1), Jericho Security in security-awareness-training (1), Jira Service Management / Opsgenie-style incident management in incident-management-and-on-call (1), Josys in identity-governance (1), Juniper Networks NGFW in next-generation-firewalls (1), Juniper Session Smart Router (SSR) on Mist in sd-wan (1), K7 in endpoint-protection (1), K7/NetSecurity in endpoint-protection (1), KELA Cyber Intelligence Platform in threat-intelligence-platforms (1), Kadence in etl-and-elt (1), Kali Linux in penetration-testing-as-a-service (1), Kanidm in multi-factor-authentication (1), Kaseya 365 in remote-monitoring-and-management (1), Kaseya Ecosystem (VSA / Datto RMM) in patch-management (1), Kaseya MDR in managed-detection-and-response (1), Kaseya SIEM in siem-platforms (1), Kaseya's Compliance Manager in compliance-automation (1), Keepnet Labs in security-awareness-training (1), Kforce in penetration-testing-as-a-service (1), Kick in streaming-platforms (1), Kiro.dev in ai-coding-assistants (1), Kite in ai-coding-assistants (1), Kitecyber Data Shield in data-loss-prevention (1), Knative eventing-rabbitmq in streaming-platforms (1), Knock in attack-surface-management (1), Koi Security in threat-intelligence-platforms (1), Kubernetes Engine by DigitalOcean / Linode in managed-kubernetes-platforms (1), Kyverno/OPA-Gatekeeper in container-and-kubernetes-security (1), LLDAP in multi-factor-authentication (1), LMDeploy in llm-gateways-and-observability (1), Landscape in patch-management (1), LangChain's LLM Power in llm-gateways-and-observability (1), Latency.ai in llm-gateways-and-observability (1), Layer7 API Management (now Broadcom) in api-management (1), Le Chat in ml-platforms (1), Legacy Cisco / AppDynamics in observability-platforms (1), LevelBlue Labs Open Threat Exchange (OTX) in threat-intelligence-platforms (1), LevelDB in nosql-databases (1), Leviia in object-storage (1), Lightstreamer in streaming-platforms (1), Liminal in llm-gateways-and-observability (1), Lindy in workflow-orchestration (1), LinkedIn in streaming-platforms (1), Linode/ Akamai Cloud Compute in managed-kubernetes-platforms (1), Liquid Web / Nexcess in cloud-hosting (1), LiquidWeb in ddos-protection (1), LiteSpeed in content-delivery-networks (1), LiveRamp in customer-identity-and-access-management (1), Llama 3/Coder local in ai-coding-assistants (1), Lockpath in third-party-risk-management (1), Log4j 1.x in log-management (1), LogMeIn in remote-monitoring-and-management (1), Logging Made Easy (LME) in log-management (1), LogicMonitor LM APM Synthetics in application-performance-monitoring (1), Logwise in error-and-crash-monitoring (1), Lokad in privileged-access-management (1), Lookout in data-loss-prevention (1), Lookout DLP in data-loss-prevention (1), Lumen Managed SASE in sase-platforms (1), Lunary in ml-platforms (1), Luta Security in penetration-testing-as-a-service (1), MISP Community in threat-intelligence-platforms (1), MITRE ATT&CK in threat-intelligence-platforms (1), Malwarebytes Endpoint Protection / EDR in endpoint-protection (1), ManageEngine (Zoho) PAM360 / Password Manager Pro / Access Manager Plus in privileged-access-management (1), ManageEngine (Zoho) – Patch Manager Plus / Desktop Central / ADSelfService Plus in patch-management (1), ManageEngine Applications Manager / OpManager Nexus in application-performance-monitoring (1), ManageEngine AssetExplorer / ServiceDesk Plus in it-asset-management (1), ManageEngine Identity360 in identity-governance (1), ManageEngine Privilege Manager in privileged-access-management (1), ManageEngine RMM+ in remote-monitoring-and-management (1), Managed Airflow/Astronomer in workflow-orchestration (1), Managed Service for Apache Kafka in streaming-platforms (1), MariaDB on DigitalOcean in managed-relational-databases (1), Marketful in streaming-platforms (1), Marketing Case Study in data-loss-prevention (1), Material in email-security (1), Matillion Data Orchestrator in etl-and-elt (1), McAfee (Treleken) Total Data Protection in data-loss-prevention (1), McAfee Endpoint Security / Trellix in endpoint-protection (1), McAfee Enterprise Security Manager in siem-platforms (1), McAfee Total Protection in email-security (1), McAfee/Touchstone in sase-platforms (1), Mch Strategic Data in data-warehouses (1), MemcacheDB in nosql-databases (1), Metamorfose in security-awareness-training (1), Microscanner in container-and-kubernetes-security (1), Microsoft 365 EOP in email-security (1), Microsoft 365 Native Backup in backup-and-disaster-recovery (1), Microsoft Access (Jet Engine) in etl-and-elt (1), Microsoft Azure Application Gateway (WAF) in web-application-firewalls (1), Microsoft Azure Backup & Site Recovery in backup-and-disaster-recovery (1), Microsoft Azure Backup/Arc in backup-and-disaster-recovery (1), Microsoft Azure Firewall in next-generation-firewalls (1), Microsoft CodePlex in source-control-hosting (1), Microsoft Copilot for Security (via Entra / Intune) in sase-platforms (1), Microsoft Defender XDR + a managed service partner in managed-detection-and-response (1), Microsoft Defender ecosystem-based training in security-awareness-training (1), Microsoft Defender for Cloud Apps in cloud-native-application-protection (1), Microsoft Defender for Cloud Apps / Endpoints in managed-detection-and-response (1), Microsoft Defender for Endpoint Plan 1/2 in endpoint-protection (1), Microsoft Defender for Identity/PAM in privileged-access-management (1), Microsoft Entitlement Management in identity-governance (1), Microsoft Entra ID (formerly Azure AD) Conditional Access in zero-trust-network-access (1), Microsoft Identity Manager (MIM) in identity-governance (1), Microsoft Outlook in email-security (1), Microsoft Purview Information Protection (MIP) in data-loss-prevention (1), Microsoft ecosystem in patch-management (1), Microsoft security solutions in patch-management (1), Microsoft – Azure AD Conditional Access + Microsoft Defender for Cloud Apps in zero-trust-network-access (1), Microsoft-native MDR in managed-detection-and-response (1), Microsoft-native intelligence in threat-intelligence-platforms (1), Mimir in observability-platforms (1), MindsDB in ml-platforms (1), Minimus in container-and-kubernetes-security (1), ModSecurity with OWASP Core Rule Set in web-application-firewalls (1), MoreSec CNPP in cloud-native-application-protection (1), Moxo in workflow-orchestration (1), MyComplianceOffice in compliance-automation (1), MyDLP Community Edition in data-loss-prevention (1), Myra Security in ddos-protection (1), NAVEX One in grc-platforms (1), NGINX Plus / OpenResty in api-gateways (1), NGINX+/NGINX Gateway Fabric in api-gateways (1), NGINX-based gateways / ingress controllers in api-gateways (1), NIST in security-awareness-training (1), NVIDIA's NeMo in ml-platforms (1), NetFoundry in zero-trust-network-access (1), NetLock RMM in remote-monitoring-and-management (1), NetSparker in attack-surface-management (1), NetSupport in remote-monitoring-and-management (1), Netcup in cloud-hosting (1), Netflix in streaming-platforms (1), Netscreen in web-application-firewalls (1), Netskope Security Cloud in data-loss-prevention (1), Network Solutions in cloud-hosting (1), Next DLP in data-loss-prevention (1), NexusVM in cloud-hosting (1), Node-RED in workflow-orchestration (1), NodeJsScan in static-application-security-testing (1), Norton Home in endpoint-protection (1), OCI (Oracle Cloud) MySQL HeatWave in managed-relational-databases (1), OCS Inventory in it-asset-management (1), OPSI (Open PC Server Integration) in patch-management (1), OSDN in source-control-hosting (1), OVHcloud CDN in content-delivery-networks (1), OVHcloud Object Storage in object-storage (1), Observium in infrastructure-monitoring (1), Obsidian Ridge in managed-detection-and-response (1), Octelium in zero-trust-network-access (1), Older Ivanti / Landesk / HEAT Suites in it-service-management (1), Onapsis in privileged-access-management (1), One Identity Defender in multi-factor-authentication (1), Open Policy Agent/Gatekeeper in container-and-kubernetes-security (1), Open XDR in extended-detection-and-response (1), Open-Source Tools in attack-surface-management (1), Open-source (Prometheus/Grafana/OpenTelemetry/Jaeger) in application-performance-monitoring (1), OpenCNAPP in cloud-native-application-protection (1), OpenClaw / ClawHub in ai-coding-assistants (1), OpenClaw/Claude Code in ai-coding-assistants (1), OpenDNS in data-loss-prevention (1), OpenSCAP + Ansible in patch-management (1), OpenSOAR in soar-platforms (1), OpenTAXII in threat-intelligence-platforms (1), OpenTelemetry + Backend (e.g., Tempo, Cortex, Mimir) in observability-platforms (1), OpenWrt / VyOS with SD‑WAN add‑ons in sd-wan (1), Openlane in grc-platforms (1), Opik in llm-gateways-and-observability (1), Opper in llm-gateways-and-observability (1), OptScale (by Hystax) in cloud-cost-management (1), Oracle API Management in api-management (1), Oracle Cloud Database services in managed-relational-databases (1), Oracle Cloud Database@OCI in managed-relational-databases (1), Oracle Cloud Free Tier (Autonomous Database) in managed-relational-databases (1), Oracle Cloud Infrastructure (OCI) Analytic Warehouse in data-warehouses (1), Oracle Cloud Infrastructure (OCI) Database in managed-relational-databases (1), Oracle Coherence in nosql-databases (1), Oracle Forms / Reports (for Data Migration) in etl-and-elt (1), Oracle GRC in grc-platforms (1), Oracle Internal Controls Manager in grc-platforms (1), Orkes Conductor in workflow-orchestration (1), Ory in workforce-identity-and-sso (1), Outlook in email-security (1), Outlook/Microsoft in email-security (1), P0 Security in privileged-access-management (1), PC Protect in endpoint-protection (1), PDQ Deploy & Connect in patch-management (1), PHPStan in static-application-security-testing (1), PTV Optima in api-gateways (1), Paisley in grc-platforms (1), Palo Alto Cloud NGFW in next-generation-firewalls (1), Palo Alto Networks PA-1400 Series or VM-Series in next-generation-firewalls (1), Palo Alto Networks Prisma Cloud WAF in web-application-firewalls (1), Palo Alto Networks Security NGFW in next-generation-firewalls (1), Pandora FMS in application-performance-monitoring (1), Panoptic Scans in vulnerability-management-platforms (1), Paragon Backup & Recovery in backup-and-disaster-recovery (1), Parasoft C/C++test in static-application-security-testing (1), PassSecurium in business-password-managers (1), Patch My PC Home Updater in patch-management (1), PatchMon CE in patch-management (1), Patrowl in attack-surface-management (1), Peliqan in etl-and-elt (1), Penti in penetration-testing-as-a-service (1), Peplink Balance series in sd-wan (1), PingOne for Workforce / PingOne Advanced Identity Cloud in workforce-identity-and-sso (1), Pinot in data-warehouses (1), Pistachio in security-awareness-training (1), Play2Go Cloud in cloud-hosting (1), Plexicus in software-composition-analysis (1), Ploi in managed-relational-databases (1), PointFive in cloud-cost-management (1), Portkey / Prisma AIRS AI Gateway in llm-gateways-and-observability (1), PouchDB in nosql-databases (1), Prewave in third-party-risk-management (1), Prisma Cloud / Prisma AIRS in container-and-kubernetes-security (1), Proofpoint Threat Protection in email-security (1), Proxmox in backup-and-disaster-recovery (1), Pulp in patch-management (1), PulseOn in remote-monitoring-and-management (1), Pure.cloud in cloud-cost-management (1), Push-based MFA in multi-factor-authentication (1), PyTorch/TensorFlow + local setup in ml-platforms (1), QiAnXin in threat-intelligence-platforms (1), Qualys TotalCloud in cloud-native-application-protection (1), Qualys VMDR/Exposure Management in vulnerability-management-platforms (1), Quest Enterprise Backup and Disaster Recovery in backup-and-disaster-recovery (1), QuickSDWAN in sd-wan (1), QuickSight in cloud-cost-management (1), RAGFlow in llm-gateways-and-observability (1), RIPS in static-application-security-testing (1), RStudio (Open Source) in ml-platforms (1), Radware Cloud WAF / Alteon in web-application-firewalls (1), Rancher Kubernetes Engine v1 (RKE1) in managed-kubernetes-platforms (1), Rapid7 InsightVM + EASM in attack-surface-management (1), Rauthy in multi-factor-authentication (1), Reblaze in web-application-firewalls (1), Red Sift in email-security (1), RedTeam.io in attack-surface-management (1), RedisGraph in nosql-databases (1), Reflectiz in attack-surface-management (1), Relay.app in workflow-orchestration (1), Relias in security-awareness-training (1), Replit Agent / browser builders in ai-coding-assistants (1), Resilinc in third-party-risk-management (1), Revolut (fintech-linked identity tools) in customer-identity-and-access-management (1), Right-Hand Cybersecurity in security-awareness-training (1), RoboShadow in vulnerability-management-platforms (1), RocksDB in nosql-databases (1), Rocky Linux in patch-management (1), Roku in streaming-platforms (1), Rubrik Cyber Resilience Platform in backup-and-disaster-recovery (1), SAIGlobal in compliance-automation (1), SANS free resources in security-awareness-training (1), SAP IDM in identity-governance (1), SAP Legacy APM Products in application-performance-monitoring (1), SMS-based MFA in multi-factor-authentication (1), SOARCA in soar-platforms (1), SOPS + GitOps in secrets-management (1), SQLMesh in etl-and-elt (1), SW in siem-platforms (1), Safe Security in third-party-risk-management (1), SafetyCulture in incident-management-and-on-call (1), SailPoint Privileged Access in privileged-access-management (1), Salesforce Compliance Cloud in grc-platforms (1), Salesloft Drift in email-security (1), SambaNova in llm-gateways-and-observability (1), Samsung in unified-endpoint-management (1), Savvytech API Gateway in api-management (1), Scan4all in static-application-security-testing (1), Scanguard in endpoint-protection (1), Science Logic in observability-platforms (1), Scribe in log-management (1), Seagate in object-storage (1), SecPod Saner Cloud CSPM in cloud-security-posture-management (1), SecureCodeWarrior in security-awareness-training (1), Secureworks Taegis XDR in extended-detection-and-response (1), Segura in privileged-access-management (1), Seldon Core in ml-platforms (1), Sematext Logs in log-management (1), Sentinel One in endpoint-protection (1), Sequel.io in streaming-platforms (1), Serverless Framework in infrastructure-as-code (1), ServiceDesk Plus by ManageEngine in it-asset-management (1), ServiceNow Agent Fabric in workflow-orchestration (1), ServiceNow Automation Engine in workflow-orchestration (1), ServiceNow SAM/ITAM in it-asset-management (1), Servicenow Now Perform (formerly Spoke) in it-service-management (1), Shadow Daemon in web-application-firewalls (1), SharePoint 2013 / Designer Workflows in workflow-orchestration (1), SharePoint 2013 Workflow in workflow-orchestration (1), Shavlik/NinjaOne in patch-management (1), Shelf in it-asset-management (1), Shift5 (formerly ThreatQuotient) in threat-intelligence-platforms (1), Shuffle + IRIS in soar-platforms (1), SimpleBackups in backup-and-disaster-recovery (1), Skiff Mail in email-security (1), Skyhigh / IronPort (Cisco) in email-security (1), Sling in etl-and-elt (1), Snowflake ML / Cortex AI in ml-platforms (1), Soffid in identity-governance (1), SoftExpert GRC in grc-platforms (1), SolarWinds APM in application-performance-monitoring (1), SolarWinds Applications Manager in application-performance-monitoring (1), SolarWinds Log Analyzer in log-management (1), SolarWinds Observability / NPM in infrastructure-monitoring (1), SolarWinds Server & Application Monitor in infrastructure-monitoring (1), SolarWinds Servicenow / SolarWinds Service Desk in incident-management-and-on-call (1), SoloKeys in multi-factor-authentication (1), SonicWall TZ370 / TZ470 in next-generation-firewalls (1), Sophos Firewall XGS 87 in next-generation-firewalls (1), Sophos Intercept X Firewall in next-generation-firewalls (1), Sophos Security Awareness in security-awareness-training (1), Sourcery in third-party-risk-management (1), Spark Streaming in streaming-platforms (1), Spectral Ops in penetration-testing-as-a-service (1), SpiderOak One in backup-and-disaster-recovery (1), Sploitus in attack-surface-management (1), Splunk IT Service Intelligence (ITSI) in incident-management-and-on-call (1), Splunk On-Demand in application-performance-monitoring (1), Splunk Phantom/XSCAL in soar-platforms (1), Sslabs in container-and-kubernetes-security (1), StackPointCloud in managed-kubernetes-platforms (1), Staticfile in content-delivery-networks (1), Steampipe/Powerpipe in cloud-security-posture-management (1), StorageGuard in vulnerability-management-platforms (1), StormWall in ddos-protection (1), Streamlabs in streaming-platforms (1), Sublist3r in attack-surface-management (1), Sucuri Basic Platform in web-application-firewalls (1), Sucuri Firewall in web-application-firewalls (1), Sumo Logic Cloud SIEM in siem-platforms (1), SunGard in privileged-access-management (1), Supaship in feature-flags (1), Supermetrics in api-management (1), SureDecks in third-party-risk-management (1), SurferCloud in cloud-hosting (1), Swetrix in feature-flags (1), Sygnia in threat-intelligence-platforms (1), Symantec/CA Identity Portal 14.4 in identity-governance (1), Symantec/McAfee legacy products in endpoint-protection (1), SymphonyAI in it-service-management (1), Synology DiskStation in backup-and-disaster-recovery (1), Synology/QNAP NAS in backup-and-disaster-recovery (1), Syslog-ng in log-management (1), TCM Security in penetration-testing-as-a-service (1), TP-Link Omada in sd-wan (1), Tabby in ai-coding-assistants (1), Tabular in data-warehouses (1), Taegis XDR in extended-detection-and-response (1), Talix in backup-and-disaster-recovery (1), Teltonica Networks in sd-wan (1), Teltonika in sd-wan (1), Tembo in managed-relational-databases (1), Temporality in workflow-orchestration (1), Tenable Legacy Container Security's SCA feature in software-composition-analysis (1), Tenable Nessus / Tenable.io / Vulnerability Management in vulnerability-management-platforms (1), Tenable Nessus/SecurityCenter in vulnerability-management-platforms (1), TensorFlow + Keras in ml-platforms (1), TensorFlow Probability in ml-platforms (1), Terranova Security in security-awareness-training (1), The Open Source Stack (Prometheus + Grafana + Loki + Tempo) in observability-platforms (1), The ProjectDiscovery Open-Source Suite (Subfinder + httpx + Nuclei) in attack-surface-management (1), TheHive + Cortex Analyzer in soar-platforms (1), Thoropass Pentesting in penetration-testing-as-a-service (1), ThreatConnect Community (Free) in threat-intelligence-platforms (1), ThreatConnect Intelligence Hub in threat-intelligence-platforms (1), ThreatQ in threat-intelligence-platforms (1), ThreatSearch by CyberSilo in threat-intelligence-platforms (1), Thycotic+Centrify in privileged-access-management (1), TikTok in streaming-platforms (1), Titan in multi-factor-authentication (1), Titan Keys in multi-factor-authentication (1), ToolRadar in application-performance-monitoring (1), TotalAV in endpoint-protection (1), Tracee in container-and-kubernetes-security (1), Trend Micro Email Security in email-security (1), TrnDigital in backup-and-disaster-recovery (1), Truesec in identity-governance (1), TrustedSite in attack-surface-management (1), Trustmi in email-security (1), Tunic/Secure Link in zero-trust-network-access (1), Turbo360 in cloud-cost-management (1), Tving in streaming-platforms (1), Ubiquiti EdgeRouter SD‑WAN in sd-wan (1), Ubiquiti EdgeSwitch/Firewall in next-generation-firewalls (1), Ubuntu Server in patch-management (1), UltraAV in endpoint-protection (1), Unravel in cloud-cost-management (1), VComply in grc-platforms (1), VIDIZMO EnterpriseTube in streaming-platforms (1), VMRay in threat-intelligence-platforms (1), VMware NSX (VeloCloud) in sd-wan (1), Vade Secure in email-security (1), Varonis Data Security Platform in data-loss-prevention (1), Vasco in multi-factor-authentication (1), Veeam Data Platform 12.2 in backup-and-disaster-recovery (1), Veles in web-application-firewalls (1), Vendor A/B (AV-Comparatives EPR 2024 anonymized) in endpoint-protection (1), VendorCheck in third-party-risk-management (1), Venerable in third-party-risk-management (1), Veriff in customer-identity-and-access-management (1), Veritas Alta Data Protection 10.4 in backup-and-disaster-recovery (1), Vibe OnCall in incident-management-and-on-call (1), Vienna in identity-governance (1), VirtEngine in cloud-cost-management (1), Virtual PRO in streaming-platforms (1), VirusTotal Community API in threat-intelligence-platforms (1), Voxility in ddos-protection (1), Vuls in vulnerability-management-platforms (1), Vumetric in penetration-testing-as-a-service (1), VyOS in sd-wan (1), VyOS / OPNsense in sd-wan (1), WALLIX Bastion in privileged-access-management (1), Wallarm WAF in web-application-firewalls (1), Wappalyzer (fork) in attack-surface-management (1), WardenAI in compliance-automation (1), Warpgate in privileged-access-management (1), Web Designer / legacy ASP.NET IGA in identity-governance (1), Webex Events in streaming-platforms (1), Webflow CDN in content-delivery-networks (1), Websense in data-loss-prevention (1), White Knight Labs in penetration-testing-as-a-service (1), Windows 11 Pro in patch-management (1), Windows Backup in backup-and-disaster-recovery (1), Windows Defender standalone in email-security (1), Windows Server in patch-management (1), Windsurf / Devin-style agents in ai-coding-assistants (1), Wiz Code in software-composition-analysis (1), WorkOS Vault in secrets-management (1), XGBoost / LightGBM / CatBoost in ml-platforms (1), YARP (Yet Another Reverse Proxy) in api-gateways (1), Yahoo Mail/AOL in email-security (1), Yeti in threat-intelligence-platforms (1), Zapier/Temenos in workflow-orchestration (1), Zecurium (Zycada) in attack-surface-management (1), Zilla in identity-governance (1), Zoho Analytics in ml-platforms (1), Zoho Assist in it-asset-management (1), ZoomInfo in ml-platforms (1), Zscaler ZIA/ZPA in sase-platforms (1), Zuplo AI Gateway in llm-gateways-and-observability (1), bspeka/Attaxion Starter in attack-surface-management (1), cron in workflow-orchestration (1), eSentire Atlas in extended-detection-and-response (1), eSentire Managed XDR in extended-detection-and-response (1), etcd in nosql-databases (1), iCloud in backup-and-disaster-recovery (1), iCloud Mail in email-security (1), incident-bot in incident-management-and-on-call (1), mSecure in business-password-managers (1), miniOrange DLP in data-loss-prevention (1), native Microsoft solutions in backup-and-disaster-recovery (1), npm audit / pip‑audit in software-composition-analysis (1), older Oracle IAM suites in workforce-identity-and-sso (1), transcrypt in secrets-management (1), watchTowr in attack-surface-management (1)

Category-scoped resolutions, 2145 labels. A bare vendor name was read as that vendor's product for the asked category, which assigns specificity the model did not write; each one is listed so the assumption is visible:

Datadog in log-management read as Datadog Log Management (47), Mimecast in email-security read as Mimecast Email Security (40), Arctic Wolf in managed-detection-and-response read as Arctic Wolf Managed Detection and Response (37), Snyk in software-composition-analysis read as Snyk Open Source (37), Proofpoint in email-security read as Proofpoint Email Protection (34), Zscaler in sase-platforms read as Zscaler Zero Trust Exchange (33), Huntress in managed-detection-and-response read as Huntress Managed EDR (32), Kong in api-management read as Kong Gateway (32), Saviynt in identity-governance read as Saviynt Enterprise Identity Cloud (32), AWS in cloud-hosting read as Amazon Web Services (31), Grafana Cloud in observability-platforms read as Grafana (31), OneTrust in third-party-risk-management read as OneTrust Third-Party Risk Management (26), New Relic in log-management read as New Relic Logs (25), Checkmarx in static-application-security-testing read as Checkmarx One (24), Keeper in business-password-managers read as Keeper Security (24), Attaxion in attack-surface-management read as Attaxion (21), Censys in attack-surface-management read as Censys ASM (20), Netskope in sase-platforms read as Netskope One (20), Proofpoint in security-awareness-training read as Proofpoint ZenGuide (20), SentinelOne Singularity in endpoint-detection-and-response read as SentinelOne Singularity (20), Forcepoint in data-loss-prevention read as Forcepoint DLP (19), Kong in api-gateways read as Kong Gateway (19), SentinelOne in endpoint-detection-and-response read as SentinelOne Singularity (19), Fortinet in sd-wan read as Fortinet Secure SD-WAN (18), Amazon Kinesis in streaming-platforms read as Amazon Kinesis Data Streams (17), Barracuda in email-security read as Barracuda Email Protection (17), MongoDB Atlas in nosql-databases read as MongoDB (17), Akamai in ddos-protection read as Akamai Prolexic (16), Cato Networks in sd-wan read as Cato Networks (16), CrowdStrike in extended-detection-and-response read as CrowdStrike Falcon (16), Microsoft Purview in data-loss-prevention read as Microsoft Purview DLP (15), Netskope in data-loss-prevention read as Netskope DLP (15), Versa Networks in sd-wan read as Versa Secure SD-WAN (15), Aiven in streaming-platforms read as Aiven for Apache Kafka (14), MuleSoft in api-management read as MuleSoft Anypoint Platform (14), Palo Alto Cortex XSOAR in soar-platforms read as Cortex XSOAR (14), BMC Helix in it-service-management read as BMC Helix ITSM (13), Bitsight in attack-surface-management read as Bitsight (13), Linode (Akamai) in cloud-hosting read as Akamai Connected Cloud (13), Palo Alto Networks Cortex XSOAR in soar-platforms read as Cortex XSOAR (13), ServiceNow in it-asset-management read as ServiceNow IT Asset Management (13), Aqua in container-and-kubernetes-security read as Aqua Security (12), Azure Blob in object-storage read as Azure Blob Storage (12), Grafana Cloud in infrastructure-monitoring read as Grafana (12), Keeper Business in business-password-managers read as Keeper Security (12), Rapid7 in managed-detection-and-response read as Rapid7 MDR (12), Cisco Meraki in sd-wan read as Cisco Meraki SD-WAN (11), Linode in cloud-hosting read as Akamai Connected Cloud (11), SentinelOne in extended-detection-and-response read as SentinelOne Singularity (11), Astronomer in workflow-orchestration read as Astronomer Astro (10), Cato Networks SASE Cloud in sase-platforms read as Cato SASE Cloud (10), CyberArk in workforce-identity-and-sso read as CyberArk Identity (10), Omada in identity-governance read as Omada Identity (10), Proofpoint Essentials in email-security read as Proofpoint Email Protection (10), SentinelOne in managed-detection-and-response read as SentinelOne Singularity MDR (10), WSO2 in api-management read as WSO2 API Manager (10), Arctic Wolf in security-awareness-training read as Arctic Wolf Managed Security Awareness (9), Bitdefender in endpoint-detection-and-response read as Bitdefender GravityZone (9), Cloudflare in sase-platforms read as Cloudflare One (9), Fortinet in sase-platforms read as Fortinet FortiSASE (9), Fortinet (FortiSASE) in sase-platforms read as Fortinet FortiSASE (9), GitLab CI in ci-cd-platforms read as GitLab CI/CD (9), Lacework in cloud-native-application-protection read as FortiCNAPP (9), MuleSoft in api-gateways read as MuleSoft Anypoint Platform (9), Elastic in log-management read as Elastic Stack (8), Flexera in cloud-cost-management read as Flexera One (8), Harness in cloud-cost-management read as Harness Cloud Cost Management (8), Huntress in endpoint-detection-and-response read as Huntress Managed EDR (8), Nightfall in data-loss-prevention read as Nightfall AI (8), One Identity in identity-governance read as One Identity Manager (8), Palo Alto Cortex XDR in endpoint-detection-and-response read as Palo Alto Networks Cortex XDR (8), Palo Alto Networks (Prisma SASE) in sase-platforms read as Palo Alto Networks Prisma SASE (8), Sonatype in software-composition-analysis read as Sonatype Lifecycle (8), VMware VeloCloud in sd-wan read as VMware VeloCloud SD-WAN (8), Versa in sd-wan read as Versa Secure SD-WAN (8), 42Gears in unified-endpoint-management read as 42Gears SureMDM (7), Aikido in static-application-security-testing read as Aikido Security (7), Azure Synapse in data-warehouses read as Azure Synapse Analytics (7), DigitalOcean in managed-relational-databases read as DigitalOcean Managed Databases (7), Hexnode in unified-endpoint-management read as Hexnode UEM (7), Lacework in cloud-security-posture-management read as Lacework FortiCNAPP (7), Palo Alto Networks in sd-wan read as Palo Alto Networks Prisma SD-WAN (7), Tenable in cloud-security-posture-management read as Tenable Cloud Security (7), Trend Micro Vision One in endpoint-detection-and-response read as Trend Micro (7), AWS (Amazon Web Services) in cloud-hosting read as Amazon Web Services (6), Abnormal in email-security read as Abnormal AI (6), AlloyDB in managed-relational-databases read as AlloyDB for PostgreSQL (6), Azure SQL in managed-relational-databases read as Azure SQL Database (6), D3 Security in soar-platforms read as D3 Security Smart SOAR (6), DigitalOcean in managed-kubernetes-platforms read as DigitalOcean Kubernetes (6), InvGate in it-asset-management read as InvGate Asset Management (6), Ivanti in it-asset-management read as Ivanti Neurons for ITAM (6), Mend in software-composition-analysis read as Mend.io (6), Mend (formerly WhiteSource) in software-composition-analysis read as Mend.io (6), Mimecast in security-awareness-training read as Mimecast Engage (6), Omnissa (formerly VMware Workspace ONE) in unified-endpoint-management read as Omnissa Workspace ONE (6), Proofpoint in data-loss-prevention read as Proofpoint Enterprise DLP (6), Render in managed-relational-databases read as Render Postgres (6), Securden in privileged-access-management read as Securden Unified PAM (6), ServiceNow in grc-platforms read as ServiceNow Integrated Risk Management (6), Symantec in data-loss-prevention read as Symantec Data Loss Prevention (6), Trellix in extended-detection-and-response read as Trellix XDR (6), UpGuard in attack-surface-management read as UpGuard BreachSight (6), Vultr in managed-kubernetes-platforms read as Vultr Kubernetes Engine (6), Astra in penetration-testing-as-a-service read as Astra Security (5), Broadcom (VMware) in sd-wan read as VMware VeloCloud SD-WAN (5), Check Point in zero-trust-network-access read as Check Point Harmony SASE (5), CrowdStrike Falcon Insight XDR in endpoint-detection-and-response read as CrowdStrike Falcon Insight (5), Datto in remote-monitoring-and-management read as Datto RMM (5), Elastic Cloud in log-management read as Elastic Stack (5), Flexera in it-asset-management read as Flexera One (5), GitLab in ci-cd-platforms read as GitLab CI/CD (5), Hevo in etl-and-elt read as Hevo Data (5), Kong Enterprise in api-management read as Kong Gateway (5), Microsoft Entra in workforce-identity-and-sso read as Microsoft Entra ID (5), Sophos in endpoint-detection-and-response read as Sophos Intercept X (5), Trend Micro in extended-detection-and-response read as Trend Vision One (5), ARCON in privileged-access-management read as ARCON PAM (4), Aikido in container-and-kubernetes-security read as Aikido Security (4), Amazon Q in ai-coding-assistants read as Amazon Q Developer (4), Aqua in cloud-native-application-protection read as Aqua Security (4), BMC Helix in it-asset-management read as BMC Helix ITAM (4), BitSight in attack-surface-management read as Bitsight (4), Carbon Black in endpoint-detection-and-response read as VMware Carbon Black (4), Cisco in extended-detection-and-response read as Cisco XDR (4), Diligent in third-party-risk-management read as Diligent One (4), GitLab Ultimate in static-application-security-testing read as GitLab SAST (4), Google SecOps in soar-platforms read as Google Security Operations SOAR (4), Huntress in extended-detection-and-response read as Huntress Managed EDR (4), Keeper Security in privileged-access-management read as KeeperPAM (4), Keeper Security (KeeperPAM) in privileged-access-management read as KeeperPAM (4), Kong in llm-gateways-and-observability read as Kong AI Gateway (4), Kong (Konnect) in api-management read as Kong Gateway (4), Linode in managed-relational-databases read as Linode Managed Databases (4), Linode in object-storage read as Linode Object Storage (4), MongoDB in vector-databases read as MongoDB Atlas Vector Search (4), Omnissa (Workspace ONE) in unified-endpoint-management read as Omnissa Workspace ONE (4), Oracle Cloud in cloud-hosting read as Oracle Cloud Infrastructure (4), PDQ Deploy in patch-management read as PDQ Deploy & Inventory (4), Palo Alto in sd-wan read as Palo Alto Networks Prisma SD-WAN (4), Palo Alto Networks in sase-platforms read as Palo Alto Networks Prisma SASE (4), Palo Alto Prisma in sd-wan read as Palo Alto Networks Prisma SD-WAN (4), Scaleway in managed-kubernetes-platforms read as Scaleway Kapsule (4), SentinelOne in cloud-native-application-protection read as SentinelOne Singularity Cloud Security (4), Sophos in email-security read as Sophos Email (4), Sophos in managed-detection-and-response read as Sophos MDR (4), Spiceworks in it-service-management read as Spiceworks Cloud Help Desk (4), ThreatDown in endpoint-detection-and-response read as ThreatDown EDR (4), UpCloud in managed-kubernetes-platforms read as UpCloud Managed Kubernetes (4), AWS CloudWatch in log-management read as Amazon CloudWatch Logs (3), Aikido in software-composition-analysis read as Aikido Security (3), Azure in object-storage read as Azure Blob Storage (3), Azure DDoS in ddos-protection read as Azure DDoS Protection (3), Backblaze in object-storage read as Backblaze B2 (3), Bitwarden in secrets-management read as Bitwarden Secrets Manager (3), Check Point in sase-platforms read as Check Point Harmony SASE (3), Copilot in ai-coding-assistants read as GitHub Copilot (3), CrowdStrike Falcon in cloud-native-application-protection read as CrowdStrike Falcon Cloud Security (3), CrowdStrike Falcon Go in endpoint-detection-and-response read as CrowdStrike Falcon (3), Datadog in container-and-kubernetes-security read as Datadog Cloud Security Management (3), Diligent in grc-platforms read as Diligent One (3), ELK in log-management read as Elastic Stack (3), ELK Stack in log-management read as Elastic Stack (3), ELK Stack (Elasticsearch, Logstash, Kibana) in log-management read as Elastic Stack (3), Elastic in siem-platforms read as Elastic Security (3), Firebase in customer-identity-and-access-management read as Firebase Authentication (3), GCP in object-storage read as Google Cloud Storage (3), Gloo in api-gateways read as Gloo Gateway (3), HPE Aruba in sd-wan read as HPE Aruba EdgeConnect (3), Huntress in security-awareness-training read as Huntress Managed Security Awareness Training (3), IBM in api-management read as IBM API Connect (3), IBM in unified-endpoint-management read as IBM MaaS360 (3), InvGate in it-service-management read as InvGate Service Management (3), Ivanti in it-service-management read as Ivanti Neurons for ITSM (3), Ivanti Neurons in it-service-management read as Ivanti Neurons for ITSM (3), Kaseya in patch-management read as Kaseya VSA (3), Kong (Kong Konnect) in api-management read as Kong Gateway (3), ManageEngine in it-asset-management read as ManageEngine AssetExplorer (3), ManageEngine in it-service-management read as ManageEngine ServiceDesk Plus (3), Microsoft Defender in extended-detection-and-response read as Microsoft Defender XDR (3), Microsoft Defender for Endpoint P2 in endpoint-detection-and-response read as Microsoft Defender for Endpoint (3), Palo Alto Networks (Prisma SD-WAN) in sd-wan read as Palo Alto Networks Prisma SD-WAN (3), Ping in workforce-identity-and-sso read as Ping Identity (3), Rapid7 in cloud-native-application-protection read as Rapid7 InsightCloudSec (3), Sophos Endpoint in endpoint-detection-and-response read as Sophos Intercept X (3), Splunk in soar-platforms read as Splunk SOAR (3), Spot by NetApp in cloud-cost-management read as Spot by NetApp (3), Tenable in cloud-native-application-protection read as Tenable Cloud Security (3), Trellix in endpoint-detection-and-response read as Trellix EDR (3), UpGuard Breach Risk in attack-surface-management read as UpGuard BreachSight (3), VMware in sd-wan read as VMware VeloCloud SD-WAN (3), Zscaler (Zero Trust Exchange) in sase-platforms read as Zscaler Zero Trust Exchange (3), 42Gears (SureMDM) in unified-endpoint-management read as 42Gears SureMDM (2), Aikido in cloud-native-application-protection read as Aikido Security (2), Akamai (Prolexic) in ddos-protection read as Akamai Prolexic (2), Akamai/Linode in cloud-hosting read as Akamai Connected Cloud (2), Amazon in content-delivery-networks read as Amazon CloudFront (2), ArcSight in siem-platforms read as OpenText ArcSight (2), Azure in ddos-protection read as Azure DDoS Protection (2), Azure Resource Manager (ARM) in infrastructure-as-code read as Azure Resource Manager templates (2), BMC Helix (formerly Remedy) in it-service-management read as BMC Helix ITSM (2), Bitdefender GravityZone Business Security Enterprise in endpoint-detection-and-response read as Bitdefender GravityZone (2), Broadcom/Symantec in data-loss-prevention read as Symantec Data Loss Prevention (2), Check Point in email-security read as Check Point Harmony Email & Collaboration (2), Check Point (Avanan) in email-security read as Check Point Harmony Email & Collaboration (2), Check Point Harmony Email in email-security read as Check Point Harmony Email & Collaboration (2), Cortex XSIAM in siem-platforms read as Palo Alto Networks Cortex XSIAM (2), Datadog in cloud-security-posture-management read as Datadog Cloud Security Management (2), Datto in patch-management read as Datto RMM (2), ELK Stack (Elasticsearch, Logstash, Kibana) in observability-platforms read as Elastic Stack (2), ELK stack in log-management read as Elastic Stack (2), ESET in extended-detection-and-response read as ESET PROTECT (2), Elastic in extended-detection-and-response read as Elastic Security (2), Elastic (ELK) in log-management read as Elastic Stack (2), FatPipe in sd-wan read as FatPipe SD-WAN (2), Field Effect in managed-detection-and-response read as Field Effect MDR (2), Fortinet FortiGate in sd-wan read as Fortinet Secure SD-WAN (2), GitHub Enterprise Server in source-control-hosting read as GitHub (2), GitLab Ultimate in source-control-hosting read as GitLab (2), Google Chronicle in siem-platforms read as Google Security Operations (2), Google SecOps in siem-platforms read as Google Security Operations (2), Google Workspace Security in email-security read as Google Workspace (2), Grafana Stack in observability-platforms read as Grafana (2), HPE in sase-platforms read as HPE Aruba (2), HPE in sd-wan read as HPE Aruba EdgeConnect (2), Hewlett Packard Enterprise (HPE) in sd-wan read as HPE Aruba EdgeConnect (2), IBM in siem-platforms read as IBM QRadar (2), Keeper in privileged-access-management read as KeeperPAM (2), Kong (Open Source) in api-gateways read as Kong Gateway (2), Linode (now Akamai) in cloud-hosting read as Akamai Connected Cloud (2), Linode/Akamai in cloud-hosting read as Akamai Connected Cloud (2), Linode/Akamai in managed-kubernetes-platforms read as Linode Kubernetes Engine (2), ManageEngine in business-password-managers read as ManageEngine Password Manager Pro (2), Microsoft Defender in email-security read as Microsoft Defender for Office 365 (2), MongoDB Atlas in vector-databases read as MongoDB Atlas Vector Search (2), MuleSoft (Anypoint Platform) in api-management read as MuleSoft Anypoint Platform (2), Netskope (Netskope One) in sase-platforms read as Netskope One (2), Oracle in cloud-hosting read as Oracle Cloud Infrastructure (2), Oracle Cloud in object-storage read as Oracle Cloud Infrastructure Object Storage (2), Palo Alto Cortex in extended-detection-and-response read as Palo Alto Networks Cortex XDR (2), Palo Alto Networks (Prisma Access) in sase-platforms read as Palo Alto Networks Prisma SASE (2), Palo Alto Networks (Prisma Cloud) in cloud-security-posture-management read as Prisma Cloud (2), Ping in multi-factor-authentication read as Ping Identity (2), Proofpoint (ZenGuide) in security-awareness-training read as Proofpoint ZenGuide (2), Replit in ai-coding-assistants read as Replit AI (2), Securden in business-password-managers read as Securden Password Vault (2), SentinelOne in container-and-kubernetes-security read as SentinelOne Singularity (2), SentinelOne Singularity Complete in endpoint-detection-and-response read as SentinelOne Singularity (2), SentinelOne Singularity Core in endpoint-detection-and-response read as SentinelOne Singularity (2), SentinelOne Singularity Endpoint in endpoint-detection-and-response read as SentinelOne Singularity (2), SolarWinds in it-service-management read as SolarWinds Service Desk (2), Spiceworks in it-asset-management read as Spiceworks Inventory (2), Spot in cloud-cost-management read as Spot by NetApp (2), Symantec (Broadcom) in data-loss-prevention read as Symantec Data Loss Prevention (2), Symantec/Broadcom in data-loss-prevention read as Symantec Data Loss Prevention (2), Tools4ever in identity-governance read as Tools4ever HelloID (2), UpGuard (Breach Risk) in attack-surface-management read as UpGuard BreachSight (2), VMware in unified-endpoint-management read as Omnissa Workspace ONE (2), AWS in object-storage read as Amazon S3 (1), Aikido in cloud-security-posture-management read as Aikido Security (1), Akamai Cloud (formerly Linode) in cloud-hosting read as Akamai Connected Cloud (1), Akamai Linode in managed-kubernetes-platforms read as Linode Kubernetes Engine (1), Amazon in api-gateways read as Amazon API Gateway (1), Amazon Web Services in object-storage read as Amazon S3 (1), Aqua in cloud-security-posture-management read as Aqua Security (1), Aqua Platform in container-and-kubernetes-security read as Aqua Security (1), ArcSight (OpenText) in siem-platforms read as OpenText ArcSight (1), Arcon in privileged-access-management read as ARCON PAM (1), Astronomer Cloud in workflow-orchestration read as Astronomer Astro (1), Atlassian (Jira Service Management) in it-service-management read as Jira Service Management (1), Azure in api-management read as Azure API Management (1), Azure DDoS (Basic) in ddos-protection read as Azure DDoS Protection (1), BMC in it-service-management read as BMC Helix ITSM (1), BMC Helix in incident-management-and-on-call read as BMC Helix ITSM (1), Barracuda in sase-platforms read as Barracuda SecureEdge (1), Barracuda Email in email-security read as Barracuda Email Protection (1), Bitdefender GravityZone Business Security in endpoint-detection-and-response read as Bitdefender GravityZone (1), Bitdefender GravityZone Business Security Premium in endpoint-detection-and-response read as Bitdefender GravityZone (1), Bitwarden (Business Plan) in secrets-management read as Bitwarden Secrets Manager (1), Broadcom (Symantec) in data-loss-prevention read as Symantec Data Loss Prevention (1), Broadcom (VMware SASE SD-WAN) in sd-wan read as VMware VeloCloud SD-WAN (1), Broadcom (VMware SASE) in sd-wan read as VMware VeloCloud SD-WAN (1), Broadcom Symantec Endpoint Security in endpoint-detection-and-response read as Symantec Endpoint Security (1), Broadcom/VMware in sd-wan read as VMware VeloCloud SD-WAN (1), Carbon Black (VMware) in endpoint-detection-and-response read as VMware Carbon Black (1), Cato in sase-platforms read as Cato SASE Cloud (1), Cato in sd-wan read as Cato Networks (1), Cato Networks (SASE) in sd-wan read as Cato Networks (1), Check Point in cloud-security-posture-management read as Check Point CloudGuard (1), Check Point (Harmony SASE/Perimeter 81) in zero-trust-network-access read as Check Point Harmony SASE (1), Check Point (R8x / Harmony Endpoint) in sase-platforms read as Check Point Harmony SASE (1), Check Point Harmony in sase-platforms read as Check Point Harmony SASE (1), Check Point Harmony in zero-trust-network-access read as Check Point Harmony SASE (1), Checkmarx (Checkmarx One) in static-application-security-testing read as Checkmarx One (1), Checkmarx (CxSAST) in static-application-security-testing read as Checkmarx One (1), Checkmarx (now part of Veracode) in static-application-security-testing read as Checkmarx One (1), Cisco in email-security read as Cisco Secure Email (1), Cisco (Cisco XDR & Splunk) in extended-detection-and-response read as Cisco XDR (1), Cisco Catalyst in sd-wan read as Cisco Catalyst SD-WAN (1), Citrix in sd-wan read as Citrix SD-WAN (1), CloudBees in ci-cd-platforms read as CloudBees CI (1), CloudBees (CI) in ci-cd-platforms read as CloudBees CI (1), CloudWatch (AWS) in log-management read as Amazon CloudWatch Logs (1), Cloudflare in api-management read as Cloudflare API Gateway (1), Cloudflare (Cloudflare One) in sase-platforms read as Cloudflare One (1), Cloudflare (One) in sase-platforms read as Cloudflare One (1), Cortex in endpoint-detection-and-response read as Palo Alto Networks Cortex XDR (1), CrowdStrike (Falcon Insight XDR) in extended-detection-and-response read as CrowdStrike Falcon (1), CrowdStrike Falcon in managed-detection-and-response read as CrowdStrike Falcon Complete (1), CrowdStrike Falcon Cloud in cloud-security-posture-management read as CrowdStrike Falcon Cloud Security (1), CrowdStrike Falcon Complete in endpoint-detection-and-response read as CrowdStrike Falcon (1), CrowdStrike Falcon Enterprise in endpoint-detection-and-response read as CrowdStrike Falcon (1), CrowdStrike Falcon Exposure in attack-surface-management read as CrowdStrike Falcon Exposure Management (1), CrowdStrike Falcon Insight in extended-detection-and-response read as CrowdStrike Falcon Insight XDR (1), CrowdStrike Falcon Platform in endpoint-detection-and-response read as CrowdStrike Falcon (1), Crowdstrike in extended-detection-and-response read as CrowdStrike Falcon (1), CyberArk (Idira) in workforce-identity-and-sso read as CyberArk Identity (1), Cynet 360 in extended-detection-and-response read as Cynet (1), Cynet 360 AutoXDR in endpoint-detection-and-response read as Cynet (1), Datadog in siem-platforms read as Datadog Cloud SIEM (1), Datadog (Log Management) in log-management read as Datadog Log Management (1), Datadog (for Logs) in log-management read as Datadog Log Management (1), Datadog Cloud Security in cloud-security-posture-management read as Datadog Cloud Security Management (1), Defender for Endpoint in endpoint-detection-and-response read as Microsoft Defender for Endpoint (1), Delinea in secrets-management read as Delinea Secret Server (1), DigitalOcean in object-storage read as DigitalOcean Spaces (1), DigitalOcean (DOKS) in managed-kubernetes-platforms read as DigitalOcean Kubernetes (1), Diligent (Diligent One Platform) in grc-platforms read as Diligent One (1), Diligent (Galvanize) in grc-platforms read as Diligent One (1), Domino in ml-platforms read as Domino Data Lab (1), ELK in observability-platforms read as Elastic Stack (1), ELK Stack in error-and-crash-monitoring read as Elastic Stack (1), ELK Stack (Elastic) in log-management read as Elastic Stack (1), ELK Stack (Elasticsearch + Logstash + Kibana) in log-management read as Elastic Stack (1), ELK Stack (Elasticsearch) in log-management read as Elastic Stack (1), ELK Stack (Elasticsearch/Logstash/Kibana) in log-management read as Elastic Stack (1), ELK stack (ElasticSearch, LogStash, Kibana) in log-management read as Elastic Stack (1), ESET in managed-detection-and-response read as ESET PROTECT MDR (1), ESET in security-awareness-training read as ESET Cybersecurity Awareness Training (1), ESET in vulnerability-management-platforms read as ESET Vulnerability & Patch Management (1), ESET PROTECT Enterprise in endpoint-detection-and-response read as ESET PROTECT (1), ESET PROTECT Entry in endpoint-detection-and-response read as ESET PROTECT (1), ESET PROTECT Platform in endpoint-detection-and-response read as ESET PROTECT (1), Elastic in endpoint-detection-and-response read as Elastic Security (1), Elastic (ELK Stack) in log-management read as Elastic Stack (1), Elastic (ELK Stack: Elasticsearch + Kibana) in log-management read as Elastic Stack (1), Elasticsearch in log-management read as Elastic Stack (1), Exabeam Fusion in siem-platforms read as Exabeam (1), Flexera (Flexera One) in it-asset-management read as Flexera One (1), Flexera (Snow) in it-asset-management read as Flexera One (1), FortiGate in sd-wan read as Fortinet Secure SD-WAN (1), Fortinet (FortiGate Secure SD-WAN) in sd-wan read as Fortinet Secure SD-WAN (1), Fortinet (Fortinet Unified SASE) in sase-platforms read as Fortinet FortiSASE (1), Fortinet (Secure SD-WAN) in sd-wan read as Fortinet Secure SD-WAN (1), GCP in ddos-protection read as Google Cloud Armor (1), GitHub in ai-coding-assistants read as GitHub Copilot (1), GitLab in software-composition-analysis read as GitLab Dependency Scanning (1), GitLab in static-application-security-testing read as GitLab SAST (1), GitLab (Dependency Scanning) in software-composition-analysis read as GitLab Dependency Scanning (1), GitLab (SaaS) in ci-cd-platforms read as GitLab CI/CD (1), GitLab (Self-Managed CE) in ci-cd-platforms read as GitLab CI/CD (1), GitLab SaaS in source-control-hosting read as GitLab (1), GitLab Self-Managed in source-control-hosting read as GitLab (1), GitLab Ultimate in ci-cd-platforms read as GitLab CI/CD (1), GitLab Ultimate in software-composition-analysis read as GitLab Dependency Scanning (1), GoTo (LogMeIn) in it-service-management read as GoTo Resolve (1), Google in siem-platforms read as Google Security Operations (1), Google Cloud in object-storage read as Google Cloud Storage (1), Google SecOps (formerly Chronicle) in siem-platforms read as Google Security Operations (1), Google SecOps / Chronicle in soar-platforms read as Google Security Operations SOAR (1), Google Workspace in multi-factor-authentication read as Google Workspace 2-Step Verification (1), Google Workspace Security (BeyondCorp) in multi-factor-authentication read as Google Workspace 2-Step Verification (1), Google Workspace security in email-security read as Google Workspace (1), Grafana Cloud (LGTM stack) in observability-platforms read as Grafana (1), Grafana Cloud (Loki/Tempo/Prometheus) in observability-platforms read as Grafana (1), Grafana LGTM in observability-platforms read as Grafana LGTM Stack (1), Grafana Stack (Grafana Cloud / On-Prem) in observability-platforms read as Grafana (1), HPE (Aruba EdgeConnect) in sd-wan read as HPE Aruba EdgeConnect (1), HPE (Aruba Networking) in sd-wan read as HPE Aruba EdgeConnect (1), HPE (Aruba) in sd-wan read as HPE Aruba EdgeConnect (1), HPE Aruba (EdgeConnect) in sd-wan read as HPE Aruba EdgeConnect (1), Harness (CCM) in cloud-cost-management read as Harness Cloud Cost Management (1), Hexnode (by ManageEngine) in unified-endpoint-management read as Hexnode UEM (1), Huntress (via MSP) in endpoint-detection-and-response read as Huntress Managed EDR (1), IBM in grc-platforms read as IBM OpenPages (1), IBM in multi-factor-authentication read as IBM Verify (1), IBM in object-storage read as IBM Cloud Object Storage (1), IBM in observability-platforms read as IBM Instana (1), IBM in soar-platforms read as IBM QRadar SOAR (1), IBM Apptio in cloud-cost-management read as IBM Apptio Cloudability (1), Instaclustr (NetApp) in streaming-platforms read as Instaclustr for Apache Kafka (1), Intruder.io in attack-surface-management read as Intruder (1), Ivanti in vulnerability-management-platforms read as Ivanti Neurons for Vulnerability Management (1), Ivanti (ITAM / Neurons for ITSM) in it-asset-management read as Ivanti Neurons for ITAM (1), Ivanti Neurons in it-asset-management read as Ivanti Neurons for ITAM (1), Jira in it-service-management read as Jira Service Management (1), Kaseya in unified-endpoint-management read as Kaseya VSA (1), Kaspersky in endpoint-detection-and-response read as Kaspersky Endpoint Detection and Response (EDR) Expert (1), Keeper (Enterprise) in business-password-managers read as Keeper Security (1), Keeper Business in privileged-access-management read as KeeperPAM (1), Keeper Business Starter in business-password-managers read as Keeper Security (1), Keeper Enterprise in business-password-managers read as Keeper Security (1), Keeper Security (BPM/PAM module) in privileged-access-management read as KeeperPAM (1), Keeper Security Enterprise in privileged-access-management read as KeeperPAM (1), Kong (Community Edition) in api-management read as Kong Gateway (1), Kong (Enterprise) in api-gateways read as Kong Gateway (1), Kong (Gateway + Konnect) in api-management read as Kong Gateway (1), Kong (Konnect) in api-gateways read as Kong Gateway (1), Kong (OSS) in api-gateways read as Kong Gateway (1), Kong (Open Source) in api-management read as Kong Gateway (1), Kong (Open Source/Free Tier) in api-management read as Kong Gateway (1), Kong (Self-Hosted/OSS) in api-gateways read as Kong Gateway (1), Kong (specifically Kong Konnect) in api-gateways read as Kong Gateway (1), Kong AI in llm-gateways-and-observability read as Kong AI Gateway (1), Lacework (now FortiCNAPP by Fortinet) in cloud-security-posture-management read as Lacework FortiCNAPP (1), Lacework (now FortiCNAPP) in cloud-security-posture-management read as Lacework FortiCNAPP (1), Lacework (now FortiCNAPP, acquired by Fortinet) in cloud-native-application-protection read as FortiCNAPP (1), Lacework (now Fortinet) in cloud-native-application-protection read as FortiCNAPP (1), Lacework / FortiCNAPP (Fortinet) in cloud-security-posture-management read as Lacework FortiCNAPP (1), Lacework/Fortinet in cloud-security-posture-management read as Lacework FortiCNAPP (1), Layer7 in api-gateways read as Broadcom Layer7 API Gateway (1), Linode in managed-kubernetes-platforms read as Linode Kubernetes Engine (1), Linode (LKE) in managed-kubernetes-platforms read as Linode Kubernetes Engine (1), Linode / Akamai Cloud in cloud-hosting read as Akamai Connected Cloud (1), Linode/Akamai in managed-relational-databases read as Linode Managed Databases (1), Linode/Akamai (LKE) in managed-kubernetes-platforms read as Linode Kubernetes Engine (1), Lumen SD-WAN in sd-wan read as Lumen (1), Malwarebytes ThreatDown (with EDR) in endpoint-detection-and-response read as ThreatDown EDR (1), ManageEngine (AssetExplorer) in it-asset-management read as ManageEngine AssetExplorer (1), Mandiant in attack-surface-management read as Mandiant Attack Surface Management (1), Microsoft Defender in cloud-security-posture-management read as Microsoft Defender for Cloud (1), Microsoft Defender Experts in managed-detection-and-response read as Microsoft Defender Experts for XDR (1), Microsoft Defender Suite in extended-detection-and-response read as Microsoft Defender XDR (1), Microsoft Defender for Endpoint Plan 2 in endpoint-detection-and-response read as Microsoft Defender for Endpoint (1), Microsoft Edge in business-password-managers read as Microsoft Edge Password Manager (1), Microsoft Entra in multi-factor-authentication read as Microsoft Entra ID (1), Microsoft Entra in zero-trust-network-access read as Microsoft Entra ID (1), Microsoft Entra (formerly Azure Active Directory) in workforce-identity-and-sso read as Microsoft Entra ID (1), Microsoft Purview (M365 DLP) in data-loss-prevention read as Microsoft Purview DLP (1), MuleSoft in workflow-orchestration read as MuleSoft Anypoint Platform (1), Netskope (One SASE) in sase-platforms read as Netskope One (1), Nuage Networks (now Alcatel-Lucent Enterprise / Nokia) in sd-wan read as Nuage (1), Okta Workforce Identity in multi-factor-authentication read as Okta (1), Okta Workforce Identity Cloud in multi-factor-authentication read as Okta (1), Omnissa in unified-endpoint-management read as Omnissa Workspace ONE (1), Omnissa (formerly VMware Workspace ONE UEM) in unified-endpoint-management read as Omnissa Workspace ONE (1), Omnissa (formerly Workspace ONE) in unified-endpoint-management read as Omnissa Workspace ONE (1), One Identity (by HPE) in identity-governance read as One Identity Manager (1), One Identity (incl. OneLogin) in identity-governance read as One Identity Manager (1), OneIdentity in identity-governance read as One Identity Manager (1), OneIdentity (by Genpact) in identity-governance read as One Identity Manager (1), OneTrust (TPRM Module) in third-party-risk-management read as OneTrust Third-Party Risk Management (1), OneTrust (Vendor Risk) in third-party-risk-management read as OneTrust Third-Party Risk Management (1), Oracle in object-storage read as Oracle Cloud Infrastructure Object Storage (1), Oracle Cloud (Always Free) in managed-kubernetes-platforms read as Oracle Container Engine for Kubernetes (1), Oracle Cloud Infrastructure in managed-kubernetes-platforms read as Oracle Container Engine for Kubernetes (1), Oracle Identity in identity-governance read as Oracle Identity Governance (1), Oracle NoSQL in nosql-databases read as Oracle NoSQL Database (1), PDQ Deploy (Free Version) in patch-management read as PDQ Deploy & Inventory (1), Palo Alto in cloud-security-posture-management read as Prisma Cloud (1), Palo Alto in endpoint-detection-and-response read as Palo Alto Networks Cortex XDR (1), Palo Alto in sase-platforms read as Palo Alto Networks Prisma SASE (1), Palo Alto (Prisma SD-WAN) in sd-wan read as Palo Alto Networks Prisma SD-WAN (1), Palo Alto (Prisma) in container-and-kubernetes-security read as Prisma Cloud (1), Palo Alto Cortex XDR (with EDR) in endpoint-detection-and-response read as Palo Alto Networks Cortex XDR (1), Palo Alto Networks in endpoint-detection-and-response read as Palo Alto Networks Cortex XDR (1), Palo Alto Networks (Cortex MDR / Unit 42) in managed-detection-and-response read as Unit 42 Managed Detection and Response (1), Palo Alto Networks (Cortex MDR) in managed-detection-and-response read as Unit 42 Managed Detection and Response (1), Palo Alto Networks (Prisma Access / Unit 42) in managed-detection-and-response read as Unit 42 Managed Detection and Response (1), Palo Alto Networks (Traditional PAN-OS SD-WAN Hardware) in sd-wan read as Palo Alto Networks Prisma SD-WAN (1), Palo Alto Networks Cortex in extended-detection-and-response read as Palo Alto Networks Cortex XDR (1), Palo Alto Networks Cortex XSOAR (formerly Demisto) in soar-platforms read as Cortex XSOAR (1), Palo Alto Prisma Access in sd-wan read as Palo Alto Networks Prisma Access (1), Palo Alto/Cortex in extended-detection-and-response read as Palo Alto Networks Cortex XDR (1), Pentaho in etl-and-elt read as Pentaho Data Integration (1), PostgreSQL in vector-databases read as pgvector (1), Prisma in sd-wan read as Palo Alto Networks Prisma SD-WAN (1), Proton in business-password-managers read as Proton Pass (1), Qualys Community in attack-surface-management read as Qualys Community Edition (1), RSA in multi-factor-authentication read as RSA SecurID (1), Rapid7 (InsightCloudSec) in cloud-native-application-protection read as Rapid7 InsightCloudSec (1), Red Hat Advanced Cluster Security in container-and-kubernetes-security read as Red Hat Advanced Cluster Security for Kubernetes (1), Red Hat Advanced Cluster Security (RHACS) in container-and-kubernetes-security read as Red Hat Advanced Cluster Security for Kubernetes (1), Red Hat Advanced Cluster Security (RHACS, powered by StackRox) in container-and-kubernetes-security read as Red Hat Advanced Cluster Security for Kubernetes (1), Render (Postgres) in managed-relational-databases read as Render Postgres (1), Rippling in unified-endpoint-management read as Rippling IT (1), Riverbed (SteelConnect) in sd-wan read as Riverbed SteelConnect (1), SAP in grc-platforms read as SAP GRC (1), SCCM (System Center Configuration Manager) in patch-management read as Microsoft Configuration Manager (1), Saviynt (Enterprise Identity Cloud) in identity-governance read as Saviynt Enterprise Identity Cloud (1), Scout Monitoring in application-performance-monitoring read as Scout APM (1), SecPod in vulnerability-management-platforms read as SecPod SanerNow (1), Self-Hosted Elasticsearch (ELK Stack) in log-management read as Elastic Stack (1), SentinelOne in cloud-security-posture-management read as SentinelOne Singularity Cloud Security (1), SentinelOne (Singularity XDR) in extended-detection-and-response read as SentinelOne Singularity (1), ServiceNow (ITAM/SAM) in it-asset-management read as ServiceNow IT Asset Management (1), ServiceNow IT Service Management in incident-management-and-on-call read as ServiceNow ITSM (1), Snyk (Free Tier) in software-composition-analysis read as Snyk Open Source (1), Snyk (commercial) in software-composition-analysis read as Snyk Open Source (1), Snyk Free Tier in software-composition-analysis read as Snyk Open Source (1), Snyk Team in software-composition-analysis read as Snyk Open Source (1), Sonatype (Lifecycle & Nexus) in software-composition-analysis read as Sonatype Lifecycle (1), Sonatype (Nexus Intelligence) in software-composition-analysis read as Sonatype Lifecycle (1), Sophos Essentials in managed-detection-and-response read as Sophos MDR (1), Sophos Intercept X Endpoint in endpoint-detection-and-response read as Sophos Intercept X (1), Spiceworks Cloud in it-service-management read as Spiceworks Cloud Help Desk (1), Spot (by Microsoft) in cloud-cost-management read as Spot by NetApp (1), Tenable (Cloud Security) in cloud-security-posture-management read as Tenable Cloud Security (1), Teradata in data-warehouses read as Teradata Vantage (1), ThreatDown (formerly Malwarebytes for Teams) in endpoint-detection-and-response read as ThreatDown EDR (1), Thycotic (Dassault Systems) in privileged-access-management read as Delinea (1), TitanHQ in email-security read as SpamTitan (1), TitanHQ (SafeTitan) in security-awareness-training read as CyberSentriq (1), Trellix (formerly FireEye) in endpoint-detection-and-response read as Trellix EDR (1), Trellix (formerly FireEye/McAfee) in extended-detection-and-response read as Trellix XDR (1), Ubiquiti in sd-wan read as Ubiquiti UniFi (1), VMware (SASE with SD-WAN by VeloCloud) in sase-platforms read as VMware SASE (1), VMware (VeloCloud) in sd-wan read as VMware VeloCloud SD-WAN (1), VMware (Velocloud) in sd-wan read as VMware VeloCloud SD-WAN (1), VMware VeloCloud (Now Broadcom) in sd-wan read as VMware VeloCloud SD-WAN (1), VMware VeloCloud (now Arista/Broadcom) in sd-wan read as VMware VeloCloud SD-WAN (1), VMware VeloCloud (now Broadcom) in sd-wan read as VMware VeloCloud SD-WAN (1), VMware VeloCloud (now part of Broadcom) in sd-wan read as VMware VeloCloud SD-WAN (1), Versa in sase-platforms read as Versa SASE (1), Versa Networks (Versa SD-WAN) in sd-wan read as Versa Secure SD-WAN (1), Vonahi Security (vPenTest) in penetration-testing-as-a-service read as Vonahi Security vPenTest (1), Vultr Kubernetes (VKE) in managed-kubernetes-platforms read as Vultr Kubernetes Engine (1), Windows Defender in endpoint-detection-and-response read as Windows Defender Antivirus (1), Zscaler (Zscaler Private Access + Internet Access) in sase-platforms read as Zscaler Zero Trust Exchange (1), self-hosted GitLab in source-control-hosting read as GitLab (1), symantec/broadcom in data-loss-prevention read as Symantec Data Loss Prevention (1)

Combined answers split into one label per product: 1Password / Keeper, ARM/Bicep, ARMO Platform / Kubescape, AWS Backup / Azure Backup / Google Cloud Backup, AWS Cost Explorer / AWS Cost Management, AWS Cost Explorer / Azure Cost Management / Google Cloud Billing, AWS RDS / Amazon Aurora, AWS Shield & AWS WAF, AWS backup / AWS Elastic Disaster Recovery, AccuKnox/Prisma Cloud, Airbyte + dbt Core, Akamai/Imperva WAF, Ansible/Puppet, Apache Cassandra / ScyllaDB, Apache Kafka & Confluent (IBM), Apache NiFi / Spark, Apptio / IBM Cloudability, Avanan/Check Point, Avanan/Check Point Harmony Email, Azure Cost Management + Microsoft Cost Management, Azure DevOps / Azure Repos, Azure Logic Apps / Microsoft Power Automate, Azure Pipelines / Azure DevOps, Azure Resource Manager (ARM) / Azure Bicep, Azure SQL Database / Microsoft Fabric, Azure Site Recovery + Azure Backup, BMC Remedy / BMC Helix, BMC Remedy / BMC Helix ITSM, Bitbucket/Jira (Atlassian), ChatGPT / Codex, Check Point Harmony/Avanan, Checkmarx One / Checkmarx SAST, Checkmk / Nagios / Icinga, Checkov/Bridgecrew, Chef/Puppet, Cisco Firepower / Meraki MX, Cisco Secure Access / Cisco Secure Connect, Cisco Secure Access / Duo, Cisco Secure Access and Catalyst SD-WAN, Cisco Viptela / Meraki MX, Cloudian/MinIO, Couchbase / Firestore, Databricks Machine Learning / MLflow, Delinea Platform / Secret Server, DigitalOcean/Linode, ELK Stack / Elastic Cloud, ELK Stack / Graylog, ELK/OpenSearch, Fabric/Synapse, Firebolt/MotherDuck, Fivetran + dbt Cloud, Flexera One / Spot.io (NetApp), Forgejo/Gitea, FortiCNAPP / Lacework, FortiSASE/Fortinet, Fortinet Unified SASE / FortiSASE, GitHub Copilot / OpenAI Codex, Gitea + Drone CI, Gitea and Forgejo, Google Authenticator/Authy, Google Chrome / Google Account storage, Google Cloud / AWS / Azure, Google Cloud API Gateway / Apigee, Google Cloud SQL/AlloyDB/Spanner, Google Security Operations / Google SecOps, Grafana + Prometheus/Loki/Tempo, Grafana Cloud / Grafana OSS, Grafana Cloud / Prometheus, Grafana Labs / Grafana Cloud, Grafana Tempo + OpenTelemetry, Greenbone Community Edition / OpenVAS, HashiCorp Vault/Boundary, Honeybadger/Better Stack, HyperDX / OpenObserve, IBM QRadar SOAR / IBM Security SOAR, Icinga/Nagios XI, Intune + Windows Autopatch, JumpCloud/miniOrange, Kaggle / Colab, Kong Konnect/Tyk Cloud, Kubecost (now IBM) / OpenCost, Link11 / Nexusguard, Linode / Vultr, Mandiant (Google Cloud) / Google Threat Intelligence, Mezmo/Coralogix, Microsoft Authenticator / Entra ID, Microsoft Azure Synapse / Fabric, Microsoft Cost Management + Azure Advisor, Microsoft Entra ID / Defender for Endpoint, Microsoft Fabric / Azure Synapse Analytics, Microsoft Intune + Microsoft Endpoint Configuration Manager, Microsoft Intune / Windows Update for Business / Windows Autopatch, Microsoft WSUS/Windows Update for Business, Microsoft/Lacework Polygraph Data Platform, New Relic / Scout, One Identity / OneLogin, PDQ Deploy & Inventory / PDQ Connect, Palo Alto Networks Cortex / Cortex XDR, Pega/Appian, Perimeter 81 / Check Point, Ping Identity / Ping Workforce360, Ping Identity/OneLogin, Pingdom / UptimeRobot, Plivo/Twilio Verify, PostgreSQL + ClickHouse, Postman/Stoplight, Prefect/Temporal, Prometheus + Jaeger + Grafana, Prometheus/Grafana OSS, ProsperOps / Zesty, Railway / Render / Neon, Red Hat ACS / OpenShift, Red Hat ACS/StackRox, SailPoint/Saviynt, Self-Hosted Elasticsearch / ELK, Self-hosted Prometheus + Grafana + Loki + Tempo, SignalFx/Splunk, SolarWinds Observability / Site24x7, Splunk Enterprise Security / Cisco, Stitch/Meltano, Supabase/Firestore, Synapse/Databricks, Teamwork/Wrike, Tenable Nessus / Nessus Professional, Tenable.io / Tenable Cloud Security, Tenable/Rapid7, Traefik/Envoy, Twistlock/Palo Alto Networks, Twistlock/Trend Micro, WSUS + Winget, WhiteSource/Mend, Workspace ONE / Omnissa, Zerto/HPE, n8n/Airflow, nOps/ProsperOps

## Appendix: loose paraphrase stability

- Claude Haiku 4.5: a direct first choice kept as first choice or alternative in 31 of 64 categories (48%); differing under the strict rule: ai-coding-assistants, api-gateways, api-management, application-performance-monitoring, ci-cd-platforms, cloud-native-application-protection, cloud-security-posture-management, compliance-automation, container-and-kubernetes-security, data-loss-prevention, data-warehouses, email-security, endpoint-protection, error-and-crash-monitoring, etl-and-elt, extended-detection-and-response, feature-flags, grc-platforms, identity-governance, incident-management-and-on-call, infrastructure-monitoring, it-asset-management, llm-gateways-and-observability, log-management, managed-kubernetes-platforms, managed-relational-databases, ml-platforms, next-generation-firewalls, nosql-databases, object-storage, observability-platforms, patch-management, penetration-testing-as-a-service, privileged-access-management, remote-monitoring-and-management, sase-platforms, secrets-management, security-awareness-training, siem-platforms, soar-platforms, software-composition-analysis, source-control-hosting, static-application-security-testing, streaming-platforms, third-party-risk-management, unified-endpoint-management, vector-databases, vulnerability-management-platforms, web-application-firewalls, workflow-orchestration, workforce-identity-and-sso, zero-trust-network-access
- GPT-5.4 mini: a direct first choice kept as first choice or alternative in 48 of 67 categories (72%); differing under the strict rule: api-management, attack-surface-management, backup-and-disaster-recovery, business-password-managers, cloud-cost-management, compliance-automation, container-and-kubernetes-security, email-security, endpoint-detection-and-response, endpoint-protection, etl-and-elt, feature-flags, grc-platforms, identity-governance, infrastructure-as-code, infrastructure-monitoring, it-asset-management, llm-gateways-and-observability, managed-detection-and-response, managed-kubernetes-platforms, multi-factor-authentication, next-generation-firewalls, patch-management, privileged-access-management, remote-monitoring-and-management, sase-platforms, soar-platforms, software-composition-analysis, static-application-security-testing, third-party-risk-management, threat-intelligence-platforms, vector-databases, web-application-firewalls, workflow-orchestration, zero-trust-network-access
- Gemini 3.5 Flash: a direct first choice kept as first choice or alternative in 56 of 67 categories (84%); differing under the strict rule: ai-coding-assistants, api-gateways, api-management, attack-surface-management, backup-and-disaster-recovery, ci-cd-platforms, cloud-native-application-protection, cloud-security-posture-management, container-and-kubernetes-security, customer-identity-and-access-management, data-loss-prevention, email-security, endpoint-detection-and-response, endpoint-protection, etl-and-elt, extended-detection-and-response, feature-flags, grc-platforms, it-asset-management, llm-gateways-and-observability, log-management, managed-detection-and-response, managed-relational-databases, ml-platforms, multi-factor-authentication, next-generation-firewalls, nosql-databases, observability-platforms, patch-management, privileged-access-management, sd-wan, secrets-management, security-awareness-training, siem-platforms, soar-platforms, software-composition-analysis, streaming-platforms, threat-intelligence-platforms, vulnerability-management-platforms, web-application-firewalls, workforce-identity-and-sso
- Perplexity Sonar: a direct first choice kept as first choice or alternative in 46 of 67 categories (69%); differing under the strict rule: api-management, attack-surface-management, backup-and-disaster-recovery, ci-cd-platforms, cloud-hosting, compliance-automation, container-and-kubernetes-security, data-loss-prevention, data-warehouses, email-security, extended-detection-and-response, grc-platforms, identity-governance, infrastructure-as-code, infrastructure-monitoring, it-asset-management, llm-gateways-and-observability, log-management, managed-detection-and-response, managed-kubernetes-platforms, managed-relational-databases, ml-platforms, object-storage, patch-management, privileged-access-management, sase-platforms, sd-wan, secrets-management, security-awareness-training, siem-platforms, soar-platforms, software-composition-analysis, source-control-hosting, static-application-security-testing, streaming-platforms, threat-intelligence-platforms, unified-endpoint-management, vector-databases, web-application-firewalls, workflow-orchestration, zero-trust-network-access
- Grok 4.1 Fast: a direct first choice kept as first choice or alternative in 59 of 67 categories (88%); differing under the strict rule: backup-and-disaster-recovery, business-password-managers, cloud-native-application-protection, compliance-automation, container-and-kubernetes-security, customer-identity-and-access-management, email-security, etl-and-elt, extended-detection-and-response, grc-platforms, identity-governance, it-asset-management, log-management, managed-kubernetes-platforms, ml-platforms, nosql-databases, patch-management, penetration-testing-as-a-service, privileged-access-management, secrets-management, siem-platforms, soar-platforms, software-composition-analysis, static-application-security-testing, threat-intelligence-platforms, unified-endpoint-management, vector-databases, web-application-firewalls, workflow-orchestration, workforce-identity-and-sso, zero-trust-network-access
- Mistral Small: a direct first choice kept as first choice or alternative in 43 of 67 categories (64%); differing under the strict rule: ai-coding-assistants, api-management, application-performance-monitoring, backup-and-disaster-recovery, business-password-managers, ci-cd-platforms, cloud-cost-management, cloud-hosting, cloud-security-posture-management, customer-identity-and-access-management, data-loss-prevention, data-warehouses, ddos-protection, email-security, endpoint-detection-and-response, endpoint-protection, error-and-crash-monitoring, etl-and-elt, extended-detection-and-response, feature-flags, grc-platforms, identity-governance, incident-management-and-on-call, infrastructure-monitoring, it-asset-management, llm-gateways-and-observability, log-management, managed-detection-and-response, managed-kubernetes-platforms, managed-relational-databases, ml-platforms, multi-factor-authentication, next-generation-firewalls, nosql-databases, object-storage, patch-management, penetration-testing-as-a-service, privileged-access-management, remote-monitoring-and-management, sase-platforms, sd-wan, secrets-management, security-awareness-training, siem-platforms, soar-platforms, software-composition-analysis, static-application-security-testing, streaming-platforms, third-party-risk-management, threat-intelligence-platforms, unified-endpoint-management, vector-databases, workflow-orchestration, workforce-identity-and-sso, zero-trust-network-access
- DeepSeek V4 Flash: a direct first choice kept as first choice or alternative in 58 of 67 categories (87%); differing under the strict rule: api-gateways, api-management, backup-and-disaster-recovery, business-password-managers, ci-cd-platforms, cloud-hosting, cloud-security-posture-management, compliance-automation, container-and-kubernetes-security, customer-identity-and-access-management, data-loss-prevention, data-warehouses, email-security, endpoint-detection-and-response, endpoint-protection, etl-and-elt, extended-detection-and-response, feature-flags, grc-platforms, identity-governance, infrastructure-as-code, it-asset-management, it-service-management, llm-gateways-and-observability, log-management, managed-detection-and-response, managed-relational-databases, ml-platforms, multi-factor-authentication, object-storage, observability-platforms, privileged-access-management, sd-wan, secrets-management, security-awareness-training, siem-platforms, soar-platforms, software-composition-analysis, source-control-hosting, streaming-platforms, threat-intelligence-platforms, unified-endpoint-management, vector-databases, web-application-firewalls, workflow-orchestration, workforce-identity-and-sso, zero-trust-network-access
- Llama 4 Maverick: a direct first choice kept as first choice or alternative in 24 of 62 categories (39%); differing under the strict rule: ai-coding-assistants, api-management, application-performance-monitoring, attack-surface-management, backup-and-disaster-recovery, business-password-managers, ci-cd-platforms, cloud-cost-management, cloud-hosting, cloud-native-application-protection, cloud-security-posture-management, compliance-automation, container-and-kubernetes-security, content-delivery-networks, customer-identity-and-access-management, data-loss-prevention, data-warehouses, ddos-protection, email-security, endpoint-detection-and-response, endpoint-protection, etl-and-elt, extended-detection-and-response, feature-flags, grc-platforms, infrastructure-as-code, infrastructure-monitoring, it-service-management, llm-gateways-and-observability, log-management, managed-detection-and-response, managed-kubernetes-platforms, managed-relational-databases, multi-factor-authentication, nosql-databases, object-storage, observability-platforms, penetration-testing-as-a-service, privileged-access-management, sase-platforms, secrets-management, security-awareness-training, siem-platforms, soar-platforms, software-composition-analysis, static-application-security-testing, streaming-platforms, third-party-risk-management, threat-intelligence-platforms, unified-endpoint-management, vector-databases, workflow-orchestration, zero-trust-network-access
- Qwen 3.7 Flash: a direct first choice kept as first choice or alternative in 48 of 67 categories (72%); differing under the strict rule: api-gateways, attack-surface-management, backup-and-disaster-recovery, cloud-cost-management, cloud-hosting, compliance-automation, container-and-kubernetes-security, customer-identity-and-access-management, email-security, endpoint-detection-and-response, endpoint-protection, error-and-crash-monitoring, etl-and-elt, extended-detection-and-response, feature-flags, grc-platforms, identity-governance, incident-management-and-on-call, infrastructure-monitoring, it-asset-management, llm-gateways-and-observability, log-management, managed-detection-and-response, managed-kubernetes-platforms, managed-relational-databases, ml-platforms, multi-factor-authentication, object-storage, patch-management, penetration-testing-as-a-service, privileged-access-management, sase-platforms, secrets-management, security-awareness-training, siem-platforms, soar-platforms, software-composition-analysis, static-application-security-testing, streaming-platforms, third-party-risk-management, threat-intelligence-platforms, unified-endpoint-management, vector-databases, workflow-orchestration, workforce-identity-and-sso
- Kimi K2: a direct first choice kept as first choice or alternative in 53 of 67 categories (79%); differing under the strict rule: api-management, attack-surface-management, backup-and-disaster-recovery, business-password-managers, container-and-kubernetes-security, content-delivery-networks, customer-identity-and-access-management, data-loss-prevention, data-warehouses, email-security, endpoint-detection-and-response, endpoint-protection, etl-and-elt, feature-flags, grc-platforms, identity-governance, infrastructure-as-code, infrastructure-monitoring, it-asset-management, llm-gateways-and-observability, log-management, managed-detection-and-response, ml-platforms, observability-platforms, patch-management, privileged-access-management, sase-platforms, sd-wan, secrets-management, software-composition-analysis, static-application-security-testing, streaming-platforms, third-party-risk-management, threat-intelligence-platforms, unified-endpoint-management, vector-databases, web-application-firewalls, workflow-orchestration, workforce-identity-and-sso, zero-trust-network-access
- GLM 4.7 FlashX: a direct first choice kept as first choice or alternative in 47 of 67 categories (70%); differing under the strict rule: api-management, application-performance-monitoring, backup-and-disaster-recovery, ci-cd-platforms, cloud-hosting, cloud-native-application-protection, cloud-security-posture-management, compliance-automation, container-and-kubernetes-security, customer-identity-and-access-management, data-loss-prevention, data-warehouses, email-security, endpoint-detection-and-response, endpoint-protection, etl-and-elt, feature-flags, grc-platforms, identity-governance, incident-management-and-on-call, infrastructure-as-code, it-asset-management, llm-gateways-and-observability, managed-detection-and-response, managed-kubernetes-platforms, ml-platforms, multi-factor-authentication, next-generation-firewalls, nosql-databases, object-storage, observability-platforms, penetration-testing-as-a-service, privileged-access-management, sd-wan, secrets-management, security-awareness-training, software-composition-analysis, static-application-security-testing, third-party-risk-management, unified-endpoint-management, vector-databases, web-application-firewalls, workflow-orchestration, workforce-identity-and-sso, zero-trust-network-access
- MiniMax M2.5: a direct first choice kept as first choice or alternative in 43 of 67 categories (64%); differing under the strict rule: api-gateways, api-management, application-performance-monitoring, attack-surface-management, backup-and-disaster-recovery, business-password-managers, ci-cd-platforms, cloud-cost-management, cloud-hosting, cloud-native-application-protection, cloud-security-posture-management, compliance-automation, container-and-kubernetes-security, customer-identity-and-access-management, data-loss-prevention, data-warehouses, email-security, endpoint-detection-and-response, endpoint-protection, error-and-crash-monitoring, etl-and-elt, feature-flags, grc-platforms, identity-governance, incident-management-and-on-call, infrastructure-monitoring, it-asset-management, llm-gateways-and-observability, log-management, managed-detection-and-response, managed-kubernetes-platforms, managed-relational-databases, ml-platforms, multi-factor-authentication, nosql-databases, object-storage, patch-management, penetration-testing-as-a-service, privileged-access-management, remote-monitoring-and-management, sd-wan, secrets-management, security-awareness-training, siem-platforms, soar-platforms, software-composition-analysis, static-application-security-testing, streaming-platforms, third-party-risk-management, threat-intelligence-platforms, unified-endpoint-management, vector-databases, vulnerability-management-platforms, web-application-firewalls, workflow-orchestration, workforce-identity-and-sso, zero-trust-network-access


# Segment: Enterprise

# IT AI Recommendation Index, run edition-2026-09

402 prompts, 12 models, 25,627 raw judge labels, 25,760 scored labels after normalization. Published weights: first choice +3, alternative +2, mention +1, soft negative -2, hard negative -3.

Scored under vendor alias table version v2026-09.2. Raw judge labels are the permanent record; the numbers below are derived from them and are regenerated for every run whenever the alias table changes, so the whole series is always scored under one table version. Resolution of raw names: 22,631 by alias or canonical name, 2035 by category-scoped alias, 284 from combined answers split into their products, 0 excluded by rule, 800 unresolved and counted under the raw name.

## Paraphrase stability

Share of categories where a model's first choice set on the direct prompt equals its set on the paraphrase.

| Model | Same | Different | Stability |
|---|---|---|---|
| Claude Haiku 4.5 | 14 | 49 | 22% |
| GPT-5.4 mini | 33 | 34 | 49% |
| Gemini 3.5 Flash | 23 | 44 | 34% |
| Perplexity Sonar | 34 | 33 | 51% |
| Grok 4.1 Fast | 31 | 36 | 46% |
| Mistral Small | 12 | 55 | 18% |
| DeepSeek V4 Flash | 28 | 39 | 42% |
| Llama 4 Maverick | 5 | 50 | 9% |
| Qwen 3.7 Flash | 22 | 45 | 33% |
| Kimi K2 | 27 | 40 | 40% |
| GLM 4.7 FlashX | 24 | 42 | 36% |
| MiniMax M2.5 | 16 | 51 | 24% |

A looser measure, whether a direct first choice survives as a first choice or alternative on the paraphrase, is in the appendix.

## Standing by category

First choice share across the direct, paraphrase, budget and scale prompts and all 12 models. The top product's share is published alongside the label: contested means the top share is at or below 40%, and a category just above the line is not meaningfully different from one just below it. Consensus means every model's direct-prompt first choice is the same single product.

| Category | Top product | Top share | First choices | Status |
|---|---|---|---|---|
| ai-coding-assistants | GitHub Copilot | 95% | 37 | consensus |
| api-gateways | Kong Gateway | 45% | 47 | clear leader |
| api-management | MuleSoft Anypoint Platform | 29% | 49 | contested |
| application-performance-monitoring | Dynatrace | 46% | 46 | clear leader |
| attack-surface-management | Bitsight | 21% | 43 | contested |
| backup-and-disaster-recovery | Veeam Data Platform | 22% | 46 | contested |
| business-password-managers | Bitwarden | 43% | 47 | clear leader |
| ci-cd-platforms | GitLab CI/CD | 44% | 50 | clear leader |
| cloud-cost-management | IBM Apptio Cloudability | 45% | 44 | clear leader |
| cloud-hosting | Amazon Web Services | 57% | 44 | clear leader |
| cloud-native-application-protection | Wiz | 49% | 39 | clear leader |
| cloud-security-posture-management | Wiz | 58% | 43 | clear leader |
| compliance-automation | Vanta | 48% | 40 | clear leader |
| container-and-kubernetes-security | Aqua Security | 29% | 51 | contested |
| content-delivery-networks | Cloudflare | 53% | 43 | clear leader |
| customer-identity-and-access-management | Auth0 | 47% | 47 | clear leader |
| data-loss-prevention | Microsoft Purview DLP | 52% | 42 | clear leader |
| data-warehouses | Snowflake | 72% | 39 | clear leader |
| ddos-protection | Cloudflare | 80% | 45 | clear leader |
| email-security | Proofpoint Email Protection | 40% | 42 | clear leader |
| endpoint-detection-and-response | CrowdStrike Falcon | 43% | 44 | clear leader |
| endpoint-protection | Microsoft Defender for Endpoint | 43% | 56 | clear leader |
| error-and-crash-monitoring | Sentry | 62% | 45 | clear leader |
| etl-and-elt | Fivetran | 49% | 39 | clear leader |
| extended-detection-and-response | Microsoft Defender XDR | 46% | 46 | clear leader |
| feature-flags | LaunchDarkly | 59% | 46 | clear leader |
| grc-platforms | ServiceNow Integrated Risk Management | 36% | 47 | contested |
| identity-governance | SailPoint | 29% | 45 | contested |
| incident-management-and-on-call | PagerDuty | 50% | 42 | clear leader |
| infrastructure-as-code | Terraform | 58% | 57 | clear leader |
| infrastructure-monitoring | Datadog | 35% | 46 | contested |
| it-asset-management | ServiceNow IT Asset Management | 62% | 47 | clear leader |
| it-service-management | ServiceNow | 47% | 43 | clear leader |
| llm-gateways-and-observability | LiteLLM | 29% | 48 | contested |
| log-management | Splunk | 41% | 54 | clear leader |
| managed-detection-and-response | CrowdStrike Falcon Complete | 37% | 41 | contested |
| managed-kubernetes-platforms | Google Kubernetes Engine | 33% | 49 | contested |
| managed-relational-databases | Amazon RDS | 30% | 53 | contested |
| ml-platforms | Databricks | 26% | 42 | contested |
| multi-factor-authentication | Microsoft Entra ID | 40% | 50 | contested |
| next-generation-firewalls | Palo Alto Networks | 28% | 53 | contested |
| nosql-databases | MongoDB | 53% | 45 | clear leader |
| object-storage | Amazon S3 | 30% | 40 | contested |
| observability-platforms | Datadog | 36% | 42 | contested |
| patch-management | Microsoft Intune | 13% | 52 | contested |
| penetration-testing-as-a-service | NetSPI | 40% | 48 | contested |
| privileged-access-management | CyberArk | 58% | 38 | clear leader |
| remote-monitoring-and-management | NinjaOne | 61% | 38 | clear leader |
| sase-platforms | Palo Alto Networks Prisma SASE | 31% | 42 | contested |
| sd-wan | Cisco Catalyst SD-WAN | 45% | 44 | clear leader |
| secrets-management | HashiCorp Vault | 75% | 40 | clear leader |
| security-awareness-training | KnowBe4 | 65% | 40 | clear leader |
| siem-platforms | Microsoft Sentinel | 30% | 47 | contested |
| soar-platforms | Cortex XSOAR | 40% | 43 | contested |
| software-composition-analysis | Sonatype Lifecycle | 19% | 42 | contested |
| source-control-hosting | GitHub | 56% | 50 | clear leader |
| static-application-security-testing | Checkmarx One | 54% | 48 | clear leader |
| streaming-platforms | Confluent Cloud | 60% | 42 | clear leader |
| third-party-risk-management | ProcessUnity | 25% | 48 | contested |
| threat-intelligence-platforms | Recorded Future | 61% | 44 | clear leader |
| unified-endpoint-management | Microsoft Intune | 78% | 45 | clear leader |
| vector-databases | Pinecone | 53% | 43 | clear leader |
| vulnerability-management-platforms | Tenable Vulnerability Management | 25% | 51 | contested |
| web-application-firewalls | Cloudflare | 27% | 44 | contested |
| workflow-orchestration | Apache Airflow | 29% | 49 | contested |
| workforce-identity-and-sso | Microsoft Entra ID | 47% | 53 | clear leader |
| zero-trust-network-access | Zscaler Private Access | 50% | 42 | clear leader |

**ai-coding-assistants**: GitHub Copilot 95%, Amazon Q Developer 5%

**api-gateways**: Kong Gateway 45%, Apigee 36%, Tyk 9%, Amazon API Gateway 2%, Cloudflare API Gateway 2%

**api-management**: Apigee 29%, MuleSoft Anypoint Platform 29%, Kong Gateway 16%, Azure API Management 12%, Amplify API Management 2%

**application-performance-monitoring**: Dynatrace 46%, Datadog 26%, New Relic 11%, CubeAPM 9%, AppDynamics 2%

**attack-surface-management**: Bitsight 21%, Microsoft Defender External Attack Surface Management 19%, Cortex Xpanse 16%, CyCognito 9%, CrowdStrike Falcon Exposure Management 5%

**backup-and-disaster-recovery**: Veeam Data Platform 22%, Veeam 20%, Commvault 11%, Rubrik 9%, Veeam Backup & Replication 7%

**business-password-managers**: Bitwarden 43%, 1Password 32%, Keeper Security 21%, Dashlane 2%, TeamPassword 2%

**ci-cd-platforms**: GitLab CI/CD 44%, GitHub Actions 16%, GitHub 12%, Azure DevOps 8%, Jenkins 8%

**cloud-cost-management**: IBM Apptio Cloudability 45%, CloudZero 18%, Vantage 11%, Finout 7%, Cloudaware 5%

**cloud-hosting**: Amazon Web Services 57%, Microsoft Azure 27%, Azure 5%, Oracle Cloud Infrastructure 5%, Akamai Connected Cloud 2%

**cloud-native-application-protection**: Wiz 49%, Microsoft Defender for Cloud 28%, Prisma Cloud 13%, Orca Security 8%, Check Point CloudGuard 3%

**cloud-security-posture-management**: Wiz 58%, Prisma Cloud 16%, Microsoft Defender for Cloud 12%, Orca Security 5%, AWS Security Hub 2%

**compliance-automation**: Vanta 48%, Drata 18%, HiComply 5%, Hyperproof 5%, Anecdotes 2%

**container-and-kubernetes-security**: Aqua Security 29%, Prisma Cloud 24%, Wiz 20%, Sysdig Secure 12%, Aikido Security 4%

**content-delivery-networks**: Cloudflare 53%, Akamai 35%, BlazingCDN 7%, Amazon CloudFront 5%

**customer-identity-and-access-management**: Auth0 47%, WorkOS 13%, FusionAuth 11%, Microsoft Entra External ID 9%, LoginRadius 6%

**data-loss-prevention**: Microsoft Purview DLP 52%, Forcepoint DLP 19%, Symantec Data Loss Prevention 12%, Cyberhaven 5%, Fortra DLP 2%

**data-warehouses**: Snowflake 72%, Amazon Redshift 15%, Google BigQuery 13%

**ddos-protection**: Cloudflare 80%, Akamai Prolexic 13%, Cloudflare One 2%, Imperva 2%, Nexusguard 2%

**email-security**: Proofpoint Email Protection 40%, Microsoft Defender for Office 365 38%, Abnormal AI 10%, Barracuda Email Security Gateway 2%, Mimecast Email Security 2%

**endpoint-detection-and-response**: CrowdStrike Falcon 43%, Microsoft Defender for Endpoint 39%, CrowdStrike Falcon Insight 7%, SentinelOne Singularity 7%, CrowdStrike 5%

**endpoint-protection**: Microsoft Defender for Endpoint 43%, CrowdStrike Falcon 30%, SentinelOne Singularity 9%, CrowdStrike 5%, Microsoft Defender for Endpoint P2 4%

**error-and-crash-monitoring**: Sentry 62%, Datadog 11%, Rollbar 7%, Bugsnag 4%, Honeybadger 4%

**etl-and-elt**: Fivetran 49%, Integrate.io 28%, Airbyte 5%, Informatica Intelligent Data Management Cloud 5%, Matillion 5%

**extended-detection-and-response**: Microsoft Defender XDR 46%, Palo Alto Networks Cortex XDR 15%, CrowdStrike Falcon XDR 11%, CrowdStrike Falcon 9%, CrowdStrike Falcon Insight XDR 4%

**feature-flags**: LaunchDarkly 59%, ConfigCat 13%, Unleash 9%, Flagsmith 4%, Harness 4%

**grc-platforms**: ServiceNow Integrated Risk Management 36%, MetricStream 21%, Drata 9%, Vanta 9%, AuditBoard 4%

**identity-governance**: SailPoint 29%, SailPoint Identity Security Cloud 24%, Microsoft Entra ID Governance 18%, Saviynt Enterprise Identity Cloud 9%, ConductorOne 2%

**incident-management-and-on-call**: PagerDuty 50%, incident.io 17%, Rootly 10%, Hyperping 7%, ServiceNow ITSM 5%

**infrastructure-as-code**: Terraform 58%, OpenTofu 18%, Pulumi 12%, Spacelift 7%, Puppet 2%

**infrastructure-monitoring**: Datadog 35%, Dynatrace 33%, Netdata 15%, Prometheus 4%, LogicMonitor 2%

**it-asset-management**: ServiceNow IT Asset Management 62%, Flexera One 11%, Lansweeper 4%, ManageEngine AssetExplorer 4%, Oomnitza 4%

**it-service-management**: ServiceNow 47%, Jira Service Management 19%, ServiceNow IT Service Management 9%, Freshservice 7%, ServiceNow ITSM 7%

**llm-gateways-and-observability**: LiteLLM 29%, Bifrost 27%, Portkey 15%, Braintrust 4%, Confident AI 4%

**log-management**: Splunk 41%, Datadog Log Management 20%, Elastic Stack 7%, CubeAPM 6%, Sumo Logic 6%

**managed-detection-and-response**: CrowdStrike Falcon Complete 37%, Arctic Wolf Managed Detection and Response 20%, CrowdStrike 10%, Expel 7%, Red Canary 7%

**managed-kubernetes-platforms**: Google Kubernetes Engine 33%, Amazon EKS 24%, Azure Kubernetes Service 12%, Red Hat OpenShift 12%, Portainer 4%

**managed-relational-databases**: Amazon Aurora 30%, Amazon RDS 30%, Azure SQL Database 15%, Google Cloud SQL 8%, Azure SQL Managed Instance 4%

**ml-platforms**: Databricks 26%, Amazon SageMaker 19%, Azure Machine Learning 12%, Databricks Mosaic AI 7%, Dataiku 7%

**multi-factor-authentication**: Microsoft Entra ID 40%, Cisco Duo 30%, Okta 26%, Auth0 2%, WorkOS 2%

**next-generation-firewalls**: Fortinet FortiGate 28%, Palo Alto Networks 28%, Fortinet 11%, Palo Alto Networks PA-Series 11%, Cisco Secure Firewall 4200 Series 4%

**nosql-databases**: MongoDB 53%, Amazon DynamoDB 24%, Azure Cosmos DB 4%, Oracle NoSQL Database 4%, Amazon DocumentDB 2%

**object-storage**: Amazon S3 30%, Wasabi 25%, Cloudflare R2 12%, Backblaze B2 10%, NetApp StorageGRID 8%

**observability-platforms**: Datadog 36%, Dynatrace 24%, groundcover 17%, Grafana 7%, Coralogix 5%

**patch-management**: Microsoft Intune 13%, Automox 10%, Ivanti Neurons for Patch Management 10%, ManageEngine Patch Manager Plus 10%, Tanium 8%

**penetration-testing-as-a-service**: NetSPI 40%, Synack 23%, Cobalt 15%, Bishop Fox 4%, BreachLock 4%

**privileged-access-management**: CyberArk 58%, Delinea 16%, CyberArk Privileged Access Manager 8%, Securden Unified PAM 5%, Dashlane Thycotic 3%

**remote-monitoring-and-management**: NinjaOne 61%, Atera 18%, ConnectWise RMM 8%, Syncro 5%, ConnectWise Automate 3%

**sase-platforms**: Palo Alto Networks Prisma SASE 31%, Cato Networks 17%, Zscaler Zero Trust Exchange 17%, Cato SASE Cloud 10%, Cloudflare One 7%

**sd-wan**: Cisco Catalyst SD-WAN 45%, Fortinet Secure SD-WAN 27%, Cato Networks 11%, HPE Aruba EdgeConnect 7%, Cisco 5%

**secrets-management**: HashiCorp Vault 75%, Akeyless 10%, 1Password 5%, Doppler 5%, AWS Secrets Manager 2%

**security-awareness-training**: KnowBe4 65%, Hoxhunt 28%, DefendWise 2%, Infosec IQ 2%, Microsoft Attack Simulation Training 2%

**siem-platforms**: Microsoft Sentinel 30%, Splunk Enterprise Security 28%, Palo Alto Networks Cortex XSIAM 15%, Rapid7 InsightIDR 11%, Google Security Operations 6%

**soar-platforms**: Cortex XSOAR 40%, Splunk SOAR 12%, Swimlane 9%, Swimlane Turbine 9%, Tines 7%

**software-composition-analysis**: Black Duck 19%, Sonatype Lifecycle 19%, Aikido Security 14%, OWASP Dependency-Track 14%, Mend.io 10%

**source-control-hosting**: GitHub 56%, GitLab 28%, Bitbucket 8%, Azure DevOps 6%, Assembla 2%

**static-application-security-testing**: Checkmarx One 54%, Veracode 12%, SonarQube 10%, Snyk Code 8%, Contrast 2%

**streaming-platforms**: Confluent Cloud 60%, Apache Kafka 14%, Redpanda 10%, Amazon MSK 5%, Amazon Kinesis Data Streams 2%

**third-party-risk-management**: ProcessUnity 25%, Bitsight 23%, OneTrust Third-Party Risk Management 10%, UpGuard 10%, Venminder 6%

**threat-intelligence-platforms**: Recorded Future 61%, CrowdStrike Falcon Adversary Intelligence 5%, Google Threat Intelligence 5%, Microsoft Sentinel 5%, Anomali ThreatStream 2%

**unified-endpoint-management**: Microsoft Intune 78%, Omnissa Workspace ONE 18%, Hexnode UEM 2%, ManageEngine Endpoint Central 2%

**vector-databases**: Pinecone 53%, Qdrant 19%, pgvector 12%, Weaviate 9%, Zilliz Cloud 5%

**vulnerability-management-platforms**: Tenable Vulnerability Management 25%, Qualys VMDR 14%, Tenable 14%, Rapid7 InsightVM 10%, Microsoft Defender Vulnerability Management 8%

**web-application-firewalls**: Cloudflare 27%, Akamai App & API Protector 14%, Akamai 9%, Cloudflare WAF 9%, Cloudflare Enterprise WAF 7%

**workflow-orchestration**: Apache Airflow 29%, Astronomer Astro 10%, Camunda 8%, Temporal 8%, Enate 6%

**workforce-identity-and-sso**: Microsoft Entra ID 47%, Okta 28%, Okta Workforce Identity 25%

**zero-trust-network-access**: Zscaler Private Access 50%, Cloudflare One 21%, Palo Alto Networks Prisma Access 5%, Zscaler 5%, Cloudflare Access 2%

## Anti-recommendations

Products most often labeled soft or hard negative, with the number of models that did so at least once in the category, and the share of that product's labels in the category that were negative. A high negative share on a product with few labels is a warning; a low share on a product with many labels is salience, not sentiment.

- **ai-coding-assistants**: Cursor (10 models, 4 hard; 22 of 49 labels negative), GitHub Copilot (9 models, 4 hard; 11 of 68 labels negative), Claude Code (6 models, 4 hard; 10 of 25 labels negative), Amazon Q Developer (5 models, 1 hard; 5 of 40 labels negative)
- **api-gateways**: Amazon API Gateway (10 models, 7 hard; 19 of 56 labels negative), Apigee (9 models, 7 hard; 16 of 63 labels negative), Kong Gateway (8 models, 1 hard; 11 of 65 labels negative), Azure API Management (6 models, 1 hard; 7 of 46 labels negative)
- **api-management**: Amazon API Gateway (11 models, 7 hard; 21 of 45 labels negative), MuleSoft Anypoint Platform (9 models, 4 hard; 15 of 58 labels negative), Azure API Management (9 models, 2 hard; 10 of 53 labels negative), Kong Gateway (8 models, 5 hard; 12 of 64 labels negative)
- **application-performance-monitoring**: Datadog (9 models, 2 hard; 17 of 58 labels negative), Dynatrace (8 models; 13 of 62 labels negative), AppDynamics (7 models, 4 hard; 10 of 41 labels negative), New Relic (6 models; 7 of 59 labels negative)
- **attack-surface-management**: Censys ASM (8 models; 11 of 28 labels negative), Cortex Xpanse (7 models; 8 of 43 labels negative), Microsoft Defender External Attack Surface Management (6 models, 2 hard; 7 of 39 labels negative), CyCognito (6 models, 1 hard; 8 of 38 labels negative)
- **backup-and-disaster-recovery**: Cohesity (3 models; 4 of 34 labels negative), Rubrik (3 models; 3 of 36 labels negative), Dropbox (2 models, 2 hard; 2 of 2 labels negative), Acronis Cyber Protect (2 models; 2 of 6 labels negative)
- **business-password-managers**: LastPass (11 models, 16 hard; 26 of 32 labels negative), Dashlane (7 models, 2 hard; 13 of 44 labels negative), 1Password (7 models, 1 hard; 8 of 63 labels negative), Norton Password Manager (3 models, 3 hard; 3 of 3 labels negative)
- **ci-cd-platforms**: Jenkins (12 models, 8 hard; 27 of 53 labels negative), CircleCI (10 models, 5 hard; 14 of 44 labels negative), GitHub Actions (7 models, 3 hard; 11 of 46 labels negative), Atlassian Bamboo (5 models, 4 hard; 6 of 9 labels negative)
- **cloud-cost-management**: VMware Tanzu CloudHealth (8 models, 6 hard; 10 of 38 labels negative), IBM Apptio Cloudability (7 models, 1 hard; 12 of 54 labels negative), AWS Cost Explorer (6 models, 3 hard; 8 of 11 labels negative), Microsoft Cost Management (6 models, 3 hard; 7 of 11 labels negative)
- **cloud-hosting**: Amazon Web Services (9 models; 10 of 59 labels negative), Azure (7 models; 8 of 13 labels negative), Google Cloud (7 models; 7 of 54 labels negative), DigitalOcean (6 models; 6 of 10 labels negative)
- **cloud-native-application-protection**: Wiz (8 models, 1 hard; 9 of 58 labels negative), FortiCNAPP (6 models, 1 hard; 6 of 13 labels negative), Prisma Cloud (5 models, 1 hard; 9 of 45 labels negative), Microsoft Defender for Cloud (5 models; 5 of 49 labels negative)
- **cloud-security-posture-management**: Prisma Cloud (9 models, 3 hard; 14 of 61 labels negative), Microsoft Defender for Cloud (8 models, 1 hard; 9 of 49 labels negative), Wiz (8 models, 1 hard; 11 of 62 labels negative), AWS Security Hub (4 models; 4 of 7 labels negative)
- **compliance-automation**: Drata (11 models, 4 hard; 17 of 60 labels negative), Vanta (10 models, 5 hard; 15 of 65 labels negative), Secureframe (8 models, 5 hard; 11 of 40 labels negative), Sprinto (7 models, 4 hard; 9 of 21 labels negative)
- **container-and-kubernetes-security**: Prisma Cloud (9 models, 2 hard; 12 of 52 labels negative), Snyk (5 models, 2 hard; 8 of 23 labels negative), Aqua Security (5 models; 5 of 56 labels negative), Sysdig (4 models; 5 of 22 labels negative)
- **content-delivery-networks**: Amazon CloudFront (9 models, 1 hard; 11 of 51 labels negative), Cloudflare (9 models; 9 of 60 labels negative), Fastly (7 models, 2 hard; 10 of 49 labels negative), Bunny.net (6 models, 3 hard; 6 of 13 labels negative)
- **customer-identity-and-access-management**: Auth0 (8 models, 2 hard; 10 of 61 labels negative), Amazon Cognito (6 models, 1 hard; 8 of 16 labels negative), Stytch (5 models, 1 hard; 5 of 13 labels negative), Ping Identity (5 models; 5 of 43 labels negative)
- **data-loss-prevention**: Symantec Data Loss Prevention (11 models, 7 hard; 20 of 55 labels negative), Forcepoint DLP (9 models, 2 hard; 10 of 56 labels negative), Microsoft Purview DLP (9 models; 9 of 58 labels negative), Trellix DLP (4 models; 4 of 11 labels negative)
- **data-warehouses**: Amazon Redshift (11 models, 2 hard; 16 of 65 labels negative), Snowflake (11 models; 15 of 67 labels negative), Google BigQuery (9 models, 1 hard; 11 of 68 labels negative), Azure Synapse Analytics (6 models, 2 hard; 7 of 24 labels negative)
- **ddos-protection**: AWS Shield (5 models; 5 of 49 labels negative), Nexusguard (3 models, 1 hard; 3 of 6 labels negative), Akamai Prolexic (3 models; 3 of 57 labels negative), Azure DDoS Protection (3 models; 3 of 32 labels negative)
- **email-security**: Mimecast Email Security (8 models, 1 hard; 12 of 49 labels negative), Proofpoint Email Protection (8 models; 10 of 55 labels negative), Cisco Secure Email (7 models, 2 hard; 7 of 20 labels negative), Abnormal AI (6 models; 7 of 41 labels negative)
- **endpoint-detection-and-response**: CrowdStrike Falcon (6 models; 8 of 49 labels negative), Trellix EDR (4 models, 1 hard; 4 of 6 labels negative), Microsoft Defender for Endpoint (4 models; 4 of 58 labels negative), Datto EDR (3 models, 3 hard; 3 of 3 labels negative)
- **endpoint-protection**: CrowdStrike (4 models; 4 of 15 labels negative), CrowdStrike Falcon (4 models; 5 of 46 labels negative), Symantec Endpoint Security (3 models, 2 hard; 3 of 3 labels negative), ESET PROTECT (3 models, 1 hard; 3 of 12 labels negative)
- **error-and-crash-monitoring**: Datadog (12 models, 3 hard; 17 of 49 labels negative), Sentry (11 models, 1 hard; 14 of 67 labels negative), New Relic (8 models, 2 hard; 11 of 36 labels negative), Bugsnag (8 models, 1 hard; 8 of 39 labels negative)
- **etl-and-elt**: Fivetran (9 models; 13 of 53 labels negative), IBM DataStage (8 models, 6 hard; 9 of 21 labels negative), Talend (8 models, 6 hard; 15 of 41 labels negative), Informatica PowerCenter (6 models, 4 hard; 8 of 14 labels negative)
- **extended-detection-and-response**: Palo Alto Networks Cortex XDR (7 models, 2 hard; 9 of 49 labels negative), Trend Vision One (7 models, 1 hard; 7 of 26 labels negative), Cisco XDR (6 models, 1 hard; 6 of 17 labels negative), CrowdStrike Falcon (5 models; 6 of 26 labels negative)
- **feature-flags**: LaunchDarkly (12 models, 4 hard; 19 of 66 labels negative), Split (8 models, 1 hard; 9 of 30 labels negative), Statsig (7 models; 8 of 35 labels negative), Unleash (7 models; 7 of 61 labels negative)
- **grc-platforms**: Archer (11 models, 2 hard; 16 of 37 labels negative), ServiceNow Integrated Risk Management (10 models; 14 of 56 labels negative), MetricStream (9 models, 2 hard; 12 of 51 labels negative), Drata (7 models, 1 hard; 10 of 30 labels negative)
- **identity-governance**: SailPoint (10 models, 2 hard; 13 of 35 labels negative), Saviynt Enterprise Identity Cloud (9 models, 2 hard; 12 of 53 labels negative), Okta Identity Governance (8 models, 2 hard; 13 of 40 labels negative), Microsoft Entra ID Governance (6 models; 7 of 40 labels negative)
- **incident-management-and-on-call**: Opsgenie (12 models, 19 hard; 25 of 37 labels negative), PagerDuty (11 models, 2 hard; 16 of 64 labels negative), ServiceNow (5 models, 1 hard; 5 of 19 labels negative), incident.io (5 models; 6 of 41 labels negative)
- **infrastructure-as-code**: AWS CloudFormation (10 models, 4 hard; 12 of 44 labels negative), Terraform (10 models, 4 hard; 18 of 74 labels negative), Pulumi (9 models; 11 of 65 labels negative), Chef (8 models, 5 hard; 8 of 12 labels negative)
- **infrastructure-monitoring**: Datadog (10 models, 7 hard; 19 of 62 labels negative), Nagios (9 models, 6 hard; 11 of 13 labels negative), Dynatrace (8 models, 2 hard; 9 of 57 labels negative), Zabbix (8 models, 2 hard; 10 of 28 labels negative)
- **it-asset-management**: ServiceNow IT Asset Management (11 models, 1 hard; 16 of 64 labels negative), Flexera One (7 models, 1 hard; 7 of 47 labels negative), SolarWinds Service Desk (6 models, 3 hard; 6 of 9 labels negative), Snipe-IT (5 models, 3 hard; 5 of 11 labels negative)
- **it-service-management**: ServiceNow (11 models, 4 hard; 16 of 48 labels negative), Jira Service Management (9 models, 2 hard; 9 of 54 labels negative), BMC Helix ITSM (8 models, 3 hard; 9 of 44 labels negative), Freshservice (8 models, 1 hard; 11 of 51 labels negative)
- **llm-gateways-and-observability**: LiteLLM (10 models, 4 hard; 13 of 54 labels negative), OpenRouter (6 models, 4 hard; 10 of 23 labels negative), Cloudflare AI Gateway (6 models; 6 of 18 labels negative), Kong AI Gateway (4 models; 4 of 30 labels negative)
- **log-management**: Splunk (11 models, 4 hard; 21 of 61 labels negative), Datadog Log Management (10 models, 4 hard; 16 of 61 labels negative), Elastic Stack (10 models, 3 hard; 12 of 47 labels negative), Graylog (5 models, 2 hard; 5 of 21 labels negative)
- **managed-detection-and-response**: Huntress Managed EDR (2 models, 1 hard; 2 of 10 labels negative), Blackpoint Cyber (1 model, 1 hard; 1 of 1 labels negative), Arctic Wolf Managed Detection and Response (1 model; 1 of 39 labels negative), CrowdStrike (1 model; 1 of 9 labels negative)
- **managed-kubernetes-platforms**: DigitalOcean Kubernetes (8 models, 6 hard; 9 of 12 labels negative), Amazon EKS (8 models, 1 hard; 11 of 61 labels negative), Linode Kubernetes Engine (7 models, 5 hard; 7 of 8 labels negative), VMware Tanzu (6 models, 2 hard; 7 of 16 labels negative)
- **managed-relational-databases**: Azure SQL Database (8 models; 9 of 49 labels negative), Amazon Aurora (6 models, 2 hard; 9 of 36 labels negative), Amazon RDS (6 models, 1 hard; 6 of 46 labels negative), PlanetScale (5 models, 1 hard; 5 of 7 labels negative)
- **ml-platforms**: Google Vertex AI (8 models, 2 hard; 10 of 51 labels negative), Amazon SageMaker (8 models, 1 hard; 12 of 56 labels negative), Azure Machine Learning (5 models, 1 hard; 6 of 49 labels negative), Kubeflow (5 models, 1 hard; 5 of 8 labels negative)
- **multi-factor-authentication**: Okta (7 models, 1 hard; 10 of 53 labels negative), RSA SecurID (4 models, 1 hard; 4 of 16 labels negative), Microsoft Authenticator (3 models; 3 of 9 labels negative), Cisco Duo (2 models; 2 of 52 labels negative)
- **next-generation-firewalls**: Palo Alto Networks (7 models; 10 of 40 labels negative), Cisco (5 models; 6 of 23 labels negative), Check Point (3 models, 1 hard; 3 of 32 labels negative), Cisco Secure Firewall (3 models; 3 of 23 labels negative)
- **nosql-databases**: Apache Cassandra (9 models; 10 of 35 labels negative), MongoDB (8 models, 1 hard; 12 of 62 labels negative), Apache CouchDB (6 models, 3 hard; 6 of 6 labels negative), Redis (6 models, 2 hard; 9 of 39 labels negative)
- **object-storage**: Google Cloud Storage (8 models, 3 hard; 12 of 42 labels negative), Amazon S3 (8 models, 2 hard; 12 of 52 labels negative), Azure Blob Storage (8 models, 2 hard; 12 of 39 labels negative), Wasabi (7 models, 1 hard; 8 of 35 labels negative)
- **observability-platforms**: Datadog (11 models, 10 hard; 19 of 64 labels negative), New Relic (10 models, 4 hard; 15 of 53 labels negative), Dynatrace (7 models, 1 hard; 9 of 51 labels negative), Splunk (5 models, 3 hard; 7 of 19 labels negative)
- **patch-management**: NinjaOne (6 models, 1 hard; 8 of 35 labels negative), Windows Server Update Services (5 models, 6 hard; 6 of 8 labels negative), Tanium (5 models, 2 hard; 8 of 32 labels negative), Microsoft Configuration Manager (5 models, 1 hard; 6 of 17 labels negative)
- **penetration-testing-as-a-service**: Bugcrowd (2 models, 2 hard; 3 of 12 labels negative), Bishop Fox (2 models, 1 hard; 2 of 27 labels negative), HackerOne (1 model, 2 hard; 3 of 21 labels negative), AttackIQ Flex (1 model, 1 hard; 1 of 1 labels negative)
- **privileged-access-management**: CyberArk (8 models, 2 hard; 13 of 53 labels negative), BeyondTrust (7 models, 3 hard; 9 of 52 labels negative), HashiCorp Vault (5 models, 3 hard; 7 of 11 labels negative), ManageEngine PAM360 (5 models, 3 hard; 5 of 14 labels negative)
- **remote-monitoring-and-management**: Atera (11 models, 4 hard; 18 of 39 labels negative), ConnectWise Automate (8 models; 9 of 22 labels negative), Syncro (7 models, 5 hard; 9 of 20 labels negative), TeamViewer (6 models, 1 hard; 6 of 7 labels negative)
- **sase-platforms**: Zscaler Zero Trust Exchange (8 models; 14 of 58 labels negative), Cloudflare One (7 models, 1 hard; 9 of 34 labels negative), Check Point Harmony SASE (6 models, 3 hard; 6 of 13 labels negative), Palo Alto Networks Prisma SASE (6 models; 7 of 49 labels negative)
- **sd-wan**: VMware VeloCloud SD-WAN (9 models, 5 hard; 21 of 45 labels negative), Cisco Meraki SD-WAN (6 models, 2 hard; 6 of 13 labels negative), Fortinet Secure SD-WAN (5 models; 5 of 53 labels negative), Palo Alto Networks Prisma SD-WAN (5 models; 5 of 43 labels negative)
- **secrets-management**: AWS Secrets Manager (10 models, 1 hard; 16 of 52 labels negative), Azure Key Vault (10 models; 15 of 49 labels negative), Google Secret Manager (10 models; 14 of 36 labels negative), Doppler (8 models, 1 hard; 11 of 41 labels negative)
- **security-awareness-training**: KnowBe4 (7 models, 4 hard; 11 of 60 labels negative), Proofpoint ZenGuide (6 models; 7 of 55 labels negative), Arctic Wolf Managed Security Awareness (4 models, 1 hard; 4 of 11 labels negative), MetaCompliance (4 models, 1 hard; 4 of 15 labels negative)
- **siem-platforms**: IBM QRadar (10 models, 4 hard; 15 of 43 labels negative), Microsoft Sentinel (10 models, 2 hard; 14 of 54 labels negative), Splunk Enterprise Security (10 models; 12 of 45 labels negative), LogRhythm (9 models, 8 hard; 9 of 14 labels negative)
- **soar-platforms**: Splunk SOAR (10 models, 3 hard; 14 of 55 labels negative), Cortex XSOAR (8 models, 3 hard; 12 of 54 labels negative), IBM QRadar SOAR (5 models, 3 hard; 5 of 33 labels negative), Google Security Operations SOAR (4 models; 4 of 16 labels negative)
- **software-composition-analysis**: OWASP Dependency-Check (7 models, 3 hard; 11 of 18 labels negative), Snyk Open Source (7 models, 2 hard; 9 of 47 labels negative), Mend.io (4 models, 1 hard; 7 of 41 labels negative), FOSSA (3 models, 1 hard; 3 of 16 labels negative)
- **source-control-hosting**: GitHub (12 models, 1 hard; 14 of 79 labels negative), Bitbucket (10 models, 5 hard; 16 of 69 labels negative), AWS CodeCommit (7 models, 2 hard; 7 of 10 labels negative), GitLab (7 models, 1 hard; 8 of 74 labels negative)
- **static-application-security-testing**: OpenText Fortify (10 models, 5 hard; 14 of 51 labels negative), SonarQube (9 models, 4 hard; 14 of 48 labels negative), Veracode (9 models, 3 hard; 11 of 46 labels negative), Checkmarx One (8 models, 3 hard; 11 of 63 labels negative)
- **streaming-platforms**: Amazon Kinesis Data Streams (10 models, 4 hard; 13 of 39 labels negative), Apache Pulsar (8 models, 2 hard; 11 of 31 labels negative), RabbitMQ (6 models, 4 hard; 7 of 8 labels negative), Confluent Cloud (6 models, 2 hard; 7 of 59 labels negative)
- **third-party-risk-management**: SecurityScorecard (8 models, 2 hard; 11 of 40 labels negative), OneTrust Third-Party Risk Management (7 models, 2 hard; 10 of 46 labels negative), Bitsight (7 models, 1 hard; 10 of 47 labels negative), Archer (6 models; 8 of 21 labels negative)
- **threat-intelligence-platforms**: Recorded Future (7 models, 1 hard; 8 of 59 labels negative), Mandiant (4 models, 3 hard; 4 of 13 labels negative), MISP (4 models, 2 hard; 4 of 10 labels negative), ThreatConnect (4 models, 1 hard; 7 of 33 labels negative)
- **unified-endpoint-management**: Omnissa Workspace ONE (11 models, 1 hard; 16 of 68 labels negative), Citrix Endpoint Management (7 models, 3 hard; 7 of 8 labels negative), Ivanti (7 models, 2 hard; 7 of 16 labels negative), ManageEngine Endpoint Central (6 models, 2 hard; 7 of 35 labels negative)
- **vector-databases**: Pinecone (11 models, 4 hard; 18 of 64 labels negative), pgvector (8 models; 17 of 54 labels negative), Chroma (7 models, 6 hard; 10 of 15 labels negative), Milvus (7 models, 1 hard; 8 of 41 labels negative)
- **vulnerability-management-platforms**: Qualys (7 models; 8 of 24 labels negative), Tenable (7 models; 7 of 30 labels negative), Qualys VMDR (5 models, 1 hard; 5 of 37 labels negative), Rapid7 (5 models; 5 of 17 labels negative)
- **web-application-firewalls**: AWS WAF (9 models, 5 hard; 15 of 46 labels negative), Imperva (5 models, 1 hard; 5 of 33 labels negative), Azure WAF (4 models, 3 hard; 6 of 15 labels negative), GCP Cloud Armor (3 models, 2 hard; 4 of 4 labels negative)
- **workflow-orchestration**: Zapier (10 models, 10 hard; 14 of 20 labels negative), AWS Step Functions (8 models, 3 hard; 9 of 18 labels negative), Apache Airflow (8 models, 1 hard; 10 of 46 labels negative), Make (7 models, 7 hard; 9 of 13 labels negative)
- **workforce-identity-and-sso**: Ping Identity (8 models, 2 hard; 10 of 61 labels negative), Microsoft Entra ID (6 models; 6 of 67 labels negative), Okta Workforce Identity (6 models; 6 of 37 labels negative), OneLogin (5 models, 3 hard; 7 of 14 labels negative)
- **zero-trust-network-access**: Zscaler Private Access (6 models, 1 hard; 7 of 49 labels negative), Check Point Harmony SASE (5 models, 1 hard; 6 of 15 labels negative), Palo Alto Networks Prisma Access (5 models; 5 of 40 labels negative), Netskope Private Access (3 models, 1 hard; 4 of 17 labels negative)

## Leadership and criticism

First-choice share and negative label rate are independent, so every product with at least 10 labels in a category is placed on both axes. Cutoffs: leader at 30% or more of first choices, criticized at 25% or more negative labels. An endorsed leader is recommended and not criticized; a criticized default is recommended while the models list its problems; a criticized challenger is named mostly to be warned against.

| Category | Product | First-choice share | Negative rate | Labels | Quadrant |
|---|---|---|---|---|---|
| ai-coding-assistants | GitHub Copilot | 95% | 16% | 68 | endorsed leader |
| ai-coding-assistants | Amazon Q Developer | 5% | 12% | 40 | accepted challenger |
| ai-coding-assistants | Augment Code | 0% | 0% | 16 | accepted challenger |
| ai-coding-assistants | Sourcegraph Cody | 0% | 0% | 14 | accepted challenger |
| ai-coding-assistants | Tabnine | 0% | 7% | 44 | accepted challenger |
| ai-coding-assistants | Gemini Code Assist | 0% | 17% | 12 | accepted challenger |
| ai-coding-assistants | Windsurf | 0% | 21% | 14 | accepted challenger |
| ai-coding-assistants | Claude Code | 0% | 40% | 25 | criticized challenger |
| ai-coding-assistants | Cursor | 0% | 45% | 49 | criticized challenger |
| api-gateways | Kong Gateway | 45% | 17% | 65 | endorsed leader |
| api-gateways | Apigee | 36% | 25% | 63 | criticized default |
| api-gateways | Tyk | 9% | 6% | 31 | accepted challenger |
| api-gateways | Zuplo | 2% | 9% | 11 | accepted challenger |
| api-gateways | MuleSoft Anypoint Platform | 2% | 20% | 35 | accepted challenger |
| api-gateways | Amazon API Gateway | 2% | 34% | 56 | criticized challenger |
| api-gateways | IBM API Connect | 0% | 0% | 11 | accepted challenger |
| api-gateways | Gloo Gateway | 0% | 0% | 11 | accepted challenger |
| api-gateways | Apache APISIX | 0% | 7% | 15 | accepted challenger |
| api-gateways | NGINX | 0% | 10% | 10 | accepted challenger |
| api-gateways | Azure API Management | 0% | 15% | 46 | accepted challenger |
| api-management | Apigee | 29% | 20% | 59 | accepted challenger |
| api-management | MuleSoft Anypoint Platform | 29% | 26% | 58 | criticized challenger |
| api-management | Kong Gateway | 16% | 19% | 64 | accepted challenger |
| api-management | Azure API Management | 12% | 19% | 53 | accepted challenger |
| api-management | IBM API Connect | 2% | 7% | 27 | accepted challenger |
| api-management | Gravitee | 2% | 17% | 12 | accepted challenger |
| api-management | Tyk | 2% | 23% | 22 | accepted challenger |
| api-management | WSO2 API Manager | 0% | 19% | 16 | accepted challenger |
| api-management | Amazon API Gateway | 0% | 47% | 45 | criticized challenger |
| application-performance-monitoring | Dynatrace | 46% | 21% | 62 | endorsed leader |
| application-performance-monitoring | Datadog | 26% | 29% | 58 | criticized challenger |
| application-performance-monitoring | New Relic | 11% | 12% | 59 | accepted challenger |
| application-performance-monitoring | CubeAPM | 9% | 0% | 10 | accepted challenger |
| application-performance-monitoring | AppDynamics | 2% | 24% | 41 | accepted challenger |
| application-performance-monitoring | Grafana Cloud | 0% | 0% | 12 | accepted challenger |
| application-performance-monitoring | Elastic APM | 0% | 8% | 12 | accepted challenger |
| application-performance-monitoring | IBM Instana | 0% | 8% | 12 | accepted challenger |
| attack-surface-management | Bitsight | 21% | 4% | 25 | accepted challenger |
| attack-surface-management | Microsoft Defender External Attack Surface Management | 19% | 18% | 39 | accepted challenger |
| attack-surface-management | Cortex Xpanse | 16% | 19% | 43 | accepted challenger |
| attack-surface-management | CyCognito | 9% | 21% | 38 | accepted challenger |
| attack-surface-management | CrowdStrike Falcon Exposure Management | 5% | 8% | 12 | accepted challenger |
| attack-surface-management | CrowdStrike Falcon Surface | 5% | 26% | 19 | criticized challenger |
| attack-surface-management | IONIX | 2% | 0% | 13 | accepted challenger |
| attack-surface-management | Wiz | 2% | 17% | 12 | accepted challenger |
| attack-surface-management | Synack | 0% | 0% | 20 | accepted challenger |
| attack-surface-management | IBM Randori | 0% | 9% | 11 | accepted challenger |
| attack-surface-management | Tenable Attack Surface Management | 0% | 17% | 18 | accepted challenger |
| attack-surface-management | Censys ASM | 0% | 39% | 28 | criticized challenger |
| backup-and-disaster-recovery | Veeam Data Platform | 22% | 5% | 21 | accepted challenger |
| backup-and-disaster-recovery | Veeam | 20% | 3% | 29 | accepted challenger |
| backup-and-disaster-recovery | Commvault | 11% | 4% | 46 | accepted challenger |
| backup-and-disaster-recovery | Rubrik | 9% | 8% | 36 | accepted challenger |
| backup-and-disaster-recovery | Cohesity | 4% | 12% | 34 | accepted challenger |
| backup-and-disaster-recovery | Druva | 2% | 0% | 25 | accepted challenger |
| backup-and-disaster-recovery | Zerto | 0% | 0% | 13 | accepted challenger |
| backup-and-disaster-recovery | Veritas NetBackup | 0% | 10% | 10 | accepted challenger |
| business-password-managers | Bitwarden | 43% | 3% | 65 | endorsed leader |
| business-password-managers | 1Password | 32% | 13% | 63 | endorsed leader |
| business-password-managers | Keeper Security | 21% | 3% | 58 | accepted challenger |
| business-password-managers | Dashlane | 2% | 30% | 44 | criticized challenger |
| business-password-managers | NordPass | 0% | 5% | 22 | accepted challenger |
| business-password-managers | LastPass | 0% | 81% | 32 | criticized challenger |
| ci-cd-platforms | GitLab CI/CD | 44% | 9% | 65 | endorsed leader |
| ci-cd-platforms | GitHub Actions | 16% | 24% | 46 | accepted challenger |
| ci-cd-platforms | GitHub | 12% | 0% | 15 | accepted challenger |
| ci-cd-platforms | Azure DevOps | 8% | 9% | 35 | accepted challenger |
| ci-cd-platforms | Jenkins | 8% | 51% | 53 | criticized challenger |
| ci-cd-platforms | Buildkite | 6% | 17% | 18 | accepted challenger |
| ci-cd-platforms | CloudBees CI | 2% | 0% | 11 | accepted challenger |
| ci-cd-platforms | CircleCI | 2% | 32% | 44 | criticized challenger |
| ci-cd-platforms | Harness | 0% | 0% | 26 | accepted challenger |
| ci-cd-platforms | Octopus Deploy | 0% | 0% | 11 | accepted challenger |
| ci-cd-platforms | JetBrains TeamCity | 0% | 21% | 24 | accepted challenger |
| cloud-cost-management | IBM Apptio Cloudability | 45% | 22% | 54 | endorsed leader |
| cloud-cost-management | CloudZero | 18% | 3% | 38 | accepted challenger |
| cloud-cost-management | Vantage | 11% | 9% | 33 | accepted challenger |
| cloud-cost-management | Finout | 7% | 0% | 15 | accepted challenger |
| cloud-cost-management | Cloudaware | 5% | 10% | 10 | accepted challenger |
| cloud-cost-management | VMware Tanzu CloudHealth | 5% | 26% | 38 | criticized challenger |
| cloud-cost-management | Flexera One FinOps | 2% | 0% | 10 | accepted challenger |
| cloud-cost-management | ProsperOps | 2% | 13% | 15 | accepted challenger |
| cloud-cost-management | Flexera One | 2% | 17% | 29 | accepted challenger |
| cloud-cost-management | Harness Cloud Cost Management | 0% | 6% | 17 | accepted challenger |
| cloud-cost-management | Kubecost | 0% | 16% | 19 | accepted challenger |
| cloud-cost-management | nOps | 0% | 17% | 12 | accepted challenger |
| cloud-cost-management | CAST AI | 0% | 17% | 18 | accepted challenger |
| cloud-cost-management | Microsoft Cost Management | 0% | 64% | 11 | criticized challenger |
| cloud-cost-management | AWS Cost Explorer | 0% | 73% | 11 | criticized challenger |
| cloud-hosting | Amazon Web Services | 57% | 17% | 59 | endorsed leader |
| cloud-hosting | Microsoft Azure | 27% | 4% | 46 | accepted challenger |
| cloud-hosting | Oracle Cloud Infrastructure | 5% | 12% | 26 | accepted challenger |
| cloud-hosting | Azure | 5% | 62% | 13 | criticized challenger |
| cloud-hosting | Google Cloud | 2% | 13% | 54 | accepted challenger |
| cloud-hosting | IBM | 0% | 6% | 17 | accepted challenger |
| cloud-hosting | Alibaba Cloud | 0% | 55% | 11 | criticized challenger |
| cloud-hosting | DigitalOcean | 0% | 60% | 10 | criticized challenger |
| cloud-native-application-protection | Wiz | 49% | 16% | 58 | endorsed leader |
| cloud-native-application-protection | Microsoft Defender for Cloud | 28% | 10% | 49 | accepted challenger |
| cloud-native-application-protection | Prisma Cloud | 13% | 20% | 45 | accepted challenger |
| cloud-native-application-protection | Orca Security | 8% | 12% | 32 | accepted challenger |
| cloud-native-application-protection | Check Point CloudGuard | 3% | 10% | 10 | accepted challenger |
| cloud-native-application-protection | CrowdStrike Falcon Cloud Security | 0% | 5% | 21 | accepted challenger |
| cloud-native-application-protection | Sysdig | 0% | 12% | 26 | accepted challenger |
| cloud-native-application-protection | Aqua Security | 0% | 31% | 13 | criticized challenger |
| cloud-native-application-protection | FortiCNAPP | 0% | 46% | 13 | criticized challenger |
| cloud-security-posture-management | Wiz | 58% | 18% | 62 | endorsed leader |
| cloud-security-posture-management | Prisma Cloud | 16% | 23% | 61 | accepted challenger |
| cloud-security-posture-management | Microsoft Defender for Cloud | 12% | 18% | 49 | accepted challenger |
| cloud-security-posture-management | Orca Security | 5% | 10% | 40 | accepted challenger |
| cloud-security-posture-management | CrowdStrike Falcon Cloud Security | 2% | 5% | 20 | accepted challenger |
| cloud-security-posture-management | Tenable Cloud Security | 0% | 8% | 13 | accepted challenger |
| cloud-security-posture-management | Orca | 0% | 30% | 10 | criticized challenger |
| compliance-automation | Vanta | 48% | 23% | 65 | endorsed leader |
| compliance-automation | Drata | 18% | 28% | 60 | criticized challenger |
| compliance-automation | Hyperproof | 5% | 7% | 29 | accepted challenger |
| compliance-automation | OneTrust | 2% | 26% | 19 | criticized challenger |
| compliance-automation | Secureframe | 2% | 28% | 40 | criticized challenger |
| compliance-automation | ServiceNow Integrated Risk Management | 2% | 38% | 16 | criticized challenger |
| compliance-automation | AuditBoard | 0% | 9% | 23 | accepted challenger |
| compliance-automation | Scytale | 0% | 23% | 13 | accepted challenger |
| compliance-automation | MetricStream | 0% | 27% | 11 | criticized challenger |
| compliance-automation | Thoropass | 0% | 40% | 10 | criticized challenger |
| compliance-automation | Sprinto | 0% | 43% | 21 | criticized challenger |
| compliance-automation | Archer | 0% | 50% | 10 | criticized challenger |
| container-and-kubernetes-security | Aqua Security | 29% | 9% | 56 | accepted challenger |
| container-and-kubernetes-security | Prisma Cloud | 24% | 23% | 52 | accepted challenger |
| container-and-kubernetes-security | Wiz | 20% | 10% | 40 | accepted challenger |
| container-and-kubernetes-security | Sysdig Secure | 12% | 0% | 35 | accepted challenger |
| container-and-kubernetes-security | Sysdig | 4% | 23% | 22 | accepted challenger |
| container-and-kubernetes-security | Snyk | 4% | 35% | 23 | criticized challenger |
| container-and-kubernetes-security | SUSE NeuVector | 0% | 9% | 11 | accepted challenger |
| container-and-kubernetes-security | Red Hat Advanced Cluster Security for Kubernetes | 0% | 10% | 10 | accepted challenger |
| container-and-kubernetes-security | Snyk Container | 0% | 20% | 10 | accepted challenger |
| container-and-kubernetes-security | Falco | 0% | 22% | 18 | accepted challenger |
| container-and-kubernetes-security | Trivy | 0% | 25% | 12 | criticized challenger |
| content-delivery-networks | Cloudflare | 53% | 15% | 60 | endorsed leader |
| content-delivery-networks | Akamai | 35% | 7% | 57 | endorsed leader |
| content-delivery-networks | BlazingCDN | 7% | 10% | 10 | accepted challenger |
| content-delivery-networks | Amazon CloudFront | 5% | 22% | 51 | accepted challenger |
| content-delivery-networks | Google Cloud CDN | 0% | 11% | 18 | accepted challenger |
| content-delivery-networks | Fastly | 0% | 20% | 49 | accepted challenger |
| content-delivery-networks | Bunny.net | 0% | 46% | 13 | criticized challenger |
| customer-identity-and-access-management | Auth0 | 47% | 16% | 61 | endorsed leader |
| customer-identity-and-access-management | WorkOS | 13% | 26% | 23 | criticized challenger |
| customer-identity-and-access-management | FusionAuth | 11% | 15% | 13 | accepted challenger |
| customer-identity-and-access-management | Microsoft Entra External ID | 9% | 4% | 49 | accepted challenger |
| customer-identity-and-access-management | LoginRadius | 6% | 0% | 14 | accepted challenger |
| customer-identity-and-access-management | Descope | 4% | 0% | 15 | accepted challenger |
| customer-identity-and-access-management | Ping Identity | 4% | 12% | 43 | accepted challenger |
| customer-identity-and-access-management | Frontegg | 2% | 18% | 17 | accepted challenger |
| customer-identity-and-access-management | IBM Verify | 0% | 0% | 15 | accepted challenger |
| customer-identity-and-access-management | WSO2 Identity Server | 0% | 0% | 10 | accepted challenger |
| customer-identity-and-access-management | ForgeRock | 0% | 27% | 11 | criticized challenger |
| customer-identity-and-access-management | Keycloak | 0% | 33% | 12 | criticized challenger |
| customer-identity-and-access-management | Stytch | 0% | 38% | 13 | criticized challenger |
| customer-identity-and-access-management | Amazon Cognito | 0% | 50% | 16 | criticized challenger |
| data-loss-prevention | Microsoft Purview DLP | 52% | 16% | 58 | endorsed leader |
| data-loss-prevention | Forcepoint DLP | 19% | 18% | 56 | accepted challenger |
| data-loss-prevention | Symantec Data Loss Prevention | 12% | 36% | 55 | criticized challenger |
| data-loss-prevention | Cyberhaven | 5% | 0% | 20 | accepted challenger |
| data-loss-prevention | Netskope DLP | 2% | 8% | 26 | accepted challenger |
| data-loss-prevention | Proofpoint Enterprise DLP | 2% | 14% | 29 | accepted challenger |
| data-loss-prevention | Zscaler | 0% | 6% | 17 | accepted challenger |
| data-loss-prevention | Trellix DLP | 0% | 36% | 11 | criticized challenger |
| data-warehouses | Snowflake | 72% | 22% | 67 | endorsed leader |
| data-warehouses | Amazon Redshift | 15% | 25% | 65 | accepted challenger |
| data-warehouses | Google BigQuery | 13% | 16% | 68 | accepted challenger |
| data-warehouses | Databricks | 0% | 11% | 35 | accepted challenger |
| data-warehouses | Databricks SQL | 0% | 15% | 13 | accepted challenger |
| data-warehouses | Microsoft Fabric | 0% | 16% | 19 | accepted challenger |
| data-warehouses | ClickHouse Cloud | 0% | 27% | 11 | criticized challenger |
| data-warehouses | Azure Synapse Analytics | 0% | 29% | 24 | criticized challenger |
| ddos-protection | Cloudflare | 80% | 3% | 59 | endorsed leader |
| ddos-protection | Akamai Prolexic | 13% | 5% | 57 | accepted challenger |
| ddos-protection | Imperva | 2% | 8% | 38 | accepted challenger |
| ddos-protection | NETSCOUT Arbor | 0% | 0% | 10 | accepted challenger |
| ddos-protection | Radware | 0% | 7% | 29 | accepted challenger |
| ddos-protection | Azure DDoS Protection | 0% | 9% | 32 | accepted challenger |
| ddos-protection | Google Cloud Armor | 0% | 10% | 10 | accepted challenger |
| ddos-protection | Fastly | 0% | 10% | 10 | accepted challenger |
| ddos-protection | AWS Shield | 0% | 10% | 49 | accepted challenger |
| email-security | Proofpoint Email Protection | 40% | 18% | 55 | endorsed leader |
| email-security | Microsoft Defender for Office 365 | 38% | 14% | 50 | endorsed leader |
| email-security | Abnormal AI | 10% | 17% | 41 | accepted challenger |
| email-security | Mimecast Email Security | 2% | 24% | 49 | accepted challenger |
| email-security | Check Point Harmony Email & Collaboration | 0% | 6% | 17 | accepted challenger |
| email-security | IRONSCALES | 0% | 7% | 15 | accepted challenger |
| email-security | Sublime Security | 0% | 9% | 11 | accepted challenger |
| email-security | Barracuda Email Protection | 0% | 31% | 13 | criticized challenger |
| email-security | Cisco Secure Email | 0% | 35% | 20 | criticized challenger |
| endpoint-detection-and-response | CrowdStrike Falcon | 43% | 16% | 49 | endorsed leader |
| endpoint-detection-and-response | Microsoft Defender for Endpoint | 39% | 7% | 58 | endorsed leader |
| endpoint-detection-and-response | SentinelOne Singularity | 7% | 2% | 59 | accepted challenger |
| endpoint-detection-and-response | Palo Alto Networks Cortex XDR | 0% | 9% | 34 | accepted challenger |
| endpoint-detection-and-response | Sophos Intercept X | 0% | 11% | 18 | accepted challenger |
| endpoint-detection-and-response | Trend Micro | 0% | 18% | 17 | accepted challenger |
| endpoint-protection | Microsoft Defender for Endpoint | 43% | 6% | 53 | endorsed leader |
| endpoint-protection | CrowdStrike Falcon | 30% | 11% | 46 | endorsed leader |
| endpoint-protection | SentinelOne Singularity | 9% | 10% | 29 | accepted challenger |
| endpoint-protection | CrowdStrike | 5% | 27% | 15 | criticized challenger |
| endpoint-protection | SentinelOne | 2% | 9% | 22 | accepted challenger |
| endpoint-protection | Palo Alto Networks Cortex XDR | 0% | 0% | 27 | accepted challenger |
| endpoint-protection | Bitdefender GravityZone | 0% | 6% | 16 | accepted challenger |
| endpoint-protection | Sophos Intercept X | 0% | 8% | 12 | accepted challenger |
| endpoint-protection | Sophos | 0% | 10% | 10 | accepted challenger |
| endpoint-protection | ESET PROTECT | 0% | 25% | 12 | criticized challenger |
| error-and-crash-monitoring | Sentry | 62% | 21% | 67 | endorsed leader |
| error-and-crash-monitoring | Datadog | 11% | 35% | 49 | criticized challenger |
| error-and-crash-monitoring | Rollbar | 7% | 12% | 48 | accepted challenger |
| error-and-crash-monitoring | Bugsnag | 4% | 21% | 39 | accepted challenger |
| error-and-crash-monitoring | New Relic | 4% | 31% | 36 | criticized challenger |
| error-and-crash-monitoring | Honeybadger | 4% | 33% | 12 | criticized challenger |
| error-and-crash-monitoring | Datadog Error Tracking | 2% | 17% | 12 | accepted challenger |
| error-and-crash-monitoring | Raygun | 0% | 31% | 16 | criticized challenger |
| etl-and-elt | Fivetran | 49% | 25% | 53 | endorsed leader |
| etl-and-elt | Integrate.io | 28% | 4% | 25 | accepted challenger |
| etl-and-elt | Matillion | 5% | 3% | 35 | accepted challenger |
| etl-and-elt | Airbyte | 5% | 9% | 43 | accepted challenger |
| etl-and-elt | Informatica Intelligent Data Management Cloud | 5% | 36% | 11 | criticized challenger |
| etl-and-elt | Talend | 3% | 37% | 41 | criticized challenger |
| etl-and-elt | Informatica | 3% | 38% | 24 | criticized challenger |
| etl-and-elt | Informatica PowerCenter | 3% | 57% | 14 | criticized challenger |
| etl-and-elt | Databricks | 0% | 0% | 10 | accepted challenger |
| etl-and-elt | dbt | 0% | 4% | 25 | accepted challenger |
| etl-and-elt | Apache Airflow | 0% | 8% | 13 | accepted challenger |
| etl-and-elt | AWS Glue | 0% | 15% | 27 | accepted challenger |
| etl-and-elt | Azure Data Factory | 0% | 22% | 23 | accepted challenger |
| etl-and-elt | Stitch | 0% | 25% | 12 | criticized challenger |
| etl-and-elt | Hevo Data | 0% | 33% | 21 | criticized challenger |
| etl-and-elt | IBM DataStage | 0% | 43% | 21 | criticized challenger |
| etl-and-elt | Microsoft SQL Server Integration Services | 0% | 62% | 13 | criticized challenger |
| extended-detection-and-response | Microsoft Defender XDR | 46% | 10% | 52 | endorsed leader |
| extended-detection-and-response | Palo Alto Networks Cortex XDR | 15% | 18% | 49 | accepted challenger |
| extended-detection-and-response | CrowdStrike Falcon XDR | 11% | 10% | 20 | accepted challenger |
| extended-detection-and-response | CrowdStrike Falcon | 9% | 23% | 26 | accepted challenger |
| extended-detection-and-response | Stellar Cyber | 4% | 4% | 24 | accepted challenger |
| extended-detection-and-response | SentinelOne Singularity | 4% | 10% | 40 | accepted challenger |
| extended-detection-and-response | Trend Vision One | 0% | 27% | 26 | criticized challenger |
| extended-detection-and-response | Cisco XDR | 0% | 35% | 17 | criticized challenger |
| feature-flags | LaunchDarkly | 59% | 29% | 66 | criticized default |
| feature-flags | ConfigCat | 13% | 10% | 20 | accepted challenger |
| feature-flags | Unleash | 9% | 11% | 61 | accepted challenger |
| feature-flags | Flagsmith | 4% | 11% | 36 | accepted challenger |
| feature-flags | GrowthBook | 2% | 9% | 23 | accepted challenger |
| feature-flags | Statsig | 2% | 23% | 35 | accepted challenger |
| feature-flags | Split | 2% | 30% | 30 | criticized challenger |
| grc-platforms | ServiceNow Integrated Risk Management | 36% | 25% | 56 | criticized default |
| grc-platforms | MetricStream | 21% | 24% | 51 | accepted challenger |
| grc-platforms | Drata | 9% | 33% | 30 | criticized challenger |
| grc-platforms | Vanta | 9% | 34% | 29 | criticized challenger |
| grc-platforms | Optro | 4% | 0% | 11 | accepted challenger |
| grc-platforms | AuditBoard | 4% | 10% | 29 | accepted challenger |
| grc-platforms | OneTrust | 4% | 19% | 32 | accepted challenger |
| grc-platforms | Hyperproof | 2% | 0% | 10 | accepted challenger |
| grc-platforms | Sprinto | 2% | 25% | 12 | criticized challenger |
| grc-platforms | Riskonnect | 0% | 0% | 13 | accepted challenger |
| grc-platforms | LogicGate | 0% | 12% | 17 | accepted challenger |
| grc-platforms | Diligent One | 0% | 12% | 17 | accepted challenger |
| grc-platforms | IBM OpenPages | 0% | 22% | 18 | accepted challenger |
| grc-platforms | Archer | 0% | 43% | 37 | criticized challenger |
| identity-governance | SailPoint | 29% | 37% | 35 | criticized challenger |
| identity-governance | SailPoint Identity Security Cloud | 24% | 6% | 18 | accepted challenger |
| identity-governance | Microsoft Entra ID Governance | 18% | 18% | 40 | accepted challenger |
| identity-governance | Saviynt Enterprise Identity Cloud | 9% | 23% | 53 | accepted challenger |
| identity-governance | Omada Identity | 2% | 4% | 23 | accepted challenger |
| identity-governance | One Identity Manager | 0% | 4% | 25 | accepted challenger |
| identity-governance | Okta | 0% | 10% | 10 | accepted challenger |
| identity-governance | Okta Identity Governance | 0% | 32% | 40 | criticized challenger |
| identity-governance | Oracle Identity Governance | 0% | 45% | 11 | criticized challenger |
| incident-management-and-on-call | PagerDuty | 50% | 25% | 64 | criticized default |
| incident-management-and-on-call | incident.io | 17% | 15% | 41 | accepted challenger |
| incident-management-and-on-call | Rootly | 10% | 10% | 41 | accepted challenger |
| incident-management-and-on-call | ServiceNow ITSM | 5% | 22% | 18 | accepted challenger |
| incident-management-and-on-call | xMatters | 2% | 0% | 13 | accepted challenger |
| incident-management-and-on-call | ServiceNow | 2% | 26% | 19 | criticized challenger |
| incident-management-and-on-call | Jira Service Management | 0% | 12% | 24 | accepted challenger |
| incident-management-and-on-call | FireHydrant | 0% | 20% | 15 | accepted challenger |
| incident-management-and-on-call | Splunk On-Call | 0% | 24% | 21 | accepted challenger |
| incident-management-and-on-call | Opsgenie | 0% | 68% | 37 | criticized challenger |
| infrastructure-as-code | Terraform | 58% | 24% | 74 | endorsed leader |
| infrastructure-as-code | OpenTofu | 18% | 2% | 44 | accepted challenger |
| infrastructure-as-code | Pulumi | 12% | 17% | 65 | accepted challenger |
| infrastructure-as-code | Spacelift | 7% | 0% | 26 | accepted challenger |
| infrastructure-as-code | env0 | 2% | 0% | 13 | accepted challenger |
| infrastructure-as-code | Puppet | 2% | 62% | 13 | criticized challenger |
| infrastructure-as-code | AWS CDK | 0% | 0% | 18 | accepted challenger |
| infrastructure-as-code | Scalr | 0% | 0% | 12 | accepted challenger |
| infrastructure-as-code | Crossplane | 0% | 0% | 26 | accepted challenger |
| infrastructure-as-code | Azure Bicep | 0% | 27% | 15 | criticized challenger |
| infrastructure-as-code | AWS CloudFormation | 0% | 27% | 44 | criticized challenger |
| infrastructure-as-code | Ansible | 0% | 38% | 24 | criticized challenger |
| infrastructure-as-code | Azure Resource Manager templates | 0% | 42% | 12 | criticized challenger |
| infrastructure-as-code | Chef | 0% | 67% | 12 | criticized challenger |
| infrastructure-monitoring | Datadog | 35% | 31% | 62 | criticized default |
| infrastructure-monitoring | Dynatrace | 33% | 16% | 57 | endorsed leader |
| infrastructure-monitoring | Netdata | 15% | 0% | 15 | accepted challenger |
| infrastructure-monitoring | Prometheus | 4% | 35% | 23 | criticized challenger |
| infrastructure-monitoring | Zabbix | 2% | 36% | 28 | criticized challenger |
| infrastructure-monitoring | Splunk | 2% | 47% | 19 | criticized challenger |
| infrastructure-monitoring | Grafana | 0% | 5% | 19 | accepted challenger |
| infrastructure-monitoring | New Relic | 0% | 17% | 48 | accepted challenger |
| infrastructure-monitoring | Prometheus + Grafana | 0% | 29% | 17 | criticized challenger |
| infrastructure-monitoring | Nagios | 0% | 85% | 13 | criticized challenger |
| it-asset-management | ServiceNow IT Asset Management | 62% | 25% | 64 | criticized default |
| it-asset-management | Flexera One | 11% | 15% | 47 | accepted challenger |
| it-asset-management | Lansweeper | 4% | 8% | 40 | accepted challenger |
| it-asset-management | ManageEngine AssetExplorer | 4% | 17% | 23 | accepted challenger |
| it-asset-management | Virima | 2% | 10% | 10 | accepted challenger |
| it-asset-management | Asset Panda | 2% | 20% | 10 | accepted challenger |
| it-asset-management | BMC Helix ITAM | 0% | 0% | 13 | accepted challenger |
| it-asset-management | Device42 | 0% | 0% | 22 | accepted challenger |
| it-asset-management | Cloudaware | 0% | 0% | 11 | accepted challenger |
| it-asset-management | Ivanti Neurons for ITAM | 0% | 15% | 33 | accepted challenger |
| it-asset-management | Snipe-IT | 0% | 45% | 11 | criticized challenger |
| it-service-management | ServiceNow | 47% | 33% | 48 | criticized default |
| it-service-management | Jira Service Management | 19% | 17% | 54 | accepted challenger |
| it-service-management | ServiceNow ITSM | 7% | 20% | 10 | accepted challenger |
| it-service-management | Freshservice | 7% | 22% | 51 | accepted challenger |
| it-service-management | ManageEngine ServiceDesk Plus | 2% | 26% | 19 | criticized challenger |
| it-service-management | BMC Helix ITSM | 0% | 20% | 44 | accepted challenger |
| it-service-management | Ivanti Neurons for ITSM | 0% | 27% | 30 | criticized challenger |
| it-service-management | Zendesk | 0% | 40% | 15 | criticized challenger |
| llm-gateways-and-observability | LiteLLM | 29% | 24% | 54 | accepted challenger |
| llm-gateways-and-observability | Bifrost | 27% | 0% | 36 | accepted challenger |
| llm-gateways-and-observability | Portkey | 15% | 12% | 43 | accepted challenger |
| llm-gateways-and-observability | Langfuse | 4% | 20% | 10 | accepted challenger |
| llm-gateways-and-observability | Kong AI Gateway | 2% | 13% | 30 | accepted challenger |
| llm-gateways-and-observability | Helicone | 2% | 23% | 13 | accepted challenger |
| llm-gateways-and-observability | Cloudflare AI Gateway | 2% | 33% | 18 | criticized challenger |
| llm-gateways-and-observability | OpenRouter | 2% | 43% | 23 | criticized challenger |
| llm-gateways-and-observability | NeuralTrust TrustGate | 0% | 0% | 10 | accepted challenger |
| log-management | Splunk | 41% | 34% | 61 | criticized default |
| log-management | Datadog Log Management | 20% | 26% | 61 | criticized challenger |
| log-management | Elastic Stack | 7% | 26% | 47 | criticized challenger |
| log-management | Sumo Logic | 6% | 15% | 33 | accepted challenger |
| log-management | Coralogix | 4% | 0% | 11 | accepted challenger |
| log-management | New Relic Logs | 4% | 14% | 22 | accepted challenger |
| log-management | Grafana Loki | 2% | 0% | 30 | accepted challenger |
| log-management | Elastic Observability | 2% | 0% | 11 | accepted challenger |
| log-management | Cribl | 2% | 0% | 13 | accepted challenger |
| log-management | Dynatrace | 2% | 17% | 18 | accepted challenger |
| log-management | Microsoft Sentinel | 0% | 0% | 12 | accepted challenger |
| log-management | OpenObserve | 0% | 0% | 12 | accepted challenger |
| log-management | Graylog | 0% | 24% | 21 | accepted challenger |
| managed-detection-and-response | CrowdStrike Falcon Complete | 37% | 0% | 39 | endorsed leader |
| managed-detection-and-response | Arctic Wolf Managed Detection and Response | 20% | 3% | 39 | accepted challenger |
| managed-detection-and-response | Red Canary | 7% | 5% | 20 | accepted challenger |
| managed-detection-and-response | Expel | 7% | 5% | 19 | accepted challenger |
| managed-detection-and-response | Sophos MDR | 2% | 0% | 20 | accepted challenger |
| managed-detection-and-response | Huntress Managed EDR | 2% | 20% | 10 | accepted challenger |
| managed-detection-and-response | Unit 42 Managed Detection and Response | 0% | 0% | 20 | accepted challenger |
| managed-detection-and-response | Rapid7 MDR | 0% | 0% | 17 | accepted challenger |
| managed-detection-and-response | SentinelOne Singularity Wayfinder | 0% | 0% | 10 | accepted challenger |
| managed-detection-and-response | SentinelOne Singularity MDR | 0% | 7% | 14 | accepted challenger |
| managed-kubernetes-platforms | Google Kubernetes Engine | 33% | 10% | 60 | endorsed leader |
| managed-kubernetes-platforms | Amazon EKS | 24% | 18% | 61 | accepted challenger |
| managed-kubernetes-platforms | Azure Kubernetes Service | 12% | 12% | 59 | accepted challenger |
| managed-kubernetes-platforms | Red Hat OpenShift | 12% | 14% | 44 | accepted challenger |
| managed-kubernetes-platforms | Portainer | 4% | 9% | 11 | accepted challenger |
| managed-kubernetes-platforms | Mirantis Kubernetes Engine | 2% | 17% | 12 | accepted challenger |
| managed-kubernetes-platforms | VMware Tanzu | 2% | 44% | 16 | criticized challenger |
| managed-kubernetes-platforms | Rancher | 0% | 8% | 26 | accepted challenger |
| managed-kubernetes-platforms | DigitalOcean Kubernetes | 0% | 75% | 12 | criticized challenger |
| managed-relational-databases | Amazon RDS | 30% | 13% | 46 | endorsed leader |
| managed-relational-databases | Amazon Aurora | 30% | 25% | 36 | criticized default |
| managed-relational-databases | Azure SQL Database | 15% | 18% | 49 | accepted challenger |
| managed-relational-databases | Google Cloud SQL | 8% | 12% | 48 | accepted challenger |
| managed-relational-databases | Oracle Autonomous Database | 2% | 15% | 13 | accepted challenger |
| managed-relational-databases | CockroachDB | 0% | 10% | 10 | accepted challenger |
| ml-platforms | Databricks | 26% | 10% | 42 | accepted challenger |
| ml-platforms | Amazon SageMaker | 19% | 21% | 56 | accepted challenger |
| ml-platforms | Azure Machine Learning | 12% | 12% | 49 | accepted challenger |
| ml-platforms | Domino Data Lab | 7% | 0% | 16 | accepted challenger |
| ml-platforms | Dataiku | 7% | 4% | 26 | accepted challenger |
| ml-platforms | DataRobot | 5% | 14% | 28 | accepted challenger |
| ml-platforms | Google Vertex AI | 5% | 20% | 51 | accepted challenger |
| ml-platforms | H2O.ai | 2% | 17% | 12 | accepted challenger |
| ml-platforms | MLflow | 0% | 20% | 10 | accepted challenger |
| multi-factor-authentication | Microsoft Entra ID | 40% | 0% | 49 | endorsed leader |
| multi-factor-authentication | Cisco Duo | 30% | 4% | 52 | endorsed leader |
| multi-factor-authentication | Okta | 26% | 19% | 53 | accepted challenger |
| multi-factor-authentication | Ping Identity | 0% | 0% | 27 | accepted challenger |
| multi-factor-authentication | YubiKey | 0% | 3% | 29 | accepted challenger |
| multi-factor-authentication | RSA SecurID | 0% | 25% | 16 | criticized challenger |
| next-generation-firewalls | Fortinet FortiGate | 28% | 11% | 28 | accepted challenger |
| next-generation-firewalls | Palo Alto Networks | 28% | 25% | 40 | criticized challenger |
| next-generation-firewalls | Fortinet | 11% | 4% | 28 | accepted challenger |
| next-generation-firewalls | Palo Alto Networks PA-Series | 11% | 17% | 12 | accepted challenger |
| next-generation-firewalls | Check Point | 0% | 9% | 32 | accepted challenger |
| next-generation-firewalls | Cisco Secure Firewall | 0% | 13% | 23 | accepted challenger |
| next-generation-firewalls | Cisco | 0% | 26% | 23 | criticized challenger |
| nosql-databases | MongoDB | 53% | 19% | 62 | endorsed leader |
| nosql-databases | Amazon DynamoDB | 24% | 12% | 56 | accepted challenger |
| nosql-databases | Azure Cosmos DB | 4% | 12% | 40 | accepted challenger |
| nosql-databases | ScyllaDB | 2% | 5% | 19 | accepted challenger |
| nosql-databases | Couchbase | 2% | 8% | 39 | accepted challenger |
| nosql-databases | Redis | 2% | 23% | 39 | accepted challenger |
| nosql-databases | Aerospike | 0% | 6% | 16 | accepted challenger |
| nosql-databases | Neo4j | 0% | 16% | 19 | accepted challenger |
| nosql-databases | Apache Cassandra | 0% | 29% | 35 | criticized challenger |
| object-storage | Amazon S3 | 30% | 23% | 52 | endorsed leader |
| object-storage | Wasabi | 25% | 23% | 35 | accepted challenger |
| object-storage | Cloudflare R2 | 12% | 21% | 28 | accepted challenger |
| object-storage | Backblaze B2 | 10% | 16% | 31 | accepted challenger |
| object-storage | NetApp StorageGRID | 8% | 0% | 15 | accepted challenger |
| object-storage | Scality RING | 5% | 6% | 17 | accepted challenger |
| object-storage | IBM Cloud Object Storage | 2% | 0% | 20 | accepted challenger |
| object-storage | Azure Blob Storage | 2% | 31% | 39 | criticized challenger |
| object-storage | Cloudian HyperStore | 0% | 0% | 18 | accepted challenger |
| object-storage | MinIO | 0% | 11% | 27 | accepted challenger |
| object-storage | Google Cloud Storage | 0% | 29% | 42 | criticized challenger |
| observability-platforms | Datadog | 36% | 30% | 64 | criticized default |
| observability-platforms | Dynatrace | 24% | 18% | 51 | accepted challenger |
| observability-platforms | Grafana | 7% | 16% | 31 | accepted challenger |
| observability-platforms | Coralogix | 5% | 0% | 10 | accepted challenger |
| observability-platforms | Splunk Observability Cloud | 5% | 12% | 33 | accepted challenger |
| observability-platforms | New Relic | 5% | 28% | 53 | criticized challenger |
| observability-platforms | Chronosphere | 0% | 8% | 12 | accepted challenger |
| observability-platforms | Splunk | 0% | 37% | 19 | criticized challenger |
| patch-management | Microsoft Intune | 13% | 12% | 26 | accepted challenger |
| patch-management | ManageEngine Patch Manager Plus | 10% | 12% | 34 | accepted challenger |
| patch-management | Ivanti Neurons for Patch Management | 10% | 12% | 17 | accepted challenger |
| patch-management | Automox | 10% | 15% | 39 | accepted challenger |
| patch-management | Tanium | 8% | 25% | 32 | criticized challenger |
| patch-management | Patch My PC | 6% | 18% | 11 | accepted challenger |
| patch-management | NinjaOne | 6% | 23% | 35 | accepted challenger |
| patch-management | Ivanti | 4% | 18% | 17 | accepted challenger |
| patch-management | Action1 | 4% | 20% | 25 | accepted challenger |
| patch-management | Microsoft Configuration Manager | 4% | 35% | 17 | criticized challenger |
| patch-management | ManageEngine Endpoint Central | 0% | 0% | 10 | accepted challenger |
| patch-management | HCL BigFix | 0% | 25% | 12 | criticized challenger |
| patch-management | SolarWinds Patch Manager | 0% | 36% | 11 | criticized challenger |
| penetration-testing-as-a-service | NetSPI | 40% | 0% | 36 | endorsed leader |
| penetration-testing-as-a-service | Synack | 23% | 0% | 42 | accepted challenger |
| penetration-testing-as-a-service | Cobalt | 15% | 6% | 35 | accepted challenger |
| penetration-testing-as-a-service | BreachLock | 4% | 0% | 13 | accepted challenger |
| penetration-testing-as-a-service | Bishop Fox | 4% | 7% | 27 | accepted challenger |
| penetration-testing-as-a-service | HackerOne | 4% | 14% | 21 | accepted challenger |
| penetration-testing-as-a-service | NCC Group | 2% | 6% | 17 | accepted challenger |
| penetration-testing-as-a-service | Mandiant | 0% | 0% | 13 | accepted challenger |
| penetration-testing-as-a-service | Bugcrowd | 0% | 25% | 12 | criticized challenger |
| privileged-access-management | CyberArk | 58% | 25% | 53 | endorsed leader |
| privileged-access-management | Delinea | 16% | 12% | 50 | accepted challenger |
| privileged-access-management | One Identity Safeguard | 3% | 0% | 11 | accepted challenger |
| privileged-access-management | KeeperPAM | 3% | 33% | 15 | criticized challenger |
| privileged-access-management | ManageEngine PAM360 | 3% | 36% | 14 | criticized challenger |
| privileged-access-management | WALLIX | 0% | 9% | 11 | accepted challenger |
| privileged-access-management | BeyondTrust | 0% | 17% | 52 | accepted challenger |
| privileged-access-management | HashiCorp Vault | 0% | 64% | 11 | criticized challenger |
| remote-monitoring-and-management | NinjaOne | 61% | 4% | 55 | endorsed leader |
| remote-monitoring-and-management | Atera | 18% | 46% | 39 | criticized challenger |
| remote-monitoring-and-management | ConnectWise RMM | 8% | 18% | 22 | accepted challenger |
| remote-monitoring-and-management | Syncro | 5% | 45% | 20 | criticized challenger |
| remote-monitoring-and-management | N-able N-central | 3% | 15% | 27 | accepted challenger |
| remote-monitoring-and-management | ConnectWise Automate | 3% | 41% | 22 | criticized challenger |
| remote-monitoring-and-management | ManageEngine Endpoint Central | 0% | 0% | 15 | accepted challenger |
| remote-monitoring-and-management | Datto RMM | 0% | 19% | 32 | accepted challenger |
| remote-monitoring-and-management | Kaseya VSA | 0% | 32% | 22 | criticized challenger |
| sase-platforms | Palo Alto Networks Prisma SASE | 31% | 14% | 49 | endorsed leader |
| sase-platforms | Cato Networks | 17% | 9% | 35 | accepted challenger |
| sase-platforms | Zscaler Zero Trust Exchange | 17% | 24% | 58 | accepted challenger |
| sase-platforms | Cato SASE Cloud | 10% | 19% | 16 | accepted challenger |
| sase-platforms | Netskope One | 7% | 11% | 45 | accepted challenger |
| sase-platforms | Cloudflare One | 7% | 26% | 34 | criticized challenger |
| sase-platforms | Fortinet FortiSASE | 2% | 12% | 43 | accepted challenger |
| sase-platforms | Cisco Secure Access | 2% | 23% | 13 | accepted challenger |
| sase-platforms | Cisco | 2% | 25% | 12 | criticized challenger |
| sase-platforms | Versa SASE | 0% | 7% | 14 | accepted challenger |
| sase-platforms | Check Point Harmony SASE | 0% | 46% | 13 | criticized challenger |
| sd-wan | Cisco Catalyst SD-WAN | 45% | 12% | 50 | endorsed leader |
| sd-wan | Fortinet Secure SD-WAN | 27% | 9% | 53 | accepted challenger |
| sd-wan | Cato Networks | 11% | 10% | 20 | accepted challenger |
| sd-wan | HPE Aruba EdgeConnect | 7% | 12% | 33 | accepted challenger |
| sd-wan | Palo Alto Networks Prisma SD-WAN | 5% | 12% | 43 | accepted challenger |
| sd-wan | Cisco | 5% | 27% | 15 | criticized challenger |
| sd-wan | Versa Secure SD-WAN | 0% | 6% | 31 | accepted challenger |
| sd-wan | Aryaka | 0% | 12% | 16 | accepted challenger |
| sd-wan | Cisco Meraki SD-WAN | 0% | 46% | 13 | criticized challenger |
| sd-wan | VMware VeloCloud SD-WAN | 0% | 47% | 45 | criticized challenger |
| secrets-management | HashiCorp Vault | 75% | 16% | 68 | endorsed leader |
| secrets-management | Akeyless | 10% | 11% | 38 | accepted challenger |
| secrets-management | Doppler | 5% | 27% | 41 | criticized challenger |
| secrets-management | 1Password | 5% | 33% | 21 | criticized challenger |
| secrets-management | Infisical | 2% | 23% | 30 | accepted challenger |
| secrets-management | AWS Secrets Manager | 2% | 31% | 52 | criticized challenger |
| secrets-management | CyberArk Conjur | 0% | 15% | 34 | accepted challenger |
| secrets-management | Azure Key Vault | 0% | 31% | 49 | criticized challenger |
| secrets-management | Google Secret Manager | 0% | 39% | 36 | criticized challenger |
| security-awareness-training | KnowBe4 | 65% | 18% | 60 | endorsed leader |
| security-awareness-training | Hoxhunt | 28% | 4% | 45 | accepted challenger |
| security-awareness-training | Infosec IQ | 2% | 17% | 12 | accepted challenger |
| security-awareness-training | SoSafe | 0% | 8% | 25 | accepted challenger |
| security-awareness-training | Proofpoint ZenGuide | 0% | 13% | 55 | accepted challenger |
| security-awareness-training | Mimecast Engage | 0% | 20% | 10 | accepted challenger |
| security-awareness-training | MetaCompliance | 0% | 27% | 15 | criticized challenger |
| security-awareness-training | Arctic Wolf Managed Security Awareness | 0% | 36% | 11 | criticized challenger |
| siem-platforms | Microsoft Sentinel | 30% | 26% | 54 | criticized challenger |
| siem-platforms | Splunk Enterprise Security | 28% | 27% | 45 | criticized challenger |
| siem-platforms | Palo Alto Networks Cortex XSIAM | 15% | 6% | 31 | accepted challenger |
| siem-platforms | Rapid7 InsightIDR | 11% | 6% | 17 | accepted challenger |
| siem-platforms | Google Security Operations | 6% | 4% | 25 | accepted challenger |
| siem-platforms | Exabeam | 2% | 4% | 28 | accepted challenger |
| siem-platforms | IBM QRadar | 2% | 35% | 43 | criticized challenger |
| siem-platforms | CrowdStrike Falcon Next-Gen SIEM | 0% | 0% | 11 | accepted challenger |
| siem-platforms | Elastic Security | 0% | 19% | 26 | accepted challenger |
| siem-platforms | Securonix | 0% | 26% | 19 | criticized challenger |
| siem-platforms | LogRhythm | 0% | 64% | 14 | criticized challenger |
| siem-platforms | Splunk | 0% | 77% | 13 | criticized challenger |
| soar-platforms | Cortex XSOAR | 40% | 22% | 54 | endorsed leader |
| soar-platforms | Splunk SOAR | 12% | 25% | 55 | criticized challenger |
| soar-platforms | Swimlane | 9% | 4% | 28 | accepted challenger |
| soar-platforms | Swimlane Turbine | 9% | 13% | 15 | accepted challenger |
| soar-platforms | Tines | 7% | 7% | 29 | accepted challenger |
| soar-platforms | D3 Security Smart SOAR | 5% | 0% | 15 | accepted challenger |
| soar-platforms | Microsoft Sentinel | 5% | 8% | 26 | accepted challenger |
| soar-platforms | IBM QRadar SOAR | 5% | 15% | 33 | accepted challenger |
| soar-platforms | Google Security Operations SOAR | 5% | 25% | 16 | criticized challenger |
| soar-platforms | Torq | 2% | 4% | 23 | accepted challenger |
| soar-platforms | FortiSOAR | 2% | 20% | 15 | accepted challenger |
| software-composition-analysis | Black Duck | 19% | 6% | 47 | accepted challenger |
| software-composition-analysis | Sonatype Lifecycle | 19% | 8% | 40 | accepted challenger |
| software-composition-analysis | OWASP Dependency-Track | 14% | 0% | 10 | accepted challenger |
| software-composition-analysis | Aikido Security | 14% | 0% | 12 | accepted challenger |
| software-composition-analysis | Mend.io | 10% | 17% | 41 | accepted challenger |
| software-composition-analysis | Snyk Open Source | 10% | 19% | 47 | accepted challenger |
| software-composition-analysis | Trivy | 7% | 0% | 15 | accepted challenger |
| software-composition-analysis | OWASP Dependency-Check | 5% | 61% | 18 | criticized challenger |
| software-composition-analysis | JFrog Xray | 2% | 16% | 19 | accepted challenger |
| software-composition-analysis | Endor Labs | 0% | 5% | 22 | accepted challenger |
| software-composition-analysis | Checkmarx SCA | 0% | 7% | 15 | accepted challenger |
| software-composition-analysis | Veracode | 0% | 8% | 13 | accepted challenger |
| software-composition-analysis | FOSSA | 0% | 19% | 16 | accepted challenger |
| source-control-hosting | GitHub | 56% | 18% | 79 | endorsed leader |
| source-control-hosting | GitLab | 28% | 11% | 74 | accepted challenger |
| source-control-hosting | Bitbucket | 8% | 23% | 69 | accepted challenger |
| source-control-hosting | Azure DevOps | 6% | 21% | 28 | accepted challenger |
| source-control-hosting | Perforce Helix Core | 0% | 9% | 11 | accepted challenger |
| source-control-hosting | Azure Repos | 0% | 25% | 12 | criticized challenger |
| source-control-hosting | AWS CodeCommit | 0% | 70% | 10 | criticized challenger |
| static-application-security-testing | Checkmarx One | 54% | 17% | 63 | endorsed leader |
| static-application-security-testing | Veracode | 12% | 24% | 46 | accepted challenger |
| static-application-security-testing | SonarQube | 10% | 29% | 48 | criticized challenger |
| static-application-security-testing | Snyk Code | 8% | 6% | 32 | accepted challenger |
| static-application-security-testing | GitHub Advanced Security | 2% | 17% | 12 | accepted challenger |
| static-application-security-testing | Semgrep | 2% | 17% | 46 | accepted challenger |
| static-application-security-testing | OpenText Fortify | 2% | 27% | 51 | criticized challenger |
| static-application-security-testing | Black Duck Coverity | 0% | 0% | 17 | accepted challenger |
| static-application-security-testing | CodeQL | 0% | 17% | 12 | accepted challenger |
| streaming-platforms | Confluent Cloud | 60% | 12% | 59 | endorsed leader |
| streaming-platforms | Apache Kafka | 14% | 19% | 43 | accepted challenger |
| streaming-platforms | Redpanda | 10% | 16% | 44 | accepted challenger |
| streaming-platforms | Amazon MSK | 5% | 6% | 34 | accepted challenger |
| streaming-platforms | Azure Event Hubs | 2% | 19% | 36 | accepted challenger |
| streaming-platforms | Amazon Kinesis Data Streams | 2% | 33% | 39 | criticized challenger |
| streaming-platforms | Apache Pulsar | 2% | 35% | 31 | criticized challenger |
| streaming-platforms | Aiven for Apache Kafka | 0% | 0% | 10 | accepted challenger |
| streaming-platforms | Google Cloud Pub/Sub | 0% | 30% | 30 | criticized challenger |
| third-party-risk-management | ProcessUnity | 25% | 11% | 44 | accepted challenger |
| third-party-risk-management | Bitsight | 23% | 21% | 47 | accepted challenger |
| third-party-risk-management | UpGuard | 10% | 9% | 32 | accepted challenger |
| third-party-risk-management | OneTrust Third-Party Risk Management | 10% | 22% | 46 | accepted challenger |
| third-party-risk-management | Venminder | 6% | 12% | 17 | accepted challenger |
| third-party-risk-management | Riskonnect | 4% | 10% | 20 | accepted challenger |
| third-party-risk-management | Panorays | 2% | 6% | 16 | accepted challenger |
| third-party-risk-management | Prevalent | 2% | 7% | 28 | accepted challenger |
| third-party-risk-management | ServiceNow | 2% | 8% | 13 | accepted challenger |
| third-party-risk-management | SecurityScorecard | 2% | 28% | 40 | criticized challenger |
| third-party-risk-management | Vanta | 2% | 31% | 13 | criticized challenger |
| third-party-risk-management | Archer | 2% | 38% | 21 | criticized challenger |
| third-party-risk-management | MetricStream | 0% | 36% | 11 | criticized challenger |
| threat-intelligence-platforms | Recorded Future | 61% | 14% | 59 | endorsed leader |
| threat-intelligence-platforms | CrowdStrike Falcon Adversary Intelligence | 5% | 6% | 16 | accepted challenger |
| threat-intelligence-platforms | Google Threat Intelligence | 5% | 21% | 14 | accepted challenger |
| threat-intelligence-platforms | Anomali ThreatStream | 2% | 0% | 14 | accepted challenger |
| threat-intelligence-platforms | ThreatConnect | 2% | 21% | 33 | accepted challenger |
| threat-intelligence-platforms | Flashpoint | 0% | 5% | 19 | accepted challenger |
| threat-intelligence-platforms | CrowdStrike Falcon Intelligence | 0% | 7% | 14 | accepted challenger |
| threat-intelligence-platforms | Anomali | 0% | 21% | 14 | accepted challenger |
| threat-intelligence-platforms | Mandiant | 0% | 31% | 13 | criticized challenger |
| threat-intelligence-platforms | MISP | 0% | 40% | 10 | criticized challenger |
| unified-endpoint-management | Microsoft Intune | 78% | 8% | 65 | endorsed leader |
| unified-endpoint-management | Omnissa Workspace ONE | 18% | 24% | 68 | accepted challenger |
| unified-endpoint-management | ManageEngine Endpoint Central | 2% | 20% | 35 | accepted challenger |
| unified-endpoint-management | Hexnode UEM | 2% | 50% | 12 | criticized challenger |
| unified-endpoint-management | Ivanti Neurons for UEM | 0% | 8% | 13 | accepted challenger |
| unified-endpoint-management | 42Gears SureMDM | 0% | 9% | 11 | accepted challenger |
| unified-endpoint-management | Jamf | 0% | 10% | 51 | accepted challenger |
| unified-endpoint-management | IBM MaaS360 | 0% | 17% | 18 | accepted challenger |
| unified-endpoint-management | SOTI | 0% | 25% | 12 | criticized challenger |
| unified-endpoint-management | NinjaOne | 0% | 43% | 14 | criticized challenger |
| unified-endpoint-management | Ivanti | 0% | 44% | 16 | criticized challenger |
| vector-databases | Pinecone | 53% | 28% | 64 | criticized default |
| vector-databases | Qdrant | 19% | 2% | 50 | accepted challenger |
| vector-databases | pgvector | 12% | 31% | 54 | criticized challenger |
| vector-databases | Weaviate | 9% | 11% | 61 | accepted challenger |
| vector-databases | Zilliz Cloud | 5% | 13% | 15 | accepted challenger |
| vector-databases | Milvus / Zilliz Cloud | 2% | 0% | 13 | accepted challenger |
| vector-databases | Azure AI Search | 0% | 0% | 13 | accepted challenger |
| vector-databases | Redis | 0% | 15% | 13 | accepted challenger |
| vector-databases | Milvus | 0% | 20% | 41 | accepted challenger |
| vector-databases | Elasticsearch | 0% | 20% | 15 | accepted challenger |
| vector-databases | Chroma | 0% | 67% | 15 | criticized challenger |
| vulnerability-management-platforms | Tenable Vulnerability Management | 25% | 0% | 18 | accepted challenger |
| vulnerability-management-platforms | Qualys VMDR | 14% | 14% | 37 | accepted challenger |
| vulnerability-management-platforms | Tenable | 14% | 23% | 30 | accepted challenger |
| vulnerability-management-platforms | Rapid7 InsightVM | 10% | 11% | 38 | accepted challenger |
| vulnerability-management-platforms | Microsoft Defender Vulnerability Management | 8% | 8% | 25 | accepted challenger |
| vulnerability-management-platforms | Qualys | 4% | 33% | 24 | criticized challenger |
| vulnerability-management-platforms | CrowdStrike Falcon Spotlight | 2% | 30% | 10 | criticized challenger |
| vulnerability-management-platforms | Orca Security | 0% | 8% | 13 | accepted challenger |
| vulnerability-management-platforms | CrowdStrike | 0% | 10% | 10 | accepted challenger |
| vulnerability-management-platforms | Wiz | 0% | 11% | 28 | accepted challenger |
| vulnerability-management-platforms | Rapid7 | 0% | 29% | 17 | criticized challenger |
| web-application-firewalls | Cloudflare | 27% | 9% | 33 | accepted challenger |
| web-application-firewalls | Akamai App & API Protector | 14% | 4% | 23 | accepted challenger |
| web-application-firewalls | Akamai | 9% | 4% | 27 | accepted challenger |
| web-application-firewalls | Cloudflare WAF | 9% | 7% | 15 | accepted challenger |
| web-application-firewalls | Imperva | 5% | 15% | 33 | accepted challenger |
| web-application-firewalls | Fastly Next-Gen WAF | 2% | 8% | 12 | accepted challenger |
| web-application-firewalls | AWS WAF | 2% | 33% | 46 | criticized challenger |
| web-application-firewalls | F5 BIG-IP Advanced WAF | 0% | 10% | 10 | accepted challenger |
| web-application-firewalls | F5 | 0% | 15% | 13 | accepted challenger |
| web-application-firewalls | Fortinet FortiWeb | 0% | 17% | 12 | accepted challenger |
| web-application-firewalls | Azure WAF | 0% | 40% | 15 | criticized challenger |
| workflow-orchestration | Apache Airflow | 29% | 22% | 46 | accepted challenger |
| workflow-orchestration | Astronomer Astro | 10% | 18% | 17 | accepted challenger |
| workflow-orchestration | Camunda | 8% | 11% | 28 | accepted challenger |
| workflow-orchestration | Temporal | 8% | 18% | 34 | accepted challenger |
| workflow-orchestration | Prefect | 6% | 22% | 40 | accepted challenger |
| workflow-orchestration | Microsoft Power Automate | 6% | 36% | 14 | criticized challenger |
| workflow-orchestration | Dagster | 2% | 14% | 35 | accepted challenger |
| workflow-orchestration | Workato | 2% | 27% | 22 | criticized challenger |
| workflow-orchestration | Pega | 2% | 29% | 14 | criticized challenger |
| workflow-orchestration | BMC Control-M | 2% | 31% | 16 | criticized challenger |
| workflow-orchestration | ServiceNow | 2% | 36% | 22 | criticized challenger |
| workflow-orchestration | n8n | 2% | 43% | 14 | criticized challenger |
| workflow-orchestration | Appian | 0% | 23% | 13 | accepted challenger |
| workflow-orchestration | AWS Step Functions | 0% | 50% | 18 | criticized challenger |
| workflow-orchestration | Make | 0% | 69% | 13 | criticized challenger |
| workflow-orchestration | Zapier | 0% | 70% | 20 | criticized challenger |
| workforce-identity-and-sso | Microsoft Entra ID | 47% | 9% | 67 | endorsed leader |
| workforce-identity-and-sso | Okta | 28% | 16% | 32 | accepted challenger |
| workforce-identity-and-sso | Okta Workforce Identity | 25% | 16% | 37 | accepted challenger |
| workforce-identity-and-sso | CyberArk Identity | 0% | 5% | 22 | accepted challenger |
| workforce-identity-and-sso | SailPoint | 0% | 9% | 11 | accepted challenger |
| workforce-identity-and-sso | Ping Identity | 0% | 16% | 61 | accepted challenger |
| workforce-identity-and-sso | ForgeRock | 0% | 20% | 15 | accepted challenger |
| workforce-identity-and-sso | IBM Verify | 0% | 24% | 17 | accepted challenger |
| workforce-identity-and-sso | JumpCloud | 0% | 43% | 14 | criticized challenger |
| workforce-identity-and-sso | OneLogin | 0% | 50% | 14 | criticized challenger |
| zero-trust-network-access | Zscaler Private Access | 50% | 14% | 49 | endorsed leader |
| zero-trust-network-access | Cloudflare One | 21% | 4% | 27 | accepted challenger |
| zero-trust-network-access | Palo Alto Networks Prisma Access | 5% | 12% | 40 | accepted challenger |
| zero-trust-network-access | Zscaler | 5% | 45% | 11 | criticized challenger |
| zero-trust-network-access | Cloudflare Access | 2% | 0% | 13 | accepted challenger |
| zero-trust-network-access | Fortinet | 0% | 9% | 11 | accepted challenger |
| zero-trust-network-access | Twingate | 0% | 21% | 19 | accepted challenger |
| zero-trust-network-access | Netskope Private Access | 0% | 24% | 17 | accepted challenger |
| zero-trust-network-access | Tailscale | 0% | 27% | 11 | criticized challenger |
| zero-trust-network-access | Netskope | 0% | 30% | 10 | criticized challenger |
| zero-trust-network-access | Check Point Harmony SASE | 0% | 40% | 15 | criticized challenger |

## Treatment of lab-affiliated products by model

Self-preference is only measurable with a control group: how the lab's own model treats its products compared with how every other model treats the same products. Anthropic, OpenAI, Google have no products in the covered categories with enough labels to measure, so nothing is claimed about them.

## Discontinued products recommended

None in this run.

## Normalization

Unresolved, 800 labels counted under the raw name, for human review:

128 Technology (now part of Juniper Networks) in sd-wan (1), A-LIGN in penetration-testing-as-a-service (1), ALB in api-gateways (1), ANOW! in workflow-orchestration (1), APIM solutions in llm-gateways-and-observability (1), AWS Amplify in cloud-hosting (1), AWS Bedrock Gateway in llm-gateways-and-observability (1), AWS CloudFront Flat-Rate Pricing Plans in web-application-firewalls (1), AWS DRS in backup-and-disaster-recovery (1), AWS DeepComposer in ml-platforms (1), AWS DeepLens in ml-platforms (1), AWS EBS snapshots in backup-and-disaster-recovery (1), AWS Elastic DR in backup-and-disaster-recovery (1), AWS Lambda in streaming-platforms (1), AWS RDS for SQL Server in cloud-hosting (1), AWS WAF + AWS Bot Control in web-application-firewalls (1), AWS managed services in application-performance-monitoring (1), AWS/Azure/GCP Native Solutions in backup-and-disaster-recovery (1), Ab Initio in etl-and-elt (1), Acceldata in observability-platforms (1), Acronis Cyber Backup in backup-and-disaster-recovery (1), Acronis Cyber Infrastructure (ACI) in backup-and-disaster-recovery (1), Acronis DeviceLock in data-loss-prevention (1), Actian VectorAI DB in vector-databases (1), ActiveBatch in workflow-orchestration (1), ActorDB in nosql-databases (1), Adaptiva in patch-management (1), Adaptiva OneSite in patch-management (1), Adaptiva OneSite Patch in patch-management (1), Advanced ETL Processor in etl-and-elt (1), Agentforce IT Service in it-asset-management (1), AirDroid-style tools in remote-monitoring-and-management (1), Akamai Edge in api-gateways (1), Akamai Kona Site Defender + Akamai Bot Manager in web-application-firewalls (1), Akamai WAF / Akamai App & API Protector in web-application-firewalls (1), Akamai's Bot Manager in web-application-firewalls (1), Akamaya App & API Protector in web-application-firewalls (1), Alibaba Cloud Container Service in managed-kubernetes-platforms (1), Amazon Aurora DSQL in managed-relational-databases (1), Amazon Bedrock AgentCore Gateway in llm-gateways-and-observability (1), Amazon Bedrock Guardrails in llm-gateways-and-observability (1), Amazon CloudWatch in infrastructure-monitoring (1), Amazon Kinesis / AWS-managed streaming options in streaming-platforms (1), Amazon Lookout for Equipment in ml-platforms (1), Amazon Managed Prometheus in infrastructure-monitoring (1), Amazon OpenSearch / Aurora / DynamoDB / Neptune in vector-databases (1), Amazon RDS with Aurora in managed-relational-databases (1), Amplify API Management in api-management (1), Anchore Open Source Dependency Scanner in software-composition-analysis (1), Ancrowdstrike in threat-intelligence-platforms (1), Anodots in grc-platforms (1), Ansible Vault in secrets-management (1), Antisyphon in penetration-testing-as-a-service (1), Any.Run in threat-intelligence-platforms (1), Apache Kafka / Confluent Cloud & Platform in streaming-platforms (1), Apache Kafka on reserved infrastructure, often via Amazon MSK Provisioned in streaming-platforms (1), Apiable in api-management (1), Aporeto in container-and-kubernetes-security (1), AppOmni in cloud-security-posture-management (1), Arctic Wolf Managed CSPM in cloud-security-posture-management (1), Arctic Wolf Network in managed-detection-and-response (1), Ariba in third-party-risk-management (1), Arista/Avalanche (Velocloud lineage) in sd-wan (1), Arize AX in llm-gateways-and-observability (1), Arsen in security-awareness-training (1), Arsenal in remote-monitoring-and-management (1), Assetnote in attack-surface-management (1), Atlassian Jira Service Management / Opsgenie lineage in incident-management-and-on-call (1), Attack Surface Management Platform by AttackSurfaceManagement.com in attack-surface-management (1), AttackIQ Flex in penetration-testing-as-a-service (1), Augment in ai-coding-assistants (1), AuthConn in workforce-identity-and-sso (1), AuthX in multi-factor-authentication (1), Automation Anywhere in workflow-orchestration (1), Avatier Identity Anywhere in identity-governance (1), Avro / Parquet in nosql-databases (1), Axipro in penetration-testing-as-a-service (1), Axonize in it-asset-management (1), Axway Amplify API Management in api-management (1), Azure AI Foundry in llm-gateways-and-observability (1), Azure AKS + Azure Arc in managed-kubernetes-platforms (1), Azure Arc in managed-kubernetes-platforms (1), Azure Database for MariaDB in managed-relational-databases (1), Azure Deployment Environments in infrastructure-as-code (1), Azure DevOps Repos / Server in source-control-hosting (1), Azure Front Door + WAF in web-application-firewalls (1), Azure Front Door / Application Gateway with WAF in web-application-firewalls (1), Azure OpenAI in ml-platforms (1), Azure Sentinel in threat-intelligence-platforms (1), Azure reserved instances in data-warehouses (1), Azure-native options / Microsoft in observability-platforms (1), BMC Helix Discovery in it-asset-management (1), BMC Helix Discovery + ITSM in it-asset-management (1), BMC Helix ITSM + Asset Mgmt in it-asset-management (1), BMC Helix ITSM/ITAM in it-asset-management (1), Backstage in infrastructure-as-code (1), BackupVault in backup-and-disaster-recovery (1), Baidu CDN in content-delivery-networks (1), Barracuda Data Protection in backup-and-disaster-recovery (1), Basic SAST in GitLab/GitHub (without Advanced Security) in static-application-security-testing (1), Beyond Trust Password Safe in business-password-managers (1), Bitdefender GravityZone EDR in endpoint-protection (1), Bitdefender Password Manager in business-password-managers (1), Bizagi in workflow-orchestration (1), Blackbox AI in ai-coding-assistants (1), Bloo in siem-platforms (1), Boomi Integration in api-management (1), Brightside in security-awareness-training (1), Broadcom / Symantec ITMS (Altiris) in patch-management (1), Broadcom Automic Automation in workflow-orchestration (1), Broadcom CA Asset Portfolio Management in it-asset-management (1), Broadcom Symantec CBX (incorporating Carbon Black) in endpoint-protection (1), Broadcom/CA API Gateway in api-management (1), Broadcom/CA Service Management in it-service-management (1), Browser-based password managers (Chrome, Edge, Safari, etc.) in business-password-managers (1), Bubble in it-service-management (1), Built-in Browser Managers (Chrome, Safari, Microsoft Edge) in business-password-managers (1), Bumblebee in software-composition-analysis (1), BusinessLOG in log-management (1), CA Single Sign-On in workforce-identity-and-sso (1), CA Spectrum in it-asset-management (1), CA UIM in infrastructure-monitoring (1), CA-7 in workflow-orchestration (1), CA/Broadcom SiteMinder in workforce-identity-and-sso (1), CCleaner Business in endpoint-detection-and-response (1), COS in object-storage (1), Cakewalk in identity-governance (1), Canima in penetration-testing-as-a-service (1), Carbon Black Enterprise EDR in endpoint-protection (1), Cedexis in content-delivery-networks (1), Cequence AI Gateway in llm-gateways-and-observability (1), Check Point Maestro (Hyperscale) in next-generation-firewalls (1), Check Point Quantum 6700 in next-generation-firewalls (1), Check Point Quantum Force in next-generation-firewalls (1), Check Point Quantum Force NGFW in next-generation-firewalls (1), Check Point Quantum Security Gateways in next-generation-firewalls (1), Check Point Software in next-generation-firewalls (1), Checkmarx Container Security Solution in container-and-kubernetes-security (1), Checkmarx Fusion / Checkmarx One in static-application-security-testing (1), Cheqroom in it-asset-management (1), Chrome Remote Desktop in remote-monitoring-and-management (1), Ciphers Security in soar-platforms (1), Cisco ASA and FTD in next-generation-firewalls (1), Cisco Catalyst SD-WAN Manager in sd-wan (1), Cisco Isovalent in container-and-kubernetes-security (1), Cisco Secure in managed-detection-and-response (1), Cisco Secure Firewall 4200 in next-generation-firewalls (1), Cisco Secure WAF in web-application-firewalls (1), Cisco Universal ZTNA in zero-trust-network-access (1), Cisco firewall platforms / Firepower / ASA-family deployments in next-generation-firewalls (1), Cisco's Advanced WAF and Bot Protection in web-application-firewalls (1), Citrix NetScaler in web-application-firewalls (1), Citrix Secure Private Access in zero-trust-network-access (1), ClamAV in container-and-kubernetes-security (1), ClawHub / OpenClaw in ai-coding-assistants (1), ClearCase in source-control-hosting (1), Clef in customer-identity-and-access-management (1), Cleo Integration Cloud in api-management (1), ClickHouse-based architectures in log-management (1), Cloud Temple Object Storage in object-storage (1), Cloud Temple's Managed Kafka in streaming-platforms (1), CloudBolt in cloud-cost-management (1), CloudFix in cloud-cost-management (1), CloudNative in cloud-security-posture-management (1), Cloudera Data Platform in data-warehouses (1), Cloudflare Access / Zero Trust in zero-trust-network-access (1), Cloudflare One with Cloudflare WAN in sase-platforms (1), Cloudflare WAF + Bot Management in web-application-firewalls (1), Cloudflare's Web Security Platform in web-application-firewalls (1), Cloudian HyperScale in object-storage (1), CloverDX in etl-and-elt (1), Clutch in customer-identity-and-access-management (1), Cobalt Strike in penetration-testing-as-a-service (1), CodeCatalyst in source-control-hosting (1), Commvault Cloud / Commvault Complete in backup-and-disaster-recovery (1), Commvault Complete in backup-and-disaster-recovery (1), Commvault"s SaaS-focused *Metallic* platform in backup-and-disaster-recovery (1), ComplianceQuest in compliance-automation (1), ComplyDo in compliance-automation (1), Concourse CI in ci-cd-platforms (1), Concourse Cloud in cloud-hosting (1), Confluent Schema Registry + Flink in etl-and-elt (1), ConnectWise ScreenConnect & Automate in remote-monitoring-and-management (1), ConnectWise's Axcient x360Recover in backup-and-disaster-recovery (1), Copilot Studio in workflow-orchestration (1), Copla in grc-platforms (1), Coral Esecure in penetration-testing-as-a-service (1), CoreWeave Object Storage in object-storage (1), Cotocus in api-gateways (1), Coworker AI in ml-platforms (1), CreateOS in ml-platforms (1), CrowdStrike Falcon Complete with Spotlight in vulnerability-management-platforms (1), CrowdStrike Falcon EPP in endpoint-protection (1), CrowdStrike Falcon Exposure Management / Spotlight in vulnerability-management-platforms (1), CrowdStrike Falcon Exposure Management/Falcon Spotlight in vulnerability-management-platforms (1), CrowdStrike Falcon Guardian in siem-platforms (1), CrowdStrike Falcon Insight / Falcon platform in endpoint-detection-and-response (1), CrowdStrike Falcon Intell in threat-intelligence-platforms (1), CrowdStrike Falcon Security and IT Operations in attack-surface-management (1), CrowdStrike Falcon Threat Intel in threat-intelligence-platforms (1), CrowdStrike Falcon with Flex Licensing in endpoint-protection (1), Crusoe in object-storage (1), Cubbit in object-storage (1), CubeAPM / OpenTelemetry-Native Solutions in application-performance-monitoring (1), Custom SQL Scripts / Stored Procedures in etl-and-elt (1), CustomGPT.ai in ml-platforms (1), Cyber Aware in security-awareness-training (1), Cyber Security Cloud in web-application-firewalls (1), Cyber Sierra in third-party-risk-management (1), CyberArk Conjur / CyberArk secrets offerings in secrets-management (1), CyberArk Conjur / Privilege Cloud in secrets-management (1), CyberArk CyberArk OSA in software-composition-analysis (1), CyberArk Vault in secrets-management (1), CyberGRX in grc-platforms (1), CyberGlobal in penetration-testing-as-a-service (1), Cylance / BlackBerry CylancePROTECT in endpoint-detection-and-response (1), Cymptom in penetration-testing-as-a-service (1), Cymulate in vulnerability-management-platforms (1), Dashlane Thycotic in privileged-access-management (1), Databricks Delta Live Tables in etl-and-elt (1), Databricks Mosaic AI / Databricks ML in ml-platforms (1), Databricks Vector Search in vector-databases (1), Datadog Incident Management in incident-management-and-on-call (1), Dataminr in threat-intelligence-platforms (1), Datanami (Costanomic) in cloud-cost-management (1), Daylight Security in managed-detection-and-response (1), Deddy/Dashlane in business-password-managers (1), Dell EMC Elastic Cloud Storage (ECS) & Dell ObjectScale in object-storage (1), Dell EMC PowerScale in object-storage (1), Dell PowerProtect Data Manager in backup-and-disaster-recovery (1), Dell Technologies PowerProtect in backup-and-disaster-recovery (1), DerScanner in static-application-security-testing (1), Digger in infrastructure-as-code (1), Digital Shadows in threat-intelligence-platforms (1), DigitalOcean CSPM in cloud-security-posture-management (1), DigitalOcean/KubeOne in managed-kubernetes-platforms (1), Docubark in third-party-risk-management (1), Druva inSync/Data Security Cloud in backup-and-disaster-recovery (1), ESLint-security in static-application-security-testing (1), EclecticIQ Intelligence Center in threat-intelligence-platforms (1), Efecte in identity-governance (1), ElastiCache/MemoryDB in nosql-databases (1), Elastic "Defend for Containers" in container-and-kubernetes-security (1), Elastic-based APM setups in application-performance-monitoring (1), Elastisys in managed-kubernetes-platforms (1), Emissary-ingress in api-gateways (1), EnterpriseTube in streaming-platforms (1), Envoy Gateway in api-management (1), Eptura (formerly Asset Panda) in it-asset-management (1), Ericsson Enterprise Wireless Solutions in sd-wan (1), Exasol in data-warehouses (1), Exceeds AI in ai-coding-assistants (1), Excel/SharePoint in third-party-risk-management (1), Exchange Server in email-security (1), F-Secure / WithSecure Elements in endpoint-detection-and-response (1), F5 / NGINX App Protect in web-application-firewalls (1), F5 BIG-IP Advanced WAF / Distributed Cloud in web-application-firewalls (1), F5 BIG-IP Advanced WAF / Distributed Cloud WAAP in web-application-firewalls (1), F5 Distributed Cloud Bot Defense in web-application-firewalls (1), F5 Distributed Cloud WAAP + Bot Defense in web-application-firewalls (1), F5 WAF in web-application-firewalls (1), F5 WAF / F5 Web App & API Protection in web-application-firewalls (1), FIDO2 / WebAuthn security keys in multi-factor-authentication (1), FaceID in multi-factor-authentication (1), Facets in infrastructure-as-code (1), Fastly's Next-Gen WAF in web-application-firewalls (1), Featherless.ai in llm-gateways-and-observability (1), FeatureHub in feature-flags (1), Filigran (OpenCTI Enterprise Edition) in threat-intelligence-platforms (1), Financial ISAC (FS-ISAC) in threat-intelligence-platforms (1), Firebird (Managed) in managed-relational-databases (1), Firefly in infrastructure-as-code (1), Firefox Lockwise in business-password-managers (1), Fivetran + dbt Labs (Merged) in etl-and-elt (1), FloQast in it-asset-management (1), FlowAssure in third-party-risk-management (1), Flowise in ml-platforms (1), ForgeRock / Ping's Advanced Identity Cloud in customer-identity-and-access-management (1), ForgeRock Identity Cloud / ForgeRock Identity Platform in workforce-identity-and-sso (1), ForgeRock Identity Governance in identity-governance (1), FortiGate NGFW in next-generation-firewalls (1), FortiGate/FortiManager in sd-wan (1), FortiManager in next-generation-firewalls (1), Fortinet FortiGate 3000F/3200F Series in next-generation-firewalls (1), Fortinet FortiGate 6000/7000 Series in next-generation-firewalls (1), Fortinet FortiGate 600F in next-generation-firewalls (1), Fortinet FortiGate 7000F series in next-generation-firewalls (1), Fortinet FortiNAC/FortiClient in zero-trust-network-access (1), Fortinet's FortiGate in next-generation-firewalls (1), Fortra (formerly HelpSystems) / Agari in email-security (1), Fortra Data Security (formerly Digital Guardian) in data-loss-prevention (1), Frends in workflow-orchestration (1), FullHunt ASM in attack-surface-management (1), FullHunt Enterprise in attack-surface-management (1), Fusion Framework System in grc-platforms (1), GCP Cloud Build in ci-cd-platforms (1), GKE on AWS in managed-kubernetes-platforms (1), Galileo AI in llm-gateways-and-observability (1), Gatekeeper in third-party-risk-management (1), Generic Bash Scripts in infrastructure-as-code (1), Genuit in secrets-management (1), Gerrit in source-control-hosting (1), Giant Swarm in managed-kubernetes-platforms (1), GitHub Advanced Security (GHAS) with CodeQL in static-application-security-testing (1), GitHub Advanced Security / GitLab Security in static-application-security-testing (1), GitHub Advanced Security with CodeQL in static-application-security-testing (1), GitLab Roles in ci-cd-platforms (1), Gitolite in source-control-hosting (1), Google / Mandiant intelligence ecosystem in threat-intelligence-platforms (1), Google Cloud Backup and Disaster Recovery in backup-and-disaster-recovery (1), Google Cloud CDN / Media CDN in content-delivery-networks (1), Google Cloud Data Loss Prevention in data-loss-prevention (1), Google Cloud Deployment Manager / Infrastructure Manager in infrastructure-as-code (1), Google Cloud Disaster Recovery in backup-and-disaster-recovery (1), Google Cloud Functions in streaming-platforms (1), Google Cloud Mandiant in threat-intelligence-platforms (1), Google Cloud Vector Search / Agent Retrieval in vector-databases (1), Google Cloud's *Cloud NGFW Enterprise* in next-generation-firewalls (1), Google Cloud’s managed Kafka service in streaming-platforms (1), Google Config Connector in infrastructure-as-code (1), Google Distributed Cloud in managed-kubernetes-platforms (1), Google Firebase App Hosting in cloud-hosting (1), Google Kubernetes Engine (GKE) / GKE Enterprise in managed-kubernetes-platforms (1), Google Kubernetes Engine (GKE) Standard or Anthos / GKE Enterprise in managed-kubernetes-platforms (1), Google Mandiant Advantage in threat-intelligence-platforms (1), Google Threat Intelligence Feed in threat-intelligence-platforms (1), Google Vertex AI / Gemini Enterprise in ml-platforms (1), Google's Gemini-based tools in ai-coding-assistants (1), Grafana Cloud / Grafana + OpenTelemetry stack in observability-platforms (1), Grafana Mimir in infrastructure-monitoring (1), Grafana Mimir/Loki/Tempo in observability-platforms (1), GraphNode in static-application-security-testing (1), Gremlin Security in security-awareness-training (1), Group Policy in patch-management (1), Group-IB CSPM (Unified Risk Platform) in cloud-security-posture-management (1), Group‑IB EDR in endpoint-protection (1), GuidePoint in penetration-testing-as-a-service (1), HNSWLIB in vector-databases (1), HP ALM in ci-cd-platforms (1), HPE Aruba SD-WAN / Aruba Central in sd-wan (1), HPE Ezmeral in ml-platforms (1), HYCU Data Protection in backup-and-disaster-recovery (1), HYCU Protege in backup-and-disaster-recovery (1), Halo Private Defense in managed-detection-and-response (1), HanoiDB in nosql-databases (1), Harness Feature Flags / Feature Management in feature-flags (1), HashiCorp Consul Connect in secrets-management (1), Helios in remote-monitoring-and-management (1), Highflame in llm-gateways-and-observability (1), Hillstone Networks WAF in web-application-firewalls (1), Hitachi Content Platform in object-storage (1), Holori in cloud-cost-management (1), Home-Grown / In-House Solutions in feature-flags (1), Homegrown" Feature Flag Systems in feature-flags (1), HorizonIQ Object Storage in object-storage (1), Huawei HiSec Insight in siem-platforms (1), Hughes Network Systems in sd-wan (1), IBM Cloud Pak for AIOps in it-asset-management (1), IBM Cloud Pak for Data / InfoSphere in etl-and-elt (1), IBM Cloud – Databases for PostgreSQL, MySQL, Enterprise DB in managed-relational-databases (1), IBM Consulting in cloud-hosting (1), IBM Db2 on Cloud / Cloud Hyper Protect DBaaS in managed-relational-databases (1), IBM FinOps Suite (Apptio Cloudability) in cloud-cost-management (1), IBM Maas360 with Workload Automation in it-asset-management (1), IBM MobileFirst in unified-endpoint-management (1), IBM Netezza on Cloud in data-warehouses (1), IBM QRadar Cloud, QRadar SOAR, and QRadar Log Insights in siem-platforms (1), IBM QRadar EDR in endpoint-detection-and-response (1), IBM QRadar EDR & MaaS360 in endpoint-protection (1), IBM QRadar Log Insights in log-management (1), IBM Rational ClearCase in source-control-hosting (1), IBM SPSS in ml-platforms (1), IBM Security X-Force in threat-intelligence-platforms (1), IBM Video Streaming in streaming-platforms (1), IBM Workload Automation in workflow-orchestration (1), IBM watsonx / Watson Machine Learning in ml-platforms (1), IBM watsonx Code Assistant in ai-coding-assistants (1), IBM\u2019s QRadar SaaS in siem-platforms (1), IFS EAM in it-asset-management (1), IO River in content-delivery-networks (1), IONOS CLOUD Object Storage in object-storage (1), Imperva Cloud WAAP in web-application-firewalls (1), Imperva Cloud WAF / WAF Gateway in web-application-firewalls (1), Imperva WAF & API Security (by Thales) in web-application-firewalls (1), Imperva's Advanced Bot Protection in web-application-firewalls (1), In-House Solutions in feature-flags (1), IncidentCore in incident-management-and-on-call (1), Informatica Intelligent Data Management Cloud (IDMC) / PowerCenter in etl-and-elt (1), Informatica PowerCenter / Intelligent Data Management Cloud (IDMC) in etl-and-elt (1), Infraon Assets in it-asset-management (1), Infros in infrastructure-as-code (1), Inteca Managed Keycloak in multi-factor-authentication (1), Integromat in compliance-automation (1), InterScan in compliance-automation (1), InterSystems IRIS / Caché in managed-relational-databases (1), Intezer in soar-platforms (1), Intigra in grc-platforms (1), Ivanti EPMM in remote-monitoring-and-management (1), Ivanti ITSM Enterprise in it-asset-management (1), Ivanti Neurons / MDM in unified-endpoint-management (1), Ivanti Neurons for EASM in attack-surface-management (1), Ivanti Neurons for Patch Management / Ivanti Security Controls in patch-management (1), Ivanti Neurons for Unification in patch-management (1), Ivanti Neurons/Avanti in unified-endpoint-management (1), Ivanti Patch for Endpoint Manager in patch-management (1), Ivanti Security Controls / Ivanti Neurons for Patch Management in patch-management (1), Jericho in security-awareness-training (1), JetBrains AI + Anthropic/Claude in ai-coding-assistants (1), Jinba Flow in workflow-orchestration (1), Jira Service Management (JSM) + ITAM Add‑Ons in it-asset-management (1), Jira Service Management + Assets in it-asset-management (1), Juniper (HPE) SRX in next-generation-firewalls (1), Juniper Mist WAN Assurance in sd-wan (1), Juniper SRX Series in next-generation-firewalls (1), Juniper Session Smart Routing (SSR) / Mist SD-WAN in sd-wan (1), KELA in threat-intelligence-platforms (1), Kaseya 365 Endpoint in remote-monitoring-and-management (1), Kaseya/Barracuda Datto in backup-and-disaster-recovery (1), Kaspersky Business for Enterprise in endpoint-protection (1), Kaspersky Endpoint Security for Business in endpoint-protection (1), KloudMate in log-management (1), Kong Enterprise + Mesh in api-management (1), Kroll in penetration-testing-as-a-service (1), KubeSphere SaaS in managed-kubernetes-platforms (1), Kubermatic Kubernetes Platform (KKP) in managed-kubernetes-platforms (1), Kubernetes manifests + Helm in infrastructure-as-code (1), Kyndryl Managed Database Services in managed-relational-databases (1), Lakera in llm-gateways-and-observability (1), Last9 in observability-platforms (1), Lattice in secrets-management (1), Launchpad in source-control-hosting (1), LeadJourney in etl-and-elt (1), Legacy CA Service Management / CA IT Asset Manager (Broadcom) in it-asset-management (1), Legacy McAfee (now Trellix) in endpoint-protection (1), Legacy SAP APM / SAP IoT based tools in application-performance-monitoring (1), Legacy Symantec/Broadcom Endpoint Protection in endpoint-protection (1), Linkerd in api-gateways (1), Llama in ml-platforms (1), Loft in managed-kubernetes-platforms (1), LogMeIn / GoTo Resolve in remote-monitoring-and-management (1), LogMeIn Central in remote-monitoring-and-management (1), Lucidity in cloud-cost-management (1), MRTG in infrastructure-monitoring (1), MTRisk in third-party-risk-management (1), Machine Learning at Scale in ml-platforms (1), MailMarshal in email-security (1), MailWasher in email-security (1), Malware Bazaar in threat-intelligence-platforms (1), ManageEngine MEO / Endpoint Central in unified-endpoint-management (1), ManageEngine PAM360 / Password Manager Pro in privileged-access-management (1), ManageEngine Patch Connect Plus in patch-management (1), Managed Backup and Disaster Recovery Services by Discover Cyber Solutions in backup-and-disaster-recovery (1), Managed Prometheus in infrastructure-monitoring (1), Mandiant (Google Cloud) Managed Services in managed-detection-and-response (1), Mandiant Advantage Threat Intelligence in threat-intelligence-platforms (1), MariaDB on Azure in managed-relational-databases (1), Markley Group's Object Storage Cloud in object-storage (1), McAfee Endpoint Security in endpoint-detection-and-response (1), McAfee True Key in business-password-managers (1), Medianova in content-delivery-networks (1), Microsoft 365 Backup & Disaster Recovery Solution in backup-and-disaster-recovery (1), Microsoft 365 Backup (SaaS) in backup-and-disaster-recovery (1), Microsoft Authenticator / Entra ID MFA in multi-factor-authentication (1), Microsoft Azure Data Factory (ADF) / Microsoft Fabric in etl-and-elt (1), Microsoft Azure ML / Azure AI Foundry in ml-platforms (1), Microsoft Azure Machine Learning / AI Foundry in ml-platforms (1), Microsoft Defender for Identity + PIM in privileged-access-management (1), Microsoft Dynamics 365 ITSM in it-service-management (1), Microsoft Entra (Azure AD) + Conditional Access in zero-trust-network-access (1), Microsoft Entra ID Governance / Entra Suite in identity-governance (1), Microsoft Entra PIM / Cloud App Security in privileged-access-management (1), Microsoft Entra Private Access / Internet Access in zero-trust-network-access (1), Microsoft Entra Secure Access in next-generation-firewalls (1), Microsoft Fabric Warehouse / Azure Synapse dedicated SQL pool in data-warehouses (1), Microsoft Intune + ConfigMgr in patch-management (1), Microsoft Intune + Enterprise App Management in patch-management (1), Microsoft Intune + Microsoft Teams in it-service-management (1), Microsoft Intune + Remote Help in remote-monitoring-and-management (1), Microsoft Intune + WUfB & Windows Autopatch in patch-management (1), Microsoft Intune/MECM in patch-management (1), Microsoft Native Email Security Alone in email-security (1), Microsoft Privileged Access Workstation (PAW) in privileged-access-management (1), Microsoft SCOM (System Center Operations Manager) in infrastructure-monitoring (1), Microsoft Security / Sentinel in threat-intelligence-platforms (1), Microsoft System Center Operations Manager (SCOM) in infrastructure-monitoring (1), Microsoft Update Management/WSUS in patch-management (1), Microsoft Windows 365 (Enterprise) in cloud-hosting (1), Microsoft: Defender XDR & Microsoft Sentinel in extended-detection-and-response (1), Mimecast Incydr in data-loss-prevention (1), Mimecast's newer behavioral modules in email-security (1), Mirascope in llm-gateways-and-observability (1), Mistral in ml-platforms (1), Mixpeek Vector Store (MVS) in vector-databases (1), Mocean in unified-endpoint-management (1), ModSecurity-based standalone/open-source WAFs in web-application-firewalls (1), Moovtech in cloud-cost-management (1), Morpheus Data in cloud-cost-management (1), MuleSoft Anypoint Platform / API Manager in api-management (1), MuleSoft Omni Gateway in api-gateways (1), NETSCOUT Arbor Edge Defense / Arbor products in ddos-protection (1), NITRO Studio in workflow-orchestration (1), NVIDIA AI Enterprise in ml-platforms (1), Ncontracts in third-party-risk-management (1), Nebius in object-storage (1), Neocarrier's Managed Firewall in next-generation-firewalls (1), Neoclouds (newer, niche providers) in cloud-hosting (1), NetApp Cloud Cost Optimizer in cloud-cost-management (1), NetApp Instaclustr for Cadence in workflow-orchestration (1), NetScaler Web Application Firewall (Citrix) in web-application-firewalls (1), NetSecurity in endpoint-protection (1), Netcraft in email-security (1), Netskope ZTNA Next in zero-trust-network-access (1), Nexla in etl-and-elt (1), Nginx ModSecurity WAF in web-application-firewalls (1), NinjaOne Backup in backup-and-disaster-recovery (1), Nintex in workflow-orchestration (1), Nucleus Cyber in email-security (1), NudgeBee in cloud-cost-management (1), Numpy in vector-databases (1), Nutanix Era in managed-relational-databases (1), Obsidian in cloud-security-posture-management (1), Obsonis Enterprise in attack-surface-management (1), Octopus in ci-cd-platforms (1), Offensive Security Services in penetration-testing-as-a-service (1), Offensive360 in static-application-security-testing (1), Omnitracker in it-service-management (1), One Identity SecretServer in privileged-access-management (1), OneTrust Tech Risk and Compliance in compliance-automation (1), Open WebUI in ml-platforms (1), OpenAI Codex / ChatGPT Enterprise + Codex in ai-coding-assistants (1), OpenBastion in privileged-access-management (1), OpenClaw in ai-coding-assistants (1), OpenGov (Enterprise Asset Management) in it-asset-management (1), OpenStack Heat in infrastructure-as-code (1), OpenTelemetry + Self-Hosted (Grafana Stack) in observability-platforms (1), OpenTelemetry-based platforms in error-and-crash-monitoring (1), OpenText Asset Management X in it-asset-management (1), OpenText Core SCA in software-composition-analysis (1), Opstream in ml-platforms (1), Oracle API Gateway in api-management (1), Oracle Base Database in managed-relational-databases (1), Oracle Cloud Infrastructure (OCI) Vulnerability Detection & Patching in vulnerability-management-platforms (1), Oracle Data Integration in etl-and-elt (1), Oracle Database Cloud Service in managed-relational-databases (1), Oracle Database services in managed-relational-databases (1), Oracle GoldenGate in etl-and-elt (1), Oracle IAM in identity-governance (1), Oracle/StorageTek tape libraries in backup-and-disaster-recovery (1), Ostorlab in attack-surface-management (1), OutThink in security-awareness-training (1), Palantir Foundry in ml-platforms (1), Palantir Foundry / Gotham in ml-platforms (1), Palo Alto Enterprise DLP in data-loss-prevention (1), Palo Alto Networks Cortex Cloud SCA in software-composition-analysis (1), Palo Alto Networks Cortex Xpanse / Cortex Exposure Management in attack-surface-management (1), Palo Alto Networks Cortex/Unit 42 MDR in managed-detection-and-response (1), Palo Alto Networks PA-Series / VM-Series in next-generation-firewalls (1), Palo Alto Networks PAN-OS in next-generation-firewalls (1), Palo Alto Networks Strata in next-generation-firewalls (1), Palo Alto Networks Unit 42 Managed XSIAM in managed-detection-and-response (1), Palo Alto Networks Unit 42 Managed XSIAM 2.0 in managed-detection-and-response (1), Palo Alto Networks: Cortex XDR / Cortex XSIAM in extended-detection-and-response (1), Palo Alto Unit 42 in threat-intelligence-platforms (1), Panaseer in attack-surface-management (1), Panorama in next-generation-firewalls (1), Passportal (NinjaOne) in business-password-managers (1), Passwork in business-password-managers (1), PatchPilot in patch-management (1), Pentestas in penetration-testing-as-a-service (1), Perforce Helix Core / TeamHub in source-control-hosting (1), PhishNext in security-awareness-training (1), Picus Security in penetration-testing-as-a-service (1), Ping Identity / PingOne for Workforce in workforce-identity-and-sso (1), Ping Identity One in identity-governance (1), Ping Identity PingFederate/PingAuthorize in identity-governance (1), Ping/ForegRock in customer-identity-and-access-management (1), PingFederate in customer-identity-and-access-management (1), PingOne MFA in multi-factor-authentication (1), Pipefy in workflow-orchestration (1), Plural.sh in managed-kubernetes-platforms (1), PostgreSQL on RDS or self-hosted in managed-relational-databases (1), PostgreSQL or MySQL managed services in managed-relational-databases (1), PowerDMARC in email-security (1), ProBackup in backup-and-disaster-recovery (1), Process Street in compliance-automation (1), ProcessUnity's CyberGRX in third-party-risk-management (1), Productiv in it-asset-management (1), Profisee in vulnerability-management-platforms (1), Profound in ml-platforms (1), Prometheus Alertmanager in incident-management-and-on-call (1), Prometheus with Grafana in infrastructure-monitoring (1), Prompt Security in llm-gateways-and-observability (1), Proofpoint Emerging Threats in threat-intelligence-platforms (1), Prophaze WAF in web-application-firewalls (1), Prophet in soar-platforms (1), Protego in container-and-kubernetes-security (1), Psono in business-password-managers (1), Pure Storage FlashBlade in object-storage (1), Python/Tensorflow/PyTorch stack in ml-platforms (1), Q-Feeds in threat-intelligence-platforms (1), Q-Sec in penetration-testing-as-a-service (1), QAX in siem-platforms (1), Quali in infrastructure-as-code (1), Qualys AssetView (legacy) in vulnerability-management-platforms (1), Qualys EASM / VMDR in attack-surface-management (1), Qualys Patch Management in patch-management (1), Qualys VMDR / Enterprise TruRisk Platform in vulnerability-management-platforms (1), Qualys Web Application Firewall in web-application-firewalls (1), Qualys patch/remediation workflows in patch-management (1), Quantum Object Storage Services in object-storage (1), Quest in backup-and-disaster-recovery (1), Quest KACE SMA in patch-management (1), QuestDB in data-warehouses (1), RHEL/Ubuntu-focused tooling in patch-management (1), RSA NetWitness SOAR in soar-platforms (1), Rabata in object-storage (1), Rackpoint in penetration-testing-as-a-service (1), Rackspace Object Storage in object-storage (1), Rackspace Technology Managed Database Services in managed-relational-databases (1), Rafay in managed-kubernetes-platforms (1), Rapid7 InsightVM/Exposure Command in vulnerability-management-platforms (1), RapidFort in container-and-kubernetes-security (1), Ray Workflows in workflow-orchestration (1), Raynet in unified-endpoint-management (1), Recorded Future Intelligence Feed in threat-intelligence-platforms (1), Red Hat Keycloak in customer-identity-and-access-management (1), RedHunt Labs ASM Platform in attack-surface-management (1), Redshift Spectrum in data-warehouses (1), Redwood in workflow-orchestration (1), RemoAsset in it-asset-management (1), Reposify in attack-surface-management (1), Retool in it-service-management (1), Revo in workflow-orchestration (1), Rewind in backup-and-disaster-recovery (1), Ribbon in ddos-protection (1), RisingWave in streaming-platforms (1), Risk72 in penetration-testing-as-a-service (1), RoboScan (Roboshadow) in vulnerability-management-platforms (1), Rocket Servergraph in backup-and-disaster-recovery (1), SAP BTP API Management in api-management (1), SAP EAM (Enterprise Asset Management) in it-asset-management (1), SS&C AI Gateway in llm-gateways-and-observability (1), SafeBreach in penetration-testing-as-a-service (1), SailPoint IdentityIQ (On-Prem/Hybrid) & IdentityNow (SaaS) in identity-governance (1), SailPoint IdentityIQ/IdentityNow in identity-governance (1), SailPoint Privileged Access Management in privileged-access-management (1), Salesforce Identity in workforce-identity-and-sso (1), Savant in identity-governance (1), ScaNN in vector-databases (1), Scalable UEM (Scalable Systems) in unified-endpoint-management (1), SecFusion in penetration-testing-as-a-service (1), SecPod Saner CNAPP in cloud-native-application-protection (1), Secops (RedTeam.com) in penetration-testing-as-a-service (1), Secureworks Taegis in extended-detection-and-response (1), Secureworks Taegis ManagedXDR in managed-detection-and-response (1), Securiti.ai in grc-platforms (1), Sema in llm-gateways-and-observability (1), Sematext Error Tracking in error-and-crash-monitoring (1), SentinelOne Singularity AI SIEM in siem-platforms (1), SentinelOne Singularity Endpoint/XDR in endpoint-detection-and-response (1), SentinelOne TI modules in threat-intelligence-platforms (1), ServiceNow Flow Designer in workflow-orchestration (1), ServiceNow ITAM/SAM in it-asset-management (1), ServiceNow On‑Call in incident-management-and-on-call (1), ServiceNow Security Incident Response / Security Operations in soar-platforms (1), ServiceNow Security Operations (SecOps) / Security Incident Response (SIR) in soar-platforms (1), ServiceNow Vulnerability Response in vulnerability-management-platforms (1), SevOne in infrastructure-monitoring (1), Shavlik in patch-management (1), Shinobi Defense System in data-loss-prevention (1), Shodan-style aggregators in attack-surface-management (1), Sia in object-storage (1), Silobreaker in threat-intelligence-platforms (1), SmarterMail in email-security (1), Snow Atlas in it-asset-management (1), Snow License Manager (SLM) in it-asset-management (1), SoftSpell in ai-coding-assistants (1), SolarWinds Application Performance Monitor in application-performance-monitoring (1), SolarWinds Incident Response in incident-management-and-on-call (1), Solo/Envoy in api-gateways (1), Sonatype IQ in container-and-kubernetes-security (1), SonicWall firewalls in next-generation-firewalls (1), Sonrai in cloud-security-posture-management (1), Sophos Intercept X / Endpoint XDR in endpoint-detection-and-response (1), Sourcefire 8290 in next-generation-firewalls (1), Spectrum Scale in object-storage (1), Splashtop Enterprise / Splashtop Remote Support in remote-monitoring-and-management (1), Splunk AppDynamics / Observability Cloud in application-performance-monitoring (1), Splunk SecOps Platform in soar-platforms (1), Splunk TI Framework in threat-intelligence-platforms (1), StackPath WAF in web-application-firewalls (1), Standard Compute in llm-gateways-and-observability (1), StaticCodeAudit in static-application-security-testing (1), Stigg in feature-flags (1), Stonebranch UAC in workflow-orchestration (1), Stonebranch Universal Automation Center (UAC) in workflow-orchestration (1), StormForge in cloud-cost-management (1), Stormpath in customer-identity-and-access-management (1), Strata Identity in workforce-identity-and-sso (1), Streamkap Cloud in streaming-platforms (1), Supermaven in ai-coding-assistants (1), Swif in unified-endpoint-management (1), Swisscom Enterprise Service Cloud "Container Services with Kubernetes" in managed-kubernetes-platforms (1), Symantec EDR in endpoint-detection-and-response (1), Symbol in security-awareness-training (1), Sysmon in endpoint-detection-and-response (1), TAC Security in vulnerability-management-platforms (1), TFLint in infrastructure-as-code (1), TPSaaS in third-party-risk-management (1), Tanium Threat Response in endpoint-detection-and-response (1), Temporal/Open Web UI in workflow-orchestration (1), Tenable Container Security in container-and-kubernetes-security (1), Tenable Legacy Container Security (TIO-CSI) in container-and-kubernetes-security (1), TensorFlow Extended/TFX in ml-platforms (1), Teqtivity in it-asset-management (1), Tetrate in llm-gateways-and-observability (1), Thales SafeNet in multi-factor-authentication (1), Thanos/Cortex/Mimir in infrastructure-monitoring (1), Threat Landscape in threat-intelligence-platforms (1), ThreatLocker Protect in endpoint-protection (1), ThreatMapper in container-and-kubernetes-security (1), ThreatStream in threat-intelligence-platforms (1), TiDB Cloud Serverless in vector-databases (1), Tiger Data in managed-relational-databases (1), Tigera in container-and-kubernetes-security (1), Tokyo Cabinet in nosql-databases (1), Tonkean in workflow-orchestration (1), Touch ID in multi-factor-authentication (1), Trellix/Symantec-class enterprise tools in endpoint-protection (1), Trend Micro (Trend) Container Security in container-and-kubernetes-security (1), Trend Micro Integrated DLP in data-loss-prevention (1), Trickest ASM in attack-surface-management (1), Trivy+Falco in container-and-kubernetes-security (1), Trusona in workforce-identity-and-sso (1), Trustwave ModSecurity in web-application-firewalls (1), Tufin in soar-platforms (1), Twilio Authy Desktop in customer-identity-and-access-management (1), UINAT in vulnerability-management-platforms (1), URLhaus in threat-intelligence-platforms (1), URLhaus / MalwareBazaar in threat-intelligence-platforms (1), UiPath Orchestrator in workflow-orchestration (1), UnderDefense MDR in threat-intelligence-platforms (1), UnderDefense Managed DLP+MDR in data-loss-prevention (1), Unity Gateway in ai-coding-assistants (1), Upbound in infrastructure-as-code (1), Upstash Vector in vector-databases (1), VAST in nosql-databases (1), VMware Skyward in sase-platforms (1), VMware Tanzu / vSphere Kubernetes Service (VKS) in managed-kubernetes-platforms (1), VMware Tanzu/VKS in managed-kubernetes-platforms (1), VMware Velocity in sd-wan (1), VMware vSphere Kubernetes Services (VKS) in managed-kubernetes-platforms (1), VMware vSphere with Tanzu in managed-kubernetes-platforms (1), VMware/Bitglass in sase-platforms (1), VSHN in managed-kubernetes-platforms (1), VUEWorks in it-asset-management (1), Vectoredge in data-loss-prevention (1), Vellum in workflow-orchestration (1), Venn in unified-endpoint-management (1), Venustech in siem-platforms (1), VerSprite in penetration-testing-as-a-service (1), Veritas Alta (NetBackup family) in backup-and-disaster-recovery (1), Veritas Backup Exec, System Recovery, and Desktop & Laptop Option (DLO) in backup-and-disaster-recovery (1), Verizon Enterprise Solutions (RISK Team) in penetration-testing-as-a-service (1), Vertica in data-warehouses (1), VulNova in vulnerability-management-platforms (1), VulScan in vulnerability-management-platforms (1), Vulcan in vulnerability-management-platforms (1), VulnDB in threat-intelligence-platforms (1), Vynox in penetration-testing-as-a-service (1), WP Engine / Flywheel in cloud-hosting (1), WSUS / Windows Auto Update in patch-management (1), WSUS Offline Update in patch-management (1), Walkoff in soar-platforms (1), War Room in incident-management-and-on-call (1), Whale in compliance-automation (1), Wiz Attack Surface Management in attack-surface-management (1), Workfront (Adobe) in workflow-orchestration (1), Workwize in it-asset-management (1), Yellowbrick (Distributed Cloud) in data-warehouses (1), YewSafe in content-delivery-networks (1), YewSafe CDN in content-delivery-networks (1), YubiEnterprise in workforce-identity-and-sso (1), Yubico/YubiEnterprise in multi-factor-authentication (1), Zscaler Firewall-as-a-Service (FWaaS) in next-generation-firewalls (1), Zscaler Private Access / Zero Trust Exchange in zero-trust-network-access (1), Zylo in it-asset-management (1), `pgvector` with `pgvectorscale` in vector-databases (1), cloud-native SailPoint in identity-governance (1), composio.dev in api-gateways (1), eSentire MDR in managed-detection-and-response (1), hoop.dev in infrastructure-as-code (1), iMaint in it-asset-management (1), ibl.ai in ml-platforms (1), kube-secrets-operator in secrets-management (1), macOS Touch ID in multi-factor-authentication (1), pgEdge in managed-relational-databases (1), raw OpenAI in ai-coding-assistants (1), rsync in backup-and-disaster-recovery (1), vCluster in managed-kubernetes-platforms (1)

Category-scoped resolutions, 2035 labels. A bare vendor name was read as that vendor's product for the asked category, which assigns specificity the model did not write; each one is listed so the assumption is visible:

Datadog in log-management read as Datadog Log Management (52), Mimecast in email-security read as Mimecast Email Security (44), Snyk in software-composition-analysis read as Snyk Open Source (42), OneTrust in third-party-risk-management read as OneTrust Third-Party Risk Management (40), Proofpoint in email-security read as Proofpoint Email Protection (36), Zscaler in sase-platforms read as Zscaler Zero Trust Exchange (36), Netskope in sase-platforms read as Netskope One (32), Saviynt in identity-governance read as Saviynt Enterprise Identity Cloud (32), SentinelOne Singularity in endpoint-detection-and-response read as SentinelOne Singularity (29), Checkmarx in static-application-security-testing read as Checkmarx One (27), AWS in cloud-hosting read as Amazon Web Services (25), Keeper in business-password-managers read as Keeper Security (24), Proofpoint in security-awareness-training read as Proofpoint ZenGuide (23), Censys in attack-surface-management read as Censys ASM (22), GitLab Ultimate in source-control-hosting read as GitLab (22), Palo Alto Networks Cortex XSOAR in soar-platforms read as Cortex XSOAR (22), BMC Helix in it-service-management read as BMC Helix ITSM (21), Kong in api-gateways read as Kong Gateway (21), Bitsight in attack-surface-management read as Bitsight (20), Cato Networks in sd-wan read as Cato Networks (20), New Relic in log-management read as New Relic Logs (20), Arctic Wolf in managed-detection-and-response read as Arctic Wolf Managed Detection and Response (19), MongoDB Atlas in nosql-databases read as MongoDB (19), Netskope in data-loss-prevention read as Netskope DLP (19), Versa Networks in sd-wan read as Versa Secure SD-WAN (19), Fortinet in sd-wan read as Fortinet Secure SD-WAN (18), Forcepoint in data-loss-prevention read as Forcepoint DLP (17), SentinelOne in endpoint-detection-and-response read as SentinelOne Singularity (17), Amazon Kinesis in streaming-platforms read as Amazon Kinesis Data Streams (16), CrowdStrike in extended-detection-and-response read as CrowdStrike Falcon (15), Fortinet in sase-platforms read as Fortinet FortiSASE (15), Palo Alto Cortex XDR in endpoint-detection-and-response read as Palo Alto Networks Cortex XDR (15), Kong in api-management read as Kong Gateway (14), SentinelOne in extended-detection-and-response read as SentinelOne Singularity (13), Trend Micro Vision One in endpoint-detection-and-response read as Trend Micro (13), GitLab in ci-cd-platforms read as GitLab CI/CD (12), Mend (formerly WhiteSource) in software-composition-analysis read as Mend.io (12), Harness in cloud-cost-management read as Harness Cloud Cost Management (11), Ivanti Neurons in it-service-management read as Ivanti Neurons for ITSM (11), Keeper Enterprise in business-password-managers read as Keeper Security (11), Kong Enterprise in api-management read as Kong Gateway (11), Omada in identity-governance read as Omada Identity (11), Astronomer in workflow-orchestration read as Astronomer Astro (10), Azure Blob in object-storage read as Azure Blob Storage (10), Cloudflare in sase-platforms read as Cloudflare One (10), Flexera in cloud-cost-management read as Flexera One (10), Flexera in it-asset-management read as Flexera One (10), Grafana Cloud in observability-platforms read as Grafana (10), Hevo in etl-and-elt read as Hevo Data (10), Huntress in managed-detection-and-response read as Huntress Managed EDR (10), Keeper Business in business-password-managers read as Keeper Security (10), Microsoft Entra in workforce-identity-and-sso read as Microsoft Entra ID (10), Microsoft Purview in data-loss-prevention read as Microsoft Purview DLP (10), ServiceNow in it-asset-management read as ServiceNow IT Asset Management (10), WSO2 in api-management read as WSO2 API Manager (10), Aqua in container-and-kubernetes-security read as Aqua Security (9), Cato Networks SASE Cloud in sase-platforms read as Cato SASE Cloud (9), Mend in software-composition-analysis read as Mend.io (9), One Identity in identity-governance read as One Identity Manager (9), Palo Alto Cortex XSOAR in soar-platforms read as Cortex XSOAR (9), VMware VeloCloud in sd-wan read as VMware VeloCloud SD-WAN (9), Barracuda in email-security read as Barracuda Email Protection (8), Hexnode in unified-endpoint-management read as Hexnode UEM (8), Omnissa (formerly VMware Workspace ONE) in unified-endpoint-management read as Omnissa Workspace ONE (8), Palo Alto Networks in sase-platforms read as Palo Alto Networks Prisma SASE (8), Proofpoint in data-loss-prevention read as Proofpoint Enterprise DLP (8), 42Gears in unified-endpoint-management read as 42Gears SureMDM (7), Aqua in cloud-native-application-protection read as Aqua Security (7), CyberArk in workforce-identity-and-sso read as CyberArk Identity (7), DigitalOcean in managed-kubernetes-platforms read as DigitalOcean Kubernetes (7), Elastic in log-management read as Elastic Stack (7), GitHub Enterprise Server in source-control-hosting read as GitHub (7), GitLab Ultimate in ci-cd-platforms read as GitLab CI/CD (7), Lacework in cloud-native-application-protection read as FortiCNAPP (7), Mimecast in security-awareness-training read as Mimecast Engage (7), Omnissa (Workspace ONE) in unified-endpoint-management read as Omnissa Workspace ONE (7), Palo Alto Networks (Prisma Cloud) in cloud-security-posture-management read as Prisma Cloud (7), Palo Alto Networks (Prisma SASE) in sase-platforms read as Palo Alto Networks Prisma SASE (7), Ping in workforce-identity-and-sso read as Ping Identity (7), Trellix in extended-detection-and-response read as Trellix XDR (7), AWS (Amazon Web Services) in cloud-hosting read as Amazon Web Services (6), Akamai in ddos-protection read as Akamai Prolexic (6), D3 Security in soar-platforms read as D3 Security Smart SOAR (6), Diligent in grc-platforms read as Diligent One (6), Diligent in third-party-risk-management read as Diligent One (6), Google Chronicle in siem-platforms read as Google Security Operations (6), HPE Aruba in sd-wan read as HPE Aruba EdgeConnect (6), MuleSoft in api-gateways read as MuleSoft Anypoint Platform (6), Palo Alto Networks in sd-wan read as Palo Alto Networks Prisma SD-WAN (6), Palo Alto Networks (Prisma SD-WAN) in sd-wan read as Palo Alto Networks Prisma SD-WAN (6), Rapid7 in managed-detection-and-response read as Rapid7 MDR (6), SentinelOne in managed-detection-and-response read as SentinelOne Singularity MDR (6), Sonatype in software-composition-analysis read as Sonatype Lifecycle (6), Versa in sase-platforms read as Versa SASE (6), Versa in sd-wan read as Versa Secure SD-WAN (6), ARCON in privileged-access-management read as ARCON PAM (5), Aikido in static-application-security-testing read as Aikido Security (5), ArcSight in siem-platforms read as OpenText ArcSight (5), Azure DDoS in ddos-protection read as Azure DDoS Protection (5), Azure SQL in managed-relational-databases read as Azure SQL Database (5), BMC Helix in it-asset-management read as BMC Helix ITAM (5), Check Point in email-security read as Check Point Harmony Email & Collaboration (5), Check Point in sase-platforms read as Check Point Harmony SASE (5), Cisco in extended-detection-and-response read as Cisco XDR (5), HPE in sase-platforms read as HPE Aruba (5), InvGate in it-asset-management read as InvGate Asset Management (5), Ivanti in it-asset-management read as Ivanti Neurons for ITAM (5), Ivanti in it-service-management read as Ivanti Neurons for ITSM (5), Palo Alto Prisma in sd-wan read as Palo Alto Networks Prisma SD-WAN (5), SentinelOne Singularity Endpoint in endpoint-detection-and-response read as SentinelOne Singularity (5), Symantec in data-loss-prevention read as Symantec Data Loss Prevention (5), Aiven in streaming-platforms read as Aiven for Apache Kafka (4), Akamai (Prolexic) in ddos-protection read as Akamai Prolexic (4), Azure Synapse in data-warehouses read as Azure Synapse Analytics (4), Broadcom (VMware) in sd-wan read as VMware VeloCloud SD-WAN (4), Check Point in zero-trust-network-access read as Check Point Harmony SASE (4), Cisco AppDynamics in application-performance-monitoring read as AppDynamics (4), Cisco Meraki in sd-wan read as Cisco Meraki SD-WAN (4), CrowdStrike Falcon Insight XDR in endpoint-detection-and-response read as CrowdStrike Falcon Insight (4), Datadog in cloud-security-posture-management read as Datadog Cloud Security Management (4), Elastic in extended-detection-and-response read as Elastic Security (4), Elastic in siem-platforms read as Elastic Security (4), Fortinet (FortiSASE) in sase-platforms read as Fortinet FortiSASE (4), Grafana Cloud in infrastructure-monitoring read as Grafana (4), Keeper Security in privileged-access-management read as KeeperPAM (4), Kong Enterprise in api-gateways read as Kong Gateway (4), Microsoft Defender for Endpoint P2 in endpoint-detection-and-response read as Microsoft Defender for Endpoint (4), MuleSoft in api-management read as MuleSoft Anypoint Platform (4), Netskope (Netskope One) in sase-platforms read as Netskope One (4), Okta Workforce Identity in multi-factor-authentication read as Okta (4), Palo Alto Networks in managed-detection-and-response read as Unit 42 Managed Detection and Response (4), Ping in multi-factor-authentication read as Ping Identity (4), Rapid7 in cloud-native-application-protection read as Rapid7 InsightCloudSec (4), Red Hat Advanced Cluster Security (ACS) in container-and-kubernetes-security read as Red Hat Advanced Cluster Security for Kubernetes (4), Saviynt (Enterprise Identity Cloud) in identity-governance read as Saviynt Enterprise Identity Cloud (4), SentinelOne in cloud-native-application-protection read as SentinelOne Singularity Cloud Security (4), Sonatype (Nexus Lifecycle) in software-composition-analysis read as Sonatype Lifecycle (4), Sophos in endpoint-detection-and-response read as Sophos Intercept X (4), Symantec (Broadcom) in data-loss-prevention read as Symantec Data Loss Prevention (4), Tenable in cloud-native-application-protection read as Tenable Cloud Security (4), Tenable in cloud-security-posture-management read as Tenable Cloud Security (4), Trend Micro in extended-detection-and-response read as Trend Vision One (4), UpGuard in attack-surface-management read as UpGuard BreachSight (4), Arctic Wolf in security-awareness-training read as Arctic Wolf Managed Security Awareness (3), Azure in object-storage read as Azure Blob Storage (3), BMC in it-asset-management read as BMC Helix ITAM (3), BMC Helix in incident-management-and-on-call read as BMC Helix ITSM (3), Cato in sase-platforms read as Cato SASE Cloud (3), CloudBees in ci-cd-platforms read as CloudBees CI (3), CrowdStrike Falcon Enterprise in endpoint-detection-and-response read as CrowdStrike Falcon (3), Domino in ml-platforms read as Domino Data Lab (3), Elastic Cloud in log-management read as Elastic Stack (3), Elasticsearch in log-management read as Elastic Stack (3), GCP in object-storage read as Google Cloud Storage (3), GitLab CI in ci-cd-platforms read as GitLab CI/CD (3), Google Cloud in object-storage read as Google Cloud Storage (3), Google SecOps in soar-platforms read as Google Security Operations SOAR (3), Grafana Enterprise in observability-platforms read as Grafana (3), Ivanti in vulnerability-management-platforms read as Ivanti Neurons for Vulnerability Management (3), Ivanti Neurons in it-asset-management read as Ivanti Neurons for ITAM (3), Kaspersky in endpoint-detection-and-response read as Kaspersky Endpoint Detection and Response (EDR) Expert (3), Kong in llm-gateways-and-observability read as Kong AI Gateway (3), Lacework in cloud-security-posture-management read as Lacework FortiCNAPP (3), MongoDB Atlas in vector-databases read as MongoDB Atlas Vector Search (3), Okta Workforce Identity Cloud in multi-factor-authentication read as Okta (3), Oracle Cloud in cloud-hosting read as Oracle Cloud Infrastructure (3), Oracle Cloud in object-storage read as Oracle Cloud Infrastructure Object Storage (3), Oracle Cloud (OCI) in cloud-hosting read as Oracle Cloud Infrastructure (3), Palo Alto in sase-platforms read as Palo Alto Networks Prisma SASE (3), Palo Alto Networks (Prisma Access) in sase-platforms read as Palo Alto Networks Prisma SASE (3), SCCM in patch-management read as Microsoft Configuration Manager (3), SentinelOne Singularity Complete in endpoint-detection-and-response read as SentinelOne Singularity (3), Sophos in managed-detection-and-response read as Sophos MDR (3), Teradata in data-warehouses read as Teradata Vantage (3), VMware VeloCloud (Broadcom) in sd-wan read as VMware VeloCloud SD-WAN (3), Vultr in managed-kubernetes-platforms read as Vultr Kubernetes Engine (3), AWS in api-management read as Amazon API Gateway (2), Abnormal in email-security read as Abnormal AI (2), Aikido in software-composition-analysis read as Aikido Security (2), Aqua in cloud-security-posture-management read as Aqua Security (2), Astra in penetration-testing-as-a-service read as Astra Security (2), Atlassian (Jira Service Management) in it-service-management read as Jira Service Management (2), Backblaze in object-storage read as Backblaze B2 (2), BitSight in attack-surface-management read as Bitsight (2), Bitwarden in secrets-management read as Bitwarden Secrets Manager (2), Broadcom (Symantec PAM) in privileged-access-management read as Symantec Privileged Access Manager (2), Cisco in email-security read as Cisco Secure Email (2), Cortex XSIAM in siem-platforms read as Palo Alto Networks Cortex XSIAM (2), D3 in soar-platforms read as D3 Security Smart SOAR (2), Datadog in siem-platforms read as Datadog Cloud SIEM (2), Datto in remote-monitoring-and-management read as Datto RMM (2), Exabeam Fusion in siem-platforms read as Exabeam (2), Fortinet (Fortinet Unified SASE) in sase-platforms read as Fortinet FortiSASE (2), Fortinet FortiEDR in endpoint-detection-and-response read as FortiEDR (2), Fortinet FortiGate in sd-wan read as Fortinet Secure SD-WAN (2), Fortinet Secure SD‑WAN in sd-wan read as Fortinet Secure SD-WAN (2), GitLab Self-Managed in ci-cd-platforms read as GitLab CI/CD (2), GitLab Ultimate in software-composition-analysis read as GitLab Dependency Scanning (2), Gloo in api-gateways read as Gloo Gateway (2), Google SecOps in siem-platforms read as Google Security Operations (2), Google Workspace Security in email-security read as Google Workspace (2), Grafana Enterprise in infrastructure-monitoring read as Grafana (2), Grafana Stack in observability-platforms read as Grafana (2), Hewlett Packard Enterprise (HPE) in sd-wan read as HPE Aruba EdgeConnect (2), Huntress in endpoint-detection-and-response read as Huntress Managed EDR (2), Keeper Security (KeeperPAM) in privileged-access-management read as KeeperPAM (2), Kong (Enterprise Edition) in api-gateways read as Kong Gateway (2), Kong AI in llm-gateways-and-observability read as Kong AI Gateway (2), Kong Enterprise (Kong Konnect) in api-management read as Kong Gateway (2), Lacework / FortiCNAPP in cloud-native-application-protection read as FortiCNAPP (2), Linode in cloud-hosting read as Akamai Connected Cloud (2), Linode in object-storage read as Linode Object Storage (2), Linode (Akamai) in managed-kubernetes-platforms read as Linode Kubernetes Engine (2), ManageEngine in it-service-management read as ManageEngine ServiceDesk Plus (2), Microsoft Entra in identity-governance read as Microsoft Entra ID (2), Microsoft Purview (Data Loss Prevention) in data-loss-prevention read as Microsoft Purview DLP (2), MuleSoft in workflow-orchestration read as MuleSoft Anypoint Platform (2), MuleSoft (Anypoint Platform) in api-gateways read as MuleSoft Anypoint Platform (2), MuleSoft (Salesforce) in api-gateways read as MuleSoft Anypoint Platform (2), MuleSoft (Salesforce) in api-management read as MuleSoft Anypoint Platform (2), NetScout in ddos-protection read as NETSCOUT Arbor (2), NeuralTrust in llm-gateways-and-observability read as NeuralTrust TrustGate (2), Nightfall in data-loss-prevention read as Nightfall AI (2), Omnissa in unified-endpoint-management read as Omnissa Workspace ONE (2), Oracle NoSQL in nosql-databases read as Oracle NoSQL Database (2), Oracle NoSQL Cloud in nosql-databases read as Oracle NoSQL Database (2), Palo Alto in sd-wan read as Palo Alto Networks Prisma SD-WAN (2), Palo Alto Cortex Cloud in cloud-native-application-protection read as Palo Alto Networks Cortex Cloud (2), Palo Alto Networks (Prisma Cloud) in container-and-kubernetes-security read as Prisma Cloud (2), Palo Alto Networks (Prisma) in sd-wan read as Palo Alto Networks Prisma SD-WAN (2), RSA in multi-factor-authentication read as RSA SecurID (2), Red Hat Advanced Cluster Security in container-and-kubernetes-security read as Red Hat Advanced Cluster Security for Kubernetes (2), Scaleway in managed-kubernetes-platforms read as Scaleway Kapsule (2), Securden in privileged-access-management read as Securden Unified PAM (2), SentinelOne in cloud-security-posture-management read as SentinelOne Singularity Cloud Security (2), SentinelOne in container-and-kubernetes-security read as SentinelOne Singularity (2), ServiceNow in grc-platforms read as ServiceNow Integrated Risk Management (2), SolarWinds in it-asset-management read as SolarWinds Service Desk (2), Sophos in email-security read as Sophos Email (2), Sophos Endpoint in endpoint-detection-and-response read as Sophos Intercept X (2), Spot (Spot.io) in cloud-cost-management read as Spot by NetApp (2), Spot by NetApp in cloud-cost-management read as Spot by NetApp (2), Thycotic in secrets-management read as Delinea Secret Server (2), Trellix (formerly McAfee EDR) in endpoint-detection-and-response read as Trellix EDR (2), Zscaler (Zero Trust Exchange) in sase-platforms read as Zscaler Zero Trust Exchange (2), Zscaler (Zero Trust SASE) in sase-platforms read as Zscaler Zero Trust Exchange (2), AWS in content-delivery-networks read as Amazon CloudFront (1), AWS in object-storage read as Amazon S3 (1), AWS CloudWatch in log-management read as Amazon CloudWatch Logs (1), AZURE Resource Manager in infrastructure-as-code read as Azure Resource Manager templates (1), Akamai (Kona Site Defender) in ddos-protection read as Akamai Prolexic (1), Akamai (Prolexic & App & API Protector) in ddos-protection read as Akamai Prolexic (1), Akamai Linode in cloud-hosting read as Akamai Connected Cloud (1), AlloyDB in managed-relational-databases read as AlloyDB for PostgreSQL (1), Amazon Q in ai-coding-assistants read as Amazon Q Developer (1), Aqua Platform in container-and-kubernetes-security read as Aqua Security (1), Argo in infrastructure-as-code read as Argo CD (1), Astra in nosql-databases read as DataStax Astra DB (1), Astronomer (Managed Airflow) in workflow-orchestration read as Astronomer Astro (1), Atlassian in source-control-hosting read as Bitbucket (1), Attaxion in attack-surface-management read as Attaxion (1), Azure in api-management read as Azure API Management (1), Azure Resource Manager in infrastructure-as-code read as Azure Resource Manager templates (1), BMC in it-service-management read as BMC Helix ITSM (1), BMC Helix (and Remedy) in it-service-management read as BMC Helix ITSM (1), BMC Helix (formerly Remedy) in it-service-management read as BMC Helix ITSM (1), Barracuda (Email Security Gateway - ESG) in email-security read as Barracuda Email Protection (1), Bitdefender in endpoint-detection-and-response read as Bitdefender GravityZone (1), Bitwarden (Business) in secrets-management read as Bitwarden Secrets Manager (1), Bitwarden Enterprise in secrets-management read as Bitwarden Secrets Manager (1), Broadcom (VMware SD-WAN) in sd-wan read as VMware VeloCloud SD-WAN (1), Broadcom Layer7 in api-gateways read as Broadcom Layer7 API Gateway (1), Broadcom Symantec Endpoint Security Complete in endpoint-detection-and-response read as Symantec Endpoint Security (1), Broadcom/Symantec in data-loss-prevention read as Symantec Data Loss Prevention (1), Broadcom/VMware in sd-wan read as VMware VeloCloud SD-WAN (1), Broadcom/VMware (VeloCloud) in sd-wan read as VMware VeloCloud SD-WAN (1), Carbon Black (CB Defense / Carbon Black Cloud, now Broadcom/VMware) in endpoint-detection-and-response read as VMware Carbon Black (1), Carbon Black (VMware Carbon Black) in endpoint-detection-and-response read as VMware Carbon Black (1), Carbon Black (now Broadcom) in endpoint-detection-and-response read as VMware Carbon Black (1), Carbon Black Cloud in endpoint-detection-and-response read as VMware Carbon Black (1), Catalyst in sd-wan read as Cisco Catalyst SD-WAN (1), Check Point (Avanan) in email-security read as Check Point Harmony Email & Collaboration (1), Check Point Harmony (formerly Perimeter 81) in zero-trust-network-access read as Check Point Harmony SASE (1), Check Point Harmony Email in email-security read as Check Point Harmony Email & Collaboration (1), Check Point Software Technologies in sase-platforms read as Check Point Harmony SASE (1), Cisco Meraki (MX Series) in sd-wan read as Cisco Meraki SD-WAN (1), CrowdStrike Falcon in cloud-native-application-protection read as CrowdStrike Falcon Cloud Security (1), CrowdStrike Falcon in cloud-security-posture-management read as CrowdStrike Falcon Cloud Security (1), CrowdStrike Falcon in managed-detection-and-response read as CrowdStrike Falcon Complete (1), CrowdStrike Falcon Cloud in cloud-native-application-protection read as CrowdStrike Falcon Cloud Security (1), CrowdStrike Falcon Exposure in vulnerability-management-platforms read as CrowdStrike Falcon Exposure Management (1), D3 Security (Morpheus) in soar-platforms read as D3 Security Smart SOAR (1), D3 Security (Morpheus/Smart SOAR) in soar-platforms read as D3 Security Smart SOAR (1), DataStax Astra (Apache Cassandra) in nosql-databases read as DataStax Astra DB (1), Databricks in workflow-orchestration read as Databricks Lakeflow Jobs (1), Delinea in business-password-managers read as Delinea Secret Server (1), Delinea in secrets-management read as Delinea Secret Server (1), Delinea (Centrify) in secrets-management read as Delinea Secret Server (1), Delinea (formerly Thycotic) in secrets-management read as Delinea Secret Server (1), DigitalOcean in managed-relational-databases read as DigitalOcean Managed Databases (1), DigitalOcean in object-storage read as DigitalOcean Spaces (1), Diligent (Diligent One Platform) in grc-platforms read as Diligent One (1), Diligent (formerly HighGear/EthicsPoint) in grc-platforms read as Diligent One (1), Diligent (including Diligent-3rdRisk) in third-party-risk-management read as Diligent One (1), ELK in log-management read as Elastic Stack (1), ELK Stack in log-management read as Elastic Stack (1), ELK Stack (Elasticsearch, Logstash, Kibana) in log-management read as Elastic Stack (1), ELK Stack (Elasticsearch/Logstash/Kibana) in observability-platforms read as Elastic Stack (1), ELK Stack (Elasticsearch/Logstash/Kibana, self-hosted) in log-management read as Elastic Stack (1), ESET in endpoint-detection-and-response read as ESET PROTECT (1), ESET in extended-detection-and-response read as ESET PROTECT (1), ESET in managed-detection-and-response read as ESET PROTECT MDR (1), Elastic (ELK Stack) in log-management read as Elastic Stack (1), Elastic (ELK Stack/Observability) in log-management read as Elastic Stack (1), Elastic (ELK) in log-management read as Elastic Stack (1), Elasticsearch (ELK) in log-management read as Elastic Stack (1), Exabeam in soar-platforms read as Exabeam Incident Responder (1), FatPipe in sd-wan read as FatPipe SD-WAN (1), Firebase in customer-identity-and-access-management read as Firebase Authentication (1), Flexera (FlexNet Manager + IT Visibility) in it-asset-management read as Flexera One (1), Flexera (formerly RightScale) in cloud-cost-management read as Flexera One (1), Flexera (including Snow Software) in it-asset-management read as Flexera One (1), FortiCNAPP in cloud-security-posture-management read as Lacework FortiCNAPP (1), Fortinet in siem-platforms read as FortiSIEM (1), Fortinet (FortiGate OS) in sd-wan read as Fortinet Secure SD-WAN (1), Fortinet (FortiGate) in sd-wan read as Fortinet Secure SD-WAN (1), Fortinet (Lacework FortiCNAPP) in cloud-security-posture-management read as Lacework FortiCNAPP (1), Fortinet (Lacework) in cloud-native-application-protection read as FortiCNAPP (1), Fortinet (Lacework) in cloud-security-posture-management read as Lacework FortiCNAPP (1), Fortinet (Unified SASE) in sase-platforms read as Fortinet FortiSASE (1), GitHub Enterprise Server (self-hosted) in source-control-hosting read as GitHub (1), GitLab (CE & EE) in ci-cd-platforms read as GitLab CI/CD (1), GitLab (Self-Managed / Ultimate) in ci-cd-platforms read as GitLab CI/CD (1), GitLab CI (cloud) in ci-cd-platforms read as GitLab CI/CD (1), GitLab SaaS (Premium/Ultimate) in ci-cd-platforms read as GitLab CI/CD (1), GitLab Self-Managed in source-control-hosting read as GitLab (1), GitLab Self-Managed (Ultimate tier) in ci-cd-platforms read as GitLab CI/CD (1), GitLab Self-Managed Premium in source-control-hosting read as GitLab (1), GitLab Ultimate in static-application-security-testing read as GitLab SAST (1), GitLab Ultimate (GitLab CI/CD) in ci-cd-platforms read as GitLab CI/CD (1), GitLab Ultimate (SaaS) in source-control-hosting read as GitLab (1), GitLab Ultimate (self‑managed) in source-control-hosting read as GitLab (1), GitLab Ultimate (with SAST built-in) in static-application-security-testing read as GitLab SAST (1), GitLab Ultimate / Premium in ci-cd-platforms read as GitLab CI/CD (1), GitLab self-managed in ci-cd-platforms read as GitLab CI/CD (1), GitLab self-managed in source-control-hosting read as GitLab (1), Google in ddos-protection read as Google Cloud Armor (1), Google Chronicle (Security Operations) in siem-platforms read as Google Security Operations (1), Google Cloud Platform (GCS) in object-storage read as Google Cloud Storage (1), Google SecOps (SOAR) in soar-platforms read as Google Security Operations SOAR (1), Google SecOps (post-Siemplify) in soar-platforms read as Google Security Operations SOAR (1), Google Security Operations (SecOps SOAR) in soar-platforms read as Google Security Operations SOAR (1), Google Workspace security in email-security read as Google Workspace (1), Grafana Cloud (Grafana Labs) in observability-platforms read as Grafana (1), Grafana Cloud (Loki/Tempo/Prometheus) in observability-platforms read as Grafana (1), Grafana Cloud Enterprise in infrastructure-monitoring read as Grafana (1), Grafana Enterprise (self-hosted) in observability-platforms read as Grafana (1), Grafana Stack (Prometheus + Loki + Tempo + K6) in observability-platforms read as Grafana (1), HPE (Aruba EdgeConnect) in sd-wan read as HPE Aruba EdgeConnect (1), HPE (Aruba Networking) in sd-wan read as HPE Aruba EdgeConnect (1), HPE Aruba (EdgeConnect) in sd-wan read as HPE Aruba EdgeConnect (1), HPE Aruba Networking EdgeConnect SD-WAN in sd-wan read as HPE Aruba EdgeConnect (1), Horizon3.ai in penetration-testing-as-a-service read as Horizon3.ai NodeZero (1), Horizon3.ai (NodeZero) in penetration-testing-as-a-service read as Horizon3.ai NodeZero (1), Huntress in security-awareness-training read as Huntress Managed Security Awareness Training (1), IBM in api-management read as IBM API Connect (1), IBM in object-storage read as IBM Cloud Object Storage (1), IBM in unified-endpoint-management read as IBM MaaS360 (1), Instaclustr in streaming-platforms read as Instaclustr for Apache Kafka (1), Instaclustr (NetApp) in streaming-platforms read as Instaclustr for Apache Kafka (1), Ivanti (Asset Management + Endpoint Management) in it-asset-management read as Ivanti Neurons for ITAM (1), Ivanti (Neurons for ITSM) in it-service-management read as Ivanti Neurons for ITSM (1), Juniper Networks (Contrail & Mist) in sd-wan read as Juniper (1), Juniper SD-WAN in sd-wan read as Juniper (1), Kaseya in unified-endpoint-management read as Kaseya VSA (1), Kaspersky Lab in endpoint-detection-and-response read as Kaspersky Endpoint Detection and Response (EDR) Expert (1), Keeper (Enterprise) in business-password-managers read as Keeper Security (1), Keeper Business in privileged-access-management read as KeeperPAM (1), Keeper Security Enterprise in privileged-access-management read as KeeperPAM (1), Kong (Kong Konnect) in api-management read as Kong Gateway (1), Kong (Konnect / Ingress Controller) in api-gateways read as Kong Gateway (1), Kong (OSS) in api-management read as Kong Gateway (1), Kong (self-managed) in api-gateways read as Kong Gateway (1), Kong Enterprise (Kong Gateway + Kong Konnect) in api-gateways read as Kong Gateway (1), Kong Enterprise (Kong Inc.) in api-management read as Kong Gateway (1), Kong Enterprise (Kong Konnect) in api-gateways read as Kong Gateway (1), Kong Enterprise (Konnect) in api-management read as Kong Gateway (1), Kong Enterprise (and Kong Konnect) in api-management read as Kong Gateway (1), Lacework (Fortinet) in cloud-native-application-protection read as FortiCNAPP (1), Lacework (Now Fortinet) in cloud-security-posture-management read as Lacework FortiCNAPP (1), Lacework (now FortiCNAPP) in cloud-security-posture-management read as Lacework FortiCNAPP (1), Lacework/Fortinet in cloud-native-application-protection read as FortiCNAPP (1), Layer7 in api-gateways read as Broadcom Layer7 API Gateway (1), Linode in managed-kubernetes-platforms read as Linode Kubernetes Engine (1), Linode in managed-relational-databases read as Linode Managed Databases (1), Linode (Akamai) in cloud-hosting read as Akamai Connected Cloud (1), Linode/Akamai in managed-kubernetes-platforms read as Linode Kubernetes Engine (1), Linode/Akamai in managed-relational-databases read as Linode Managed Databases (1), MSP360 in remote-monitoring-and-management read as MSP360 RMM (1), ManageEngine in it-asset-management read as ManageEngine AssetExplorer (1), Mandiant/Google in attack-surface-management read as Mandiant Attack Surface Management (1), Mend (Formerly WhiteSource) in software-composition-analysis read as Mend.io (1), Mend (Fortify) in software-composition-analysis read as Mend.io (1), Meraki in sd-wan read as Cisco Meraki SD-WAN (1), Microsoft in ddos-protection read as Azure DDoS Protection (1), Microsoft Defender in cloud-security-posture-management read as Microsoft Defender for Cloud (1), Microsoft Defender in email-security read as Microsoft Defender for Office 365 (1), Microsoft Defender in extended-detection-and-response read as Microsoft Defender XDR (1), Microsoft Defender Experts in managed-detection-and-response read as Microsoft Defender Experts for XDR (1), Microsoft Defender for Endpoint Plan 2 (P2) in endpoint-detection-and-response read as Microsoft Defender for Endpoint (1), Microsoft Entra in zero-trust-network-access read as Microsoft Entra ID (1), Microsoft System Center Configuration Manager (SCCM / Intune) in patch-management read as Microsoft Configuration Manager (1), Microsoft System Center Configuration Manager (SCCM/MECM) in patch-management read as Microsoft Configuration Manager (1), Mimecast (Advanced Email Security) in email-security read as Mimecast Email Security (1), MongoDB in vector-databases read as MongoDB Atlas Vector Search (1), MuleSoft (Anypoint) in api-management read as MuleSoft Anypoint Platform (1), MuleSoft (by Salesforce) in api-management read as MuleSoft Anypoint Platform (1), MuleSoft (owned by Salesforce) in api-management read as MuleSoft Anypoint Platform (1), N-able in unified-endpoint-management read as N-able N-central (1), Netskope (Intelligent SSE) in sase-platforms read as Netskope One (1), Omada (Omada Identity Cloud) in identity-governance read as Omada Identity (1), Omada (Omada Identity) in identity-governance read as Omada Identity (1), Omnissa (formerly Citrix Endpoint Management) in unified-endpoint-management read as Omnissa Workspace ONE (1), One Identity (Delinea) in identity-governance read as One Identity Manager (1), One Identity (One Identity Manager) in identity-governance read as One Identity Manager (1), OneTrust (Third-Party Risk Management) in third-party-risk-management read as OneTrust Third-Party Risk Management (1), OpenText in siem-platforms read as OpenText ArcSight (1), OpenVPN in sase-platforms read as OpenVPN CloudConnexa (1), Oracle in cloud-hosting read as Oracle Cloud Infrastructure (1), Oracle in object-storage read as Oracle Cloud Infrastructure Object Storage (1), Oracle (OKE) in managed-kubernetes-platforms read as Oracle Container Engine for Kubernetes (1), Palo Alto in cloud-security-posture-management read as Prisma Cloud (1), Palo Alto (Prisma Cloud) in cloud-security-posture-management read as Prisma Cloud (1), Palo Alto (Prisma SD-WAN) in sase-platforms read as Palo Alto Networks Prisma SASE (1), Palo Alto (Unit 42/ Cortex) in managed-detection-and-response read as Unit 42 Managed Detection and Response (1), Palo Alto Cortex in extended-detection-and-response read as Palo Alto Networks Cortex XDR (1), Palo Alto Networks (Cortex XDR) in endpoint-detection-and-response read as Palo Alto Networks Cortex XDR (1), Palo Alto Networks (Cortex) in managed-detection-and-response read as Unit 42 Managed Detection and Response (1), Palo Alto Networks (Prisma Cloud / Cortex Cloud) in cloud-security-posture-management read as Prisma Cloud (1), Palo Alto Networks (Unit 42 MDR) in managed-detection-and-response read as Unit 42 Managed Detection and Response (1), Ping in identity-governance read as Ping Identity (1), PostgreSQL (+ pgvector) in vector-databases read as pgvector (1), PostgreSQL (via pgvector) in vector-databases read as pgvector (1), Proofpoint (Bundled) in security-awareness-training read as Proofpoint ZenGuide (1), Proofpoint (Threat Protection Platform) in email-security read as Proofpoint Email Protection (1), Proofpoint (ZenGuide) in security-awareness-training read as Proofpoint ZenGuide (1), Proofpoint Enterprise in email-security read as Proofpoint Email Protection (1), Proofpoint Essentials in email-security read as Proofpoint Email Protection (1), Proton in business-password-managers read as Proton Pass (1), Rapid7 in soar-platforms read as Rapid7 InsightConnect (1), Rapid7 (Rapid7 MDR) in managed-detection-and-response read as Rapid7 MDR (1), Red Hat Advanced Cluster Security (RHACS) in container-and-kubernetes-security read as Red Hat Advanced Cluster Security for Kubernetes (1), Render in managed-relational-databases read as Render Postgres (1), Replit in ai-coding-assistants read as Replit AI (1), Replit Enterprise in ai-coding-assistants read as Replit AI (1), Rippling in unified-endpoint-management read as Rippling IT (1), SCCM in it-asset-management read as Microsoft Configuration Manager (1), Saviynt Identity Cloud in identity-governance read as Saviynt Enterprise Identity Cloud (1), Securden in business-password-managers read as Securden Password Vault (1), Self-Hosted GitLab (CE or Ultimate Self-Managed) in ci-cd-platforms read as GitLab CI/CD (1), SentinelOne (Singularity MDR) in managed-detection-and-response read as SentinelOne Singularity MDR (1), SentinelOne (Wayfinder MDR / Vigilance) in managed-detection-and-response read as SentinelOne Singularity MDR (1), SentinelOne (Wayfinder Threat Detection and Response) in managed-detection-and-response read as SentinelOne Singularity MDR (1), SentinelOne Singularity Enterprise in endpoint-detection-and-response read as SentinelOne Singularity (1), SentinelOne Singularity Platform in endpoint-detection-and-response read as SentinelOne Singularity (1), Sentinelone Singularity in endpoint-detection-and-response read as SentinelOne Singularity (1), ServiceNow (ITAM + CMDB) in it-asset-management read as ServiceNow IT Asset Management (1), ServiceNow (Integrated Risk Management) in grc-platforms read as ServiceNow Integrated Risk Management (1), ServiceNow IT Service Management in incident-management-and-on-call read as ServiceNow ITSM (1), ServiceNow IT Service Management (ITSM) in incident-management-and-on-call read as ServiceNow ITSM (1), SolarWinds in siem-platforms read as SolarWinds Security Event Manager (1), Sophos Endpoint (Intercept X) in endpoint-detection-and-response read as Sophos Intercept X (1), Sophos Intercept X Advanced in endpoint-detection-and-response read as Sophos Intercept X (1), Sophos Intercept X with XDR in endpoint-detection-and-response read as Sophos Intercept X (1), Spiceworks in it-asset-management read as Spiceworks Inventory (1), Spiceworks in it-service-management read as Spiceworks Cloud Help Desk (1), Spiceworks (Free Edition) in it-asset-management read as Spiceworks Inventory (1), Splunk in soar-platforms read as Splunk SOAR (1), Spot (by Flexera) in cloud-cost-management read as Spot by NetApp (1), Spot by NetApp (now part of IBM) in cloud-cost-management read as Spot by NetApp (1), Symantec/Broadcom in data-loss-prevention read as Symantec Data Loss Prevention (1), Thales (formerly Gemalto) in customer-identity-and-access-management read as Thales OneWelcome (1), Tools4ever in identity-governance read as Tools4ever HelloID (1), Trellix in endpoint-detection-and-response read as Trellix EDR (1), Trend Micro (Trend Vision One / TrendAI) in extended-detection-and-response read as Trend Vision One (1), Trend Micro (Vision One) in extended-detection-and-response read as Trend Vision One (1), Trend Micro XDR in endpoint-detection-and-response read as Trend Micro (1), UpCloud in managed-kubernetes-platforms read as UpCloud Managed Kubernetes (1), VMware in sd-wan read as VMware VeloCloud SD-WAN (1), VMware (NSX Advanced Load Balancer / Transit SE) in sd-wan read as VMware VeloCloud SD-WAN (1), VMware (Omnissa) in unified-endpoint-management read as Omnissa Workspace ONE (1), VMware (VeloCloud) in sd-wan read as VMware VeloCloud SD-WAN (1), VMware VeloCloud (Now Under Broadcom) in sd-wan read as VMware VeloCloud SD-WAN (1), VMware VeloCloud (now Broadcom) in sd-wan read as VMware VeloCloud SD-WAN (1), VMware VeloCloud Enterprise Edition in sd-wan read as VMware VeloCloud SD-WAN (1), VMware Velocloud in sd-wan read as VMware VeloCloud SD-WAN (1), VMware/Broadcom in sd-wan read as VMware VeloCloud SD-WAN (1), VMware/Broadcom (VeloCloud) in sd-wan read as VMware VeloCloud SD-WAN (1), Vultr (VKE) in managed-kubernetes-platforms read as Vultr Kubernetes Engine (1), XSIAM in extended-detection-and-response read as Palo Alto Networks Cortex XSIAM (1), Zscaler (SSE) in sase-platforms read as Zscaler Zero Trust Exchange (1), Zscaler Data Protection in data-loss-prevention read as Zscaler (1), Zscaler Zero Trust in sase-platforms read as Zscaler Zero Trust Exchange (1), attaxion in attack-surface-management read as Attaxion (1)

Combined answers split into one label per product: AWS Aurora / Amazon RDS, AWS Glue / Azure Data Factory, AWS Secrets Manager / Azure Key Vault / GCP Secret Manager, AWS WAF + AWS WAF Bot Control, AWS WAF + Shield Advanced, AWS WAF / Azure WAF, AWS X-Ray / CloudWatch, AccuKnox/Uptycs, Aiven/Instaclustr, Amazon EKS + EKS Anywhere, Amazon Elastic Kubernetes Service (EKS) / EKS Anywhere, Amazon Kinesis Data Streams / Amazon MSK, Amazon RDS / Amazon Aurora (AWS), Apache Kafka / Confluent Platform / Confluent Cloud, Apache Pulsar / StreamNative, AppDynamics/Cisco, Automox/NinjaOne, Axway Amplify / Gravitee / APISIX, Azure AI Search & Azure OpenAI Service, Azure ARM Templates & Bicep, Azure DevOps (ADO) / Azure Pipelines, Azure DevOps Repos / Azure DevOps Server, Azure Event Hubs / Stream Analytics, Azure SQL / Azure Database for MySQL, Azure SQL / Postgres, Azure SQL Database/MySQL/PostgreSQL, BMC Helix / Cherwell, BMC Remedy (legacy) / BMC Helix, Broadcom/CloudHealth, CDK/CloudFormation, Cassandra/DataStax, Cisco Secure Access / Cisco SASE, Cisco Umbrella + Cisco Secure Access by Duo, Citrix Endpoint Management / Citrix Workspace, Confluent Platform / Confluent Cloud, CouchDB/Couchbase, CyberArk/NetSPI, D3 Smart SOAR / Morpheus, Digital Guardian / Fortra, Elastic Observability / Elastic Stack, Elastic Stack (Elasticsearch, Logstash, Kibana) / OpenSearch (self-hosted), Elastic Stack / ELK (Self-Managed), Elastic/OpenSearch, Elasticsearch / OpenSearch / Vespa, Entra ID / Azure AD, Falcon Surface / Falcon Exposure Management, Fastly/EdgeOne, Feitian / Yubico (Hardware Tokens), Flashpoint/ZeroFox, Flexera / Snow Software, ForgeRock/PingOne for Customers, Fortinet Secure SD-WAN + FortiSASE, GitHub Actions / GitHub Enterprise, GitHub Advanced Security (GHAS) / CodeQL, GitHub Advanced Security / GitLab Ultimate, GitHub CodeQL / GitHub Advanced Security, Gloo/Solo.io, Google Cloud Pub/Sub / Dataflow, Google Cloud Spanner / Firestore, Google Vertex AI / Gemini Enterprise Agent Platform, Grafana Tempo + Loki + Prometheus, Grafana Tempo/Prometheus, HashiCorp Vault Enterprise / HCP Vault, Hoxhunt/Infosec IQ, IBM OpenPages / MetricStream, IBM Security Verify / IBM ISAM, Imperva / F5 (Advanced WAF/DDoS), Informatica / Qlik Talend, Instaclustr/Aiven, InvGate / Virima, Ivanti Neurons / Ivanti UEM, Ivanti Neurons/BigFix, Jenkins + CloudBees CI, Jira Service Management / Opsgenie (Atlassian), KeePass / KeePassXC, Kong Enterprise / Kong Gateway (self-hosted), Kubeflow + MLflow, ManageEngine RMM Central / Endpoint Central, Mandiant Advantage / Google Threat Intelligence, Mandiant/IONIX, Microsoft Azure Backup + Azure Site Recovery, Microsoft Azure Synapse Analytics / Fabric, Microsoft Configuration Manager (SCCM) / Intune, Microsoft Configuration Manager (SCCM/MECM) + Intune, Microsoft Endpoint Configuration Manager (MECM) / SCCM, Microsoft Endpoint Configuration Manager (MECM/SCCM) / Intune, Microsoft Endpoint Configuration Manager (SCCM) / Intune, Microsoft Endpoint Configuration Manager / Intune, Microsoft Entra ID (formerly Azure AD) + Microsoft Authenticator, Microsoft Entra ID / Microsoft Authenticator, Microsoft Entra ID Governance / Okta Identity Governance, Microsoft Entra ID/Azure AD, Microsoft Intune + Microsoft Defender for Endpoint, Microsoft SCCM/Intune, Microsoft/GitHub, Nessus/Tenable, NetSPI + Synack, NetSPI / NCC Group, Netskope One / Netskope Private Access (NPA), Okta Adaptive MFA / Okta Verify, Okta Customer Identity / Auth0, Okta Identity Cloud + Okta Access Gateway, Okta Workforce Identity / Okta Verify, Okta/Okta Verify, OpenRouter/Helicone, OpenTelemetry + Grafana/Prometheus, Optro/AuditBoard, Palo Alto Cortex XDR/XSIAM, Palo Alto Networks Cortex MDR / Unit 42, Ping Identity / PingID, Prisma Cloud / Cortex Cloud, Prometheus + Grafana Stack, Qualys VMDR / Qualys Enterprise TruRisk Platform, Rancher (SUSE) / RKE2, Redis Enterprise / Redis, Redis Enterprise/ElastiCache, SOTI MobiControl/42Gears, Scytale/Thoropass, Sentinel + Logic Apps, ServiceNow GRC / Archer, SonarQube Enterprise / SonarCloud, Sophos Intercept X / Sophos Central, Splunk + ThreatConnect, Splunk AppDynamics / Splunk Observability, Splunk Observability + Splunk Enterprise, Statsig/PostHog, Stellar Cyber / Hunters, Stitch/Hevo, Subversion/SVN, Talend / Qlik Talend Cloud, Tempo/Jaeger, Tenable Attack Surface Management / Tenable One, Tenable Nessus/Tenable One, Tenable One / Torii, Terraform / Terraform Enterprise, Terraform Cloud / Terraform Enterprise (HCP), Terraform Enterprise / HCP Terraform, Thanos/Cortex/VictoriaMetrics, Thycotic + BeyondTrust, Thycotic/Delinea Secret Server, Twingate / Tailscale, Tyk/Gravitee, VMware Carbon Black / Broadcom Carbon Black, Vanta / Drata, Veeam Data Cloud / Veeam Data Platform, VictorOps/Datadog, Workspace ONE UEM / Omnissa, YubiKey / Yubico, Yubico/Auth0, ZenGRC/Onspring, Zilla Security/CyberArk

## Appendix: loose paraphrase stability

- Claude Haiku 4.5: a direct first choice kept as first choice or alternative in 34 of 63 categories (54%); differing under the strict rule: api-gateways, api-management, application-performance-monitoring, backup-and-disaster-recovery, business-password-managers, ci-cd-platforms, cloud-cost-management, cloud-hosting, cloud-native-application-protection, compliance-automation, container-and-kubernetes-security, customer-identity-and-access-management, data-loss-prevention, data-warehouses, endpoint-protection, etl-and-elt, extended-detection-and-response, feature-flags, identity-governance, incident-management-and-on-call, infrastructure-monitoring, llm-gateways-and-observability, log-management, managed-detection-and-response, managed-kubernetes-platforms, managed-relational-databases, ml-platforms, multi-factor-authentication, next-generation-firewalls, nosql-databases, observability-platforms, patch-management, penetration-testing-as-a-service, privileged-access-management, sase-platforms, secrets-management, security-awareness-training, soar-platforms, software-composition-analysis, source-control-hosting, static-application-security-testing, streaming-platforms, third-party-risk-management, threat-intelligence-platforms, unified-endpoint-management, vulnerability-management-platforms, web-application-firewalls, workforce-identity-and-sso, zero-trust-network-access
- GPT-5.4 mini: a direct first choice kept as first choice or alternative in 51 of 67 categories (76%); differing under the strict rule: attack-surface-management, backup-and-disaster-recovery, ci-cd-platforms, cloud-cost-management, cloud-native-application-protection, customer-identity-and-access-management, email-security, endpoint-detection-and-response, infrastructure-as-code, infrastructure-monitoring, llm-gateways-and-observability, log-management, managed-kubernetes-platforms, managed-relational-databases, ml-platforms, multi-factor-authentication, next-generation-firewalls, nosql-databases, object-storage, observability-platforms, patch-management, penetration-testing-as-a-service, sase-platforms, sd-wan, siem-platforms, soar-platforms, software-composition-analysis, static-application-security-testing, streaming-platforms, third-party-risk-management, vulnerability-management-platforms, web-application-firewalls, workforce-identity-and-sso, zero-trust-network-access
- Gemini 3.5 Flash: a direct first choice kept as first choice or alternative in 56 of 67 categories (84%); differing under the strict rule: api-gateways, api-management, attack-surface-management, backup-and-disaster-recovery, ci-cd-platforms, cloud-cost-management, cloud-native-application-protection, cloud-security-posture-management, customer-identity-and-access-management, data-loss-prevention, endpoint-detection-and-response, endpoint-protection, extended-detection-and-response, grc-platforms, identity-governance, incident-management-and-on-call, infrastructure-as-code, infrastructure-monitoring, llm-gateways-and-observability, log-management, managed-detection-and-response, managed-kubernetes-platforms, ml-platforms, multi-factor-authentication, next-generation-firewalls, object-storage, observability-platforms, patch-management, penetration-testing-as-a-service, privileged-access-management, sase-platforms, sd-wan, soar-platforms, software-composition-analysis, source-control-hosting, static-application-security-testing, third-party-risk-management, threat-intelligence-platforms, vector-databases, vulnerability-management-platforms, web-application-firewalls, workflow-orchestration, workforce-identity-and-sso, zero-trust-network-access
- Perplexity Sonar: a direct first choice kept as first choice or alternative in 57 of 67 categories (85%); differing under the strict rule: attack-surface-management, backup-and-disaster-recovery, business-password-managers, cloud-hosting, compliance-automation, container-and-kubernetes-security, customer-identity-and-access-management, ddos-protection, endpoint-protection, extended-detection-and-response, grc-platforms, incident-management-and-on-call, infrastructure-monitoring, llm-gateways-and-observability, log-management, managed-kubernetes-platforms, managed-relational-databases, ml-platforms, multi-factor-authentication, next-generation-firewalls, object-storage, observability-platforms, patch-management, sase-platforms, security-awareness-training, siem-platforms, software-composition-analysis, source-control-hosting, third-party-risk-management, vector-databases, web-application-firewalls, workflow-orchestration, zero-trust-network-access
- Grok 4.1 Fast: a direct first choice kept as first choice or alternative in 59 of 67 categories (88%); differing under the strict rule: api-gateways, api-management, application-performance-monitoring, attack-surface-management, business-password-managers, ci-cd-platforms, compliance-automation, container-and-kubernetes-security, data-loss-prevention, email-security, endpoint-detection-and-response, error-and-crash-monitoring, etl-and-elt, extended-detection-and-response, grc-platforms, identity-governance, it-asset-management, llm-gateways-and-observability, log-management, managed-kubernetes-platforms, next-generation-firewalls, nosql-databases, object-storage, observability-platforms, patch-management, penetration-testing-as-a-service, remote-monitoring-and-management, sase-platforms, sd-wan, siem-platforms, software-composition-analysis, streaming-platforms, third-party-risk-management, web-application-firewalls, workflow-orchestration, workforce-identity-and-sso
- Mistral Small: a direct first choice kept as first choice or alternative in 46 of 67 categories (69%); differing under the strict rule: api-gateways, application-performance-monitoring, attack-surface-management, backup-and-disaster-recovery, business-password-managers, ci-cd-platforms, cloud-cost-management, cloud-native-application-protection, cloud-security-posture-management, compliance-automation, container-and-kubernetes-security, customer-identity-and-access-management, data-loss-prevention, data-warehouses, ddos-protection, email-security, endpoint-detection-and-response, endpoint-protection, etl-and-elt, extended-detection-and-response, feature-flags, grc-platforms, identity-governance, infrastructure-as-code, infrastructure-monitoring, it-service-management, llm-gateways-and-observability, log-management, managed-detection-and-response, managed-kubernetes-platforms, managed-relational-databases, ml-platforms, multi-factor-authentication, next-generation-firewalls, nosql-databases, object-storage, observability-platforms, patch-management, penetration-testing-as-a-service, remote-monitoring-and-management, sase-platforms, sd-wan, security-awareness-training, siem-platforms, soar-platforms, software-composition-analysis, source-control-hosting, static-application-security-testing, threat-intelligence-platforms, unified-endpoint-management, vulnerability-management-platforms, web-application-firewalls, workflow-orchestration, workforce-identity-and-sso, zero-trust-network-access
- DeepSeek V4 Flash: a direct first choice kept as first choice or alternative in 55 of 67 categories (82%); differing under the strict rule: api-gateways, api-management, application-performance-monitoring, attack-surface-management, backup-and-disaster-recovery, ci-cd-platforms, cloud-cost-management, cloud-hosting, content-delivery-networks, customer-identity-and-access-management, ddos-protection, email-security, endpoint-detection-and-response, endpoint-protection, extended-detection-and-response, grc-platforms, identity-governance, incident-management-and-on-call, infrastructure-monitoring, it-service-management, llm-gateways-and-observability, log-management, managed-kubernetes-platforms, managed-relational-databases, ml-platforms, multi-factor-authentication, next-generation-firewalls, patch-management, penetration-testing-as-a-service, sase-platforms, sd-wan, security-awareness-training, siem-platforms, software-composition-analysis, third-party-risk-management, vulnerability-management-platforms, web-application-firewalls, workflow-orchestration, workforce-identity-and-sso
- Llama 4 Maverick: a direct first choice kept as first choice or alternative in 8 of 55 categories (15%); differing under the strict rule: ai-coding-assistants, api-gateways, api-management, application-performance-monitoring, attack-surface-management, backup-and-disaster-recovery, business-password-managers, ci-cd-platforms, cloud-cost-management, cloud-hosting, cloud-security-posture-management, compliance-automation, container-and-kubernetes-security, customer-identity-and-access-management, data-loss-prevention, ddos-protection, email-security, endpoint-detection-and-response, endpoint-protection, error-and-crash-monitoring, extended-detection-and-response, feature-flags, identity-governance, incident-management-and-on-call, infrastructure-as-code, infrastructure-monitoring, it-asset-management, it-service-management, llm-gateways-and-observability, log-management, managed-kubernetes-platforms, managed-relational-databases, ml-platforms, multi-factor-authentication, next-generation-firewalls, nosql-databases, patch-management, penetration-testing-as-a-service, privileged-access-management, sase-platforms, siem-platforms, soar-platforms, software-composition-analysis, source-control-hosting, static-application-security-testing, streaming-platforms, third-party-risk-management, unified-endpoint-management, vulnerability-management-platforms, workflow-orchestration
- Qwen 3.7 Flash: a direct first choice kept as first choice or alternative in 53 of 67 categories (79%); differing under the strict rule: api-gateways, api-management, application-performance-monitoring, attack-surface-management, backup-and-disaster-recovery, business-password-managers, ci-cd-platforms, cloud-cost-management, cloud-hosting, compliance-automation, container-and-kubernetes-security, content-delivery-networks, customer-identity-and-access-management, ddos-protection, email-security, endpoint-detection-and-response, etl-and-elt, feature-flags, grc-platforms, infrastructure-as-code, infrastructure-monitoring, it-asset-management, it-service-management, log-management, managed-detection-and-response, ml-platforms, multi-factor-authentication, object-storage, observability-platforms, patch-management, penetration-testing-as-a-service, sase-platforms, sd-wan, siem-platforms, soar-platforms, software-composition-analysis, source-control-hosting, static-application-security-testing, third-party-risk-management, unified-endpoint-management, vector-databases, vulnerability-management-platforms, workflow-orchestration, workforce-identity-and-sso, zero-trust-network-access
- Kimi K2: a direct first choice kept as first choice or alternative in 56 of 67 categories (84%); differing under the strict rule: api-gateways, api-management, cloud-hosting, cloud-security-posture-management, compliance-automation, container-and-kubernetes-security, content-delivery-networks, data-loss-prevention, ddos-protection, email-security, endpoint-protection, error-and-crash-monitoring, etl-and-elt, extended-detection-and-response, identity-governance, infrastructure-as-code, it-asset-management, llm-gateways-and-observability, log-management, managed-kubernetes-platforms, managed-relational-databases, ml-platforms, next-generation-firewalls, nosql-databases, object-storage, observability-platforms, patch-management, penetration-testing-as-a-service, remote-monitoring-and-management, security-awareness-training, soar-platforms, software-composition-analysis, source-control-hosting, third-party-risk-management, threat-intelligence-platforms, vector-databases, vulnerability-management-platforms, web-application-firewalls, workflow-orchestration, workforce-identity-and-sso
- GLM 4.7 FlashX: a direct first choice kept as first choice or alternative in 46 of 66 categories (70%); differing under the strict rule: api-gateways, api-management, application-performance-monitoring, backup-and-disaster-recovery, business-password-managers, ci-cd-platforms, cloud-cost-management, cloud-native-application-protection, cloud-security-posture-management, compliance-automation, content-delivery-networks, customer-identity-and-access-management, data-loss-prevention, email-security, endpoint-protection, etl-and-elt, extended-detection-and-response, grc-platforms, identity-governance, incident-management-and-on-call, it-service-management, llm-gateways-and-observability, log-management, managed-detection-and-response, managed-relational-databases, ml-platforms, multi-factor-authentication, next-generation-firewalls, object-storage, observability-platforms, patch-management, privileged-access-management, remote-monitoring-and-management, sase-platforms, software-composition-analysis, third-party-risk-management, threat-intelligence-platforms, vector-databases, vulnerability-management-platforms, web-application-firewalls, workflow-orchestration, workforce-identity-and-sso
- MiniMax M2.5: a direct first choice kept as first choice or alternative in 55 of 67 categories (82%); differing under the strict rule: api-gateways, api-management, application-performance-monitoring, attack-surface-management, backup-and-disaster-recovery, business-password-managers, ci-cd-platforms, cloud-cost-management, cloud-native-application-protection, cloud-security-posture-management, compliance-automation, container-and-kubernetes-security, data-loss-prevention, email-security, endpoint-detection-and-response, error-and-crash-monitoring, etl-and-elt, extended-detection-and-response, feature-flags, grc-platforms, identity-governance, infrastructure-monitoring, it-service-management, llm-gateways-and-observability, log-management, managed-detection-and-response, managed-kubernetes-platforms, managed-relational-databases, ml-platforms, multi-factor-authentication, next-generation-firewalls, nosql-databases, object-storage, observability-platforms, patch-management, penetration-testing-as-a-service, remote-monitoring-and-management, sase-platforms, sd-wan, security-awareness-training, siem-platforms, soar-platforms, software-composition-analysis, static-application-security-testing, third-party-risk-management, vector-databases, vulnerability-management-platforms, web-application-firewalls, workflow-orchestration, workforce-identity-and-sso, zero-trust-network-access


# Segment: Small business

# IT AI Recommendation Index, run edition-2026-09

400 prompts, 12 models, 26,588 raw judge labels, 26,714 scored labels after normalization. Published weights: first choice +3, alternative +2, mention +1, soft negative -2, hard negative -3.

Scored under vendor alias table version v2026-09.2. Raw judge labels are the permanent record; the numbers below are derived from them and are regenerated for every run whenever the alias table changes, so the whole series is always scored under one table version. Resolution of raw names: 23,697 by alias or canonical name, 1903 by category-scoped alias, 264 from combined answers split into their products, 0 excluded by rule, 840 unresolved and counted under the raw name.

## Paraphrase stability

Share of categories where a model's first choice set on the direct prompt equals its set on the paraphrase.

| Model | Same | Different | Stability |
|---|---|---|---|
| Claude Haiku 4.5 | 5 | 58 | 8% |
| GPT-5.4 mini | 33 | 34 | 49% |
| Gemini 3.5 Flash | 39 | 28 | 58% |
| Perplexity Sonar | 24 | 43 | 36% |
| Grok 4.1 Fast | 31 | 36 | 46% |
| Mistral Small | 12 | 55 | 18% |
| DeepSeek V4 Flash | 22 | 45 | 33% |
| Llama 4 Maverick | 9 | 47 | 16% |
| Qwen 3.7 Flash | 19 | 48 | 28% |
| Kimi K2 | 16 | 51 | 24% |
| GLM 4.7 FlashX | 25 | 42 | 37% |
| MiniMax M2.5 | 15 | 52 | 22% |

A looser measure, whether a direct first choice survives as a first choice or alternative on the paraphrase, is in the appendix.

## Standing by category

First choice share across the direct, paraphrase, budget and scale prompts and all 12 models. The top product's share is published alongside the label: contested means the top share is at or below 40%, and a category just above the line is not meaningfully different from one just below it. Consensus means every model's direct-prompt first choice is the same single product.

| Category | Top product | Top share | First choices | Status |
|---|---|---|---|---|
| ai-coding-assistants | GitHub Copilot | 65% | 43 | clear leader |
| api-gateways | Zuplo | 43% | 56 | clear leader |
| api-management | Zuplo | 38% | 47 | contested |
| application-performance-monitoring | New Relic | 51% | 47 | clear leader |
| attack-surface-management | Intruder | 52% | 52 | clear leader |
| backup-and-disaster-recovery | Acronis Cyber Protect | 37% | 46 | contested |
| business-password-managers | 1Password | 42% | 45 | clear leader |
| ci-cd-platforms | GitHub Actions | 93% | 44 | clear leader |
| cloud-cost-management | Vantage | 41% | 63 | clear leader |
| cloud-hosting | DigitalOcean | 40% | 47 | clear leader |
| cloud-native-application-protection | Microsoft Defender for Cloud | 46% | 48 | clear leader |
| cloud-security-posture-management | Microsoft Defender for Cloud | 31% | 52 | contested |
| compliance-automation | Vanta | 35% | 51 | contested |
| container-and-kubernetes-security | Trivy | 28% | 64 | contested |
| content-delivery-networks | Cloudflare | 90% | 48 | clear leader |
| customer-identity-and-access-management | Clerk | 27% | 48 | contested |
| data-loss-prevention | Microsoft Purview DLP | 30% | 54 | contested |
| data-warehouses | Google BigQuery | 80% | 49 | clear leader |
| ddos-protection | Cloudflare | 89% | 45 | clear leader |
| email-security | Microsoft Defender for Office 365 | 44% | 52 | clear leader |
| endpoint-detection-and-response | Huntress Managed EDR | 44% | 50 | clear leader |
| endpoint-protection | Microsoft Defender for Cloud | 50% | 46 | clear leader |
| error-and-crash-monitoring | Sentry | 79% | 42 | clear leader |
| etl-and-elt | Airbyte | 36% | 53 | contested |
| extended-detection-and-response | Coro | 57% | 44 | clear leader |
| feature-flags | ConfigCat | 43% | 49 | clear leader |
| grc-platforms | Vanta | 22% | 55 | contested |
| identity-governance | AccessOwl | 25% | 59 | contested |
| incident-management-and-on-call | incident.io | 30% | 47 | contested |
| infrastructure-as-code | Terraform | 50% | 60 | clear leader |
| infrastructure-monitoring | Site24x7 | 22% | 50 | contested |
| it-asset-management | Snipe-IT | 41% | 49 | clear leader |
| it-service-management | Freshservice | 39% | 49 | contested |
| llm-gateways-and-observability | LiteLLM | 46% | 52 | clear leader |
| log-management | Better Stack | 34% | 53 | contested |
| managed-detection-and-response | Huntress Managed EDR | 88% | 40 | clear leader |
| managed-kubernetes-platforms | DigitalOcean Kubernetes | 39% | 56 | contested |
| managed-relational-databases | Amazon RDS | 24% | 54 | contested |
| ml-platforms | Google Vertex AI | 17% | 52 | contested |
| multi-factor-authentication | Cisco Duo | 45% | 60 | clear leader |
| next-generation-firewalls | Fortinet FortiGate | 35% | 46 | contested |
| nosql-databases | MongoDB | 77% | 52 | clear leader |
| object-storage | Backblaze B2 | 60% | 52 | clear leader |
| observability-platforms | Grafana | 32% | 60 | contested |
| patch-management | Action1 | 68% | 40 | clear leader |
| penetration-testing-as-a-service | BreachLock | 28% | 43 | contested |
| privileged-access-management | ManageEngine PAM360 | 27% | 55 | contested |
| remote-monitoring-and-management | Atera | 30% | 53 | contested |
| sase-platforms | Cloudflare One | 54% | 48 | clear leader |
| sd-wan | Cisco Meraki SD-WAN | 40% | 48 | contested |
| secrets-management | Doppler | 46% | 56 | clear leader |
| security-awareness-training | Hook Security | 34% | 50 | contested |
| siem-platforms | Microsoft Sentinel | 28% | 46 | contested |
| soar-platforms | Tines | 49% | 43 | clear leader |
| software-composition-analysis | Trivy | 36% | 42 | contested |
| source-control-hosting | GitHub | 78% | 46 | clear leader |
| static-application-security-testing | Semgrep | 70% | 47 | clear leader |
| streaming-platforms | Redpanda | 30% | 54 | contested |
| third-party-risk-management | UpGuard | 44% | 50 | clear leader |
| threat-intelligence-platforms | NordStellar | 19% | 47 | contested |
| unified-endpoint-management | Microsoft Intune | 40% | 47 | clear leader |
| vector-databases | pgvector | 46% | 56 | clear leader |
| vulnerability-management-platforms | Intruder | 59% | 44 | clear leader |
| web-application-firewalls | Cloudflare | 73% | 44 | clear leader |
| workflow-orchestration | Prefect | 23% | 52 | contested |
| workforce-identity-and-sso | JumpCloud | 48% | 48 | clear leader |
| zero-trust-network-access | Cloudflare One | 51% | 45 | clear leader |

**ai-coding-assistants**: GitHub Copilot 65%, Windsurf 19%, Cursor 9%, Amazon Q Developer 5%, Continue 2%

**api-gateways**: Zuplo 43%, Kong Gateway 25%, Amazon API Gateway 12%, Tyk 7%, Apache APISIX 4%

**api-management**: Zuplo 38%, Kong Gateway 17%, Postman 17%, Amazon API Gateway 11%, Tyk 6%

**application-performance-monitoring**: New Relic 51%, Datadog 15%, SigNoz 11%, Sentry 6%, Scout APM 4%

**attack-surface-management**: Intruder 52%, runZero 10%, Detectify 6%, HostedScan 6%, UpGuard BreachSight 4%

**backup-and-disaster-recovery**: Acronis Cyber Protect 37%, IDrive Business 22%, Backblaze 7%, Acronis 4%, Cove Data Protection 4%

**business-password-managers**: 1Password 42%, Bitwarden 38%, NordPass 11%, Dashlane 2%, Proton Pass 2%

**ci-cd-platforms**: GitHub Actions 93%, GitLab CI/CD 5%, CircleCI 2%

**cloud-cost-management**: Vantage 41%, AWS Cost Explorer 14%, Microsoft Cost Management 10%, Azure Advisor 3%, GCP Recommender 3%

**cloud-hosting**: DigitalOcean 40%, Amazon Web Services 11%, Hostinger 9%, Atlantic.Net 6%, Cloudways 4%

**cloud-native-application-protection**: Microsoft Defender for Cloud 46%, Aikido Security 25%, Wiz 8%, Snyk 4%, Aqua Security 2%

**cloud-security-posture-management**: Microsoft Defender for Cloud 31%, Prowler 27%, AWS Security Hub 12%, Wiz 10%, Orca Security 6%

**compliance-automation**: Vanta 35%, Sprinto 29%, Drata 10%, Secureframe 8%, LowerPlane 4%

**container-and-kubernetes-security**: Trivy 28%, Kubescape 23%, Falco 22%, Snyk 9%, Snyk Container 5%

**content-delivery-networks**: Cloudflare 90%, Bunny.net 4%, Fastly 2%, StackPath 2%, jsDelivr 2%

**customer-identity-and-access-management**: Clerk 27%, Auth0 25%, Frontegg 15%, WorkOS 10%, Kinde 6%

**data-loss-prevention**: Microsoft Purview DLP 30%, CurrentWare 20%, Safetica 13%, Nightfall AI 11%, Microsoft 365 6%

**data-warehouses**: Google BigQuery 80%, Snowflake 12%, Amazon Redshift 4%, Microsoft Fabric 2%, MotherDuck 2%

**ddos-protection**: Cloudflare 89%, Gcore 4%, AWS Shield 2%, Azure DDoS Protection 2%, Sucuri 2%

**email-security**: Microsoft Defender for Office 365 44%, IRONSCALES 19%, Abnormal AI 6%, Barracuda Email Protection 6%, Check Point Harmony Email & Collaboration 6%

**endpoint-detection-and-response**: Huntress Managed EDR 44%, Microsoft Defender for Cloud 36%, SentinelOne Singularity 10%, Bitdefender GravityZone 4%, Microsoft Defender for Endpoint 2%

**endpoint-protection**: Microsoft Defender for Cloud 50%, Bitdefender GravityZone Small Business Security 13%, Huntress Managed EDR 7%, Bitdefender GravityZone 4%, Huntress 4%

**error-and-crash-monitoring**: Sentry 79%, Honeybadger 14%, GlitchTip 5%, Rollbar 2%

**etl-and-elt**: Airbyte 36%, Hevo Data 23%, Fivetran 13%, Stitch 13%, Skyvia 9%

**extended-detection-and-response**: Coro 57%, Microsoft Defender for Cloud 14%, Microsoft Defender XDR 11%, Cynet 5%, Huntress Managed EDR 5%

**feature-flags**: ConfigCat 43%, PostHog 16%, Flagsmith 14%, Reflag 8%, DevCycle 4%

**grc-platforms**: Sprinto 22%, Vanta 22%, SimpleRisk 15%, Drata 9%, RealCISO 7%

**identity-governance**: AccessOwl 25%, JumpCloud 15%, Iden 12%, Lumos 7%, Microsoft Entra ID Governance 7%

**incident-management-and-on-call**: incident.io 30%, Better Stack 21%, Squadcast 13%, Hyperping 9%, PagerDuty 6%

**infrastructure-as-code**: Terraform 50%, OpenTofu 33%, Pulumi 8%, AWS CDK 2%, Crossplane 2%

**infrastructure-monitoring**: Site24x7 22%, Zabbix 14%, Better Stack 10%, Datadog 10%, Netdata 10%

**it-asset-management**: Snipe-IT 41%, Rippling IT 16%, AssetTiger 6%, Asset Panda 4%, Freshservice 4%

**it-service-management**: Freshservice 39%, ManageEngine ServiceDesk Plus 16%, Jira Service Management 14%, Freshdesk 8%, Zoho Desk 8%

**llm-gateways-and-observability**: LiteLLM 46%, Portkey 15%, Helicone 10%, Langfuse 10%, OpenRouter 10%

**log-management**: Better Stack 34%, Grafana Loki 17%, SolarWinds Papertrail 15%, Axiom 11%, Datadog Log Management 6%

**managed-detection-and-response**: Huntress Managed EDR 88%, Sophos MDR 5%, Mendel 2%, Microsoft Defender Experts for XDR 2%, Securelayer7 2%

**managed-kubernetes-platforms**: DigitalOcean Kubernetes 39%, Google Kubernetes Engine 27%, Civo 11%, Amazon EKS 5%, Azure Kubernetes Service 5%

**managed-relational-databases**: Amazon RDS 24%, DigitalOcean Managed Databases 17%, Neon 15%, Google Cloud SQL 11%, Supabase 11%

**ml-platforms**: Google Vertex AI 17%, Google Colab 13%, Azure Machine Learning 10%, MLflow 10%, KNIME Analytics Platform 8%

**multi-factor-authentication**: Cisco Duo 45%, Microsoft Entra ID 28%, Microsoft Authenticator 7%, Google Authenticator 5%, Google Workspace 2-Step Verification 3%

**next-generation-firewalls**: Fortinet FortiGate 35%, WatchGuard Firebox 13%, Sophos Firewall 11%, Fortinet FortiGate 60F 4%, WatchGuard 4%

**nosql-databases**: MongoDB 77%, Google Cloud Firestore 8%, PostgreSQL 4%, Amazon DynamoDB 2%, Couchbase 2%

**object-storage**: Backblaze B2 60%, Cloudflare R2 21%, Wasabi 12%, DigitalOcean Spaces 4%, Amazon S3 2%

**observability-platforms**: Grafana 32%, New Relic 27%, Better Stack 12%, Datadog 12%, SigNoz 7%

**patch-management**: Action1 68%, NinjaOne 12%, ManageEngine Patch Manager Plus 10%, Automox 2%, Microsoft 365 2%

**penetration-testing-as-a-service**: BreachLock 28%, Cobalt 21%, Astra Security 19%, Acunetix 9%, Bug Circuit 9%

**privileged-access-management**: KeeperPAM 27%, ManageEngine PAM360 27%, Teleport 11%, Delinea 7%, Delinea Secret Server 7%

**remote-monitoring-and-management**: Atera 30%, NinjaOne 26%, Syncro 19%, Action1 15%, ConnectWise RMM 2%

**sase-platforms**: Cloudflare One 54%, Cato Networks 12%, Check Point Harmony SASE 6%, Fortinet FortiSASE 6%, Cisco Umbrella 4%

**sd-wan**: Cisco Meraki SD-WAN 40%, Fortinet Secure SD-WAN 31%, Cisco Catalyst SD-WAN 10%, Peplink 10%, Bigleaf Networks 2%

**secrets-management**: Doppler 46%, Infisical 25%, 1Password 9%, Bitwarden Secrets Manager 7%, HashiCorp Vault 5%

**security-awareness-training**: Hook Security 34%, KnowBe4 28%, Wizer 20%, CanIPhish 4%, Microsoft Attack Simulation Training 4%

**siem-platforms**: Blumira 28%, Microsoft Sentinel 28%, Wazuh 17%, Sumo Logic 7%, Elastic Security 4%

**soar-platforms**: Tines 49%, ManageEngine Log360 9%, Blumira 7%, Rapid7 InsightConnect 7%, Splunk SOAR 7%

**software-composition-analysis**: Trivy 36%, Snyk Open Source 33%, GitHub Dependabot 5%, OWASP Dependency-Check 5%, OWASP Dependency-Track 5%

**source-control-hosting**: GitHub 78%, GitLab 13%, Bitbucket 7%, Gitea 2%

**static-application-security-testing**: Semgrep 70%, Aikido Security 9%, Snyk Code 9%, Snyk 4%, DeepSource 2%

**streaming-platforms**: Redpanda 30%, Confluent Cloud 20%, Aiven for Apache Kafka 11%, Apache Kafka 7%, Amazon Kinesis Data Streams 6%

**third-party-risk-management**: UpGuard 44%, Vanta 26%, ComplyJet 6%, Drata 6%, Creditsafe 2%

**threat-intelligence-platforms**: NordStellar 19%, MISP 17%, AlienVault OTX 9%, Amazon GuardDuty 6%, CrowdStrike Falcon 4%

**unified-endpoint-management**: Microsoft Intune 40%, Miradore 28%, JumpCloud 9%, ManageEngine Endpoint Central 9%, Hexnode UEM 4%

**vector-databases**: pgvector 46%, Qdrant 30%, Pinecone 16%, Chroma 4%, Weaviate 4%

**vulnerability-management-platforms**: Intruder 59%, OpenVAS 11%, ManageEngine Vulnerability Manager Plus 7%, Tenable Vulnerability Management 7%, Action1 2%

**web-application-firewalls**: Cloudflare 73%, Cloudflare WAF 20%, Sucuri 5%, Cloudflare WAF + Super Bot Fight Mode 2%

**workflow-orchestration**: Prefect 23%, Make 17%, Zapier 17%, n8n 15%, Dagster 8%

**workforce-identity-and-sso**: JumpCloud 48%, Microsoft Entra ID 35%, Okta 6%, Cisco Duo 2%, Google Cloud Identity 2%

**zero-trust-network-access**: Cloudflare One 51%, Twingate 31%, Cloudflare Access 9%, OpenVPN CloudConnexa 4%, Tailscale 4%

## Anti-recommendations

Products most often labeled soft or hard negative, with the number of models that did so at least once in the category, and the share of that product's labels in the category that were negative. A high negative share on a product with few labels is a warning; a low share on a product with many labels is salience, not sentiment.

- **ai-coding-assistants**: GitHub Copilot (8 models, 4 hard; 10 of 71 labels negative), Cursor (8 models, 2 hard; 10 of 60 labels negative), Windsurf (6 models, 1 hard; 6 of 49 labels negative), Amazon Q Developer (5 models, 2 hard; 6 of 24 labels negative)
- **api-gateways**: Kong Gateway (11 models, 7 hard; 31 of 76 labels negative), Apigee (10 models, 14 hard; 21 of 26 labels negative), Azure API Management (8 models, 2 hard; 10 of 18 labels negative), Amazon API Gateway (8 models; 13 of 63 labels negative)
- **api-management**: Apigee (12 models, 15 hard; 28 of 35 labels negative), MuleSoft Anypoint Platform (12 models, 14 hard; 19 of 23 labels negative), IBM API Connect (11 models, 10 hard; 11 of 11 labels negative), Kong Gateway (10 models, 3 hard; 24 of 65 labels negative)
- **application-performance-monitoring**: Dynatrace (12 models, 14 hard; 24 of 31 labels negative), AppDynamics (12 models, 11 hard; 16 of 20 labels negative), Datadog (10 models, 9 hard; 33 of 53 labels negative), Sentry (4 models, 1 hard; 4 of 31 labels negative)
- **attack-surface-management**: Cortex Xpanse (10 models, 12 hard; 20 of 20 labels negative), CyCognito (8 models, 9 hard; 17 of 22 labels negative), Microsoft Defender External Attack Surface Management (7 models, 1 hard; 9 of 17 labels negative), Tenable Attack Surface Management (6 models, 3 hard; 6 of 8 labels negative)
- **backup-and-disaster-recovery**: Microsoft OneDrive (8 models, 7 hard; 8 of 8 labels negative), Dropbox (7 models, 7 hard; 8 of 8 labels negative), Google Drive (7 models, 6 hard; 7 of 7 labels negative), Google Workspace (4 models, 1 hard; 4 of 4 labels negative)
- **business-password-managers**: LastPass (12 models, 17 hard; 21 of 23 labels negative), Google Password Manager (6 models, 6 hard; 7 of 7 labels negative), Apple Passwords (5 models, 4 hard; 5 of 5 labels negative), Dashlane (4 models, 1 hard; 6 of 24 labels negative)
- **ci-cd-platforms**: Jenkins (12 models, 14 hard; 42 of 56 labels negative), CircleCI (11 models, 1 hard; 13 of 60 labels negative), GitLab CI/CD (8 models, 1 hard; 9 of 67 labels negative), Travis CI (4 models, 3 hard; 4 of 7 labels negative)
- **cloud-cost-management**: IBM Apptio Cloudability (9 models, 13 hard; 23 of 27 labels negative), VMware Tanzu CloudHealth (9 models, 12 hard; 21 of 23 labels negative), Flexera One (8 models, 8 hard; 11 of 14 labels negative), CloudZero (6 models, 3 hard; 8 of 36 labels negative)
- **cloud-hosting**: GoDaddy (10 models, 10 hard; 10 of 11 labels negative), Amazon Web Services (10 models, 3 hard; 21 of 53 labels negative), HostGator (9 models, 9 hard; 9 of 9 labels negative), Bluehost (9 models, 7 hard; 9 of 9 labels negative)
- **cloud-native-application-protection**: Prisma Cloud (7 models, 11 hard; 19 of 25 labels negative), Wiz (6 models, 6 hard; 21 of 49 labels negative), Orca Security (4 models, 3 hard; 10 of 34 labels negative), CrowdStrike Falcon Cloud Security (4 models, 2 hard; 6 of 9 labels negative)
- **cloud-security-posture-management**: Prisma Cloud (11 models, 11 hard; 26 of 38 labels negative), Wiz (10 models, 7 hard; 29 of 56 labels negative), Lacework FortiCNAPP (7 models, 6 hard; 10 of 13 labels negative), Orca (7 models, 2 hard; 9 of 12 labels negative)
- **compliance-automation**: Vanta (10 models, 1 hard; 13 of 62 labels negative), Drata (8 models; 11 of 53 labels negative), Archer (5 models, 5 hard; 5 of 5 labels negative), Hyperproof (5 models, 1 hard; 5 of 10 labels negative)
- **container-and-kubernetes-security**: Aqua Security (11 models, 7 hard; 24 of 46 labels negative), Prisma Cloud (10 models, 8 hard; 23 of 32 labels negative), Sysdig Secure (7 models, 2 hard; 7 of 16 labels negative), Microsoft Defender for Cloud (6 models, 5 hard; 6 of 11 labels negative)
- **content-delivery-networks**: Akamai (10 models, 5 hard; 16 of 23 labels negative), Fastly (9 models, 3 hard; 20 of 37 labels negative), Amazon CloudFront (7 models, 2 hard; 13 of 48 labels negative), Azure CDN (5 models, 2 hard; 5 of 7 labels negative)
- **customer-identity-and-access-management**: Auth0 (11 models, 9 hard; 31 of 61 labels negative), Okta (8 models, 8 hard; 11 of 14 labels negative), Amazon Cognito (8 models, 4 hard; 10 of 20 labels negative), ForgeRock (5 models, 4 hard; 5 of 5 labels negative)
- **data-loss-prevention**: Symantec Data Loss Prevention (11 models, 19 hard; 25 of 26 labels negative), Forcepoint DLP (11 models, 15 hard; 20 of 21 labels negative), Proofpoint Enterprise DLP (5 models, 3 hard; 6 of 7 labels negative), Digital Guardian (4 models, 3 hard; 4 of 5 labels negative)
- **data-warehouses**: Amazon Redshift (11 models, 4 hard; 16 of 64 labels negative), Snowflake (10 models, 4 hard; 18 of 63 labels negative), Google BigQuery (9 models; 9 of 69 labels negative), ClickHouse Cloud (5 models, 1 hard; 5 of 21 labels negative)
- **ddos-protection**: Akamai Prolexic (12 models, 8 hard; 24 of 36 labels negative), Radware (7 models, 2 hard; 11 of 15 labels negative), Imperva (7 models, 1 hard; 12 of 24 labels negative), AWS Shield (5 models, 4 hard; 8 of 56 labels negative)
- **email-security**: Mimecast Email Security (8 models, 2 hard; 14 of 31 labels negative), Proofpoint Email Protection (8 models, 1 hard; 13 of 54 labels negative), Barracuda Email Protection (3 models, 1 hard; 3 of 27 labels negative), Cisco Secure Email (3 models, 1 hard; 3 of 5 labels negative)
- **endpoint-detection-and-response**: CrowdStrike Falcon (9 models, 3 hard; 18 of 41 labels negative), SentinelOne Singularity (8 models, 1 hard; 8 of 55 labels negative), CrowdStrike (6 models, 1 hard; 7 of 16 labels negative), Palo Alto Networks Cortex XDR (5 models, 2 hard; 5 of 8 labels negative)
- **endpoint-protection**: CrowdStrike Falcon (7 models; 8 of 12 labels negative), Kaspersky (3 models, 3 hard; 3 of 4 labels negative), Kaspersky Endpoint Security (3 models, 3 hard; 3 of 4 labels negative), McAfee (2 models, 2 hard; 2 of 3 labels negative)
- **error-and-crash-monitoring**: Datadog (11 models, 11 hard; 14 of 19 labels negative), New Relic (10 models, 5 hard; 11 of 13 labels negative), Sentry (5 models, 2 hard; 6 of 68 labels negative), Bugsnag (4 models, 1 hard; 4 of 42 labels negative)
- **etl-and-elt**: Informatica (9 models, 8 hard; 11 of 12 labels negative), Talend (8 models, 8 hard; 14 of 21 labels negative), Fivetran (8 models, 5 hard; 18 of 52 labels negative), Stitch (7 models, 1 hard; 7 of 45 labels negative)
- **extended-detection-and-response**: Palo Alto Networks Cortex XDR (10 models, 6 hard; 20 of 28 labels negative), CrowdStrike Falcon (8 models, 3 hard; 17 of 31 labels negative), Microsoft Defender XDR (8 models, 2 hard; 8 of 45 labels negative), SentinelOne Singularity (6 models, 2 hard; 8 of 37 labels negative)
- **feature-flags**: LaunchDarkly (12 models, 14 hard; 45 of 53 labels negative), Split (10 models, 4 hard; 10 of 18 labels negative), Optimizely (6 models, 4 hard; 7 of 10 labels negative), Unleash (4 models; 5 of 44 labels negative)
- **grc-platforms**: ServiceNow Integrated Risk Management (10 models, 12 hard; 21 of 22 labels negative), MetricStream (10 models, 11 hard; 14 of 15 labels negative), Archer (7 models, 10 hard; 13 of 13 labels negative), OneTrust (6 models, 4 hard; 8 of 9 labels negative)
- **identity-governance**: Saviynt Enterprise Identity Cloud (12 models, 22 hard; 39 of 39 labels negative), SailPoint (11 models, 19 hard; 38 of 45 labels negative), One Identity Manager (9 models, 7 hard; 15 of 19 labels negative), Oracle Identity Governance (7 models, 5 hard; 7 of 7 labels negative)
- **incident-management-and-on-call**: PagerDuty (12 models, 8 hard; 34 of 59 labels negative), Opsgenie (9 models, 17 hard; 18 of 24 labels negative), ServiceNow (8 models, 6 hard; 10 of 11 labels negative), Jira Service Management (5 models, 2 hard; 5 of 19 labels negative)
- **infrastructure-as-code**: Puppet (11 models, 10 hard; 18 of 25 labels negative), Chef (10 models, 9 hard; 12 of 14 labels negative), AWS CloudFormation (10 models, 2 hard; 12 of 46 labels negative), Terraform (8 models; 17 of 74 labels negative)
- **infrastructure-monitoring**: Datadog (11 models, 11 hard; 30 of 46 labels negative), Dynatrace (9 models, 9 hard; 15 of 19 labels negative), Zabbix (9 models, 3 hard; 11 of 49 labels negative), Nagios (8 models, 5 hard; 12 of 14 labels negative)
- **it-asset-management**: ServiceNow IT Asset Management (12 models, 14 hard; 20 of 21 labels negative), Snipe-IT (9 models; 10 of 57 labels negative), Ivanti Neurons for ITAM (6 models, 4 hard; 7 of 8 labels negative), Flexera One (4 models, 4 hard; 5 of 5 labels negative)
- **it-service-management**: ServiceNow (11 models, 14 hard; 24 of 25 labels negative), BMC Helix ITSM (10 models, 11 hard; 14 of 14 labels negative), Ivanti Neurons for ITSM (6 models, 3 hard; 7 of 8 labels negative), Zendesk (5 models; 5 of 18 labels negative)
- **llm-gateways-and-observability**: LiteLLM (7 models, 3 hard; 8 of 57 labels negative), Helicone (5 models, 5 hard; 8 of 36 labels negative), OpenRouter (4 models, 1 hard; 4 of 43 labels negative), Portkey (4 models, 1 hard; 4 of 49 labels negative)
- **log-management**: Splunk (12 models, 14 hard; 30 of 38 labels negative), Datadog Log Management (12 models, 8 hard; 32 of 50 labels negative), Elastic Stack (9 models, 4 hard; 19 of 39 labels negative), Graylog (9 models, 2 hard; 11 of 38 labels negative)
- **managed-detection-and-response**: CrowdStrike Falcon Complete (8 models, 2 hard; 15 of 26 labels negative), Arctic Wolf Managed Detection and Response (8 models, 1 hard; 14 of 33 labels negative), CrowdStrike (2 models; 2 of 5 labels negative), Expel (2 models; 2 of 15 labels negative)
- **managed-kubernetes-platforms**: Amazon EKS (10 models, 10 hard; 29 of 56 labels negative), Google Kubernetes Engine (10 models, 6 hard; 17 of 61 labels negative), Azure Kubernetes Service (9 models, 7 hard; 15 of 56 labels negative), Red Hat OpenShift (5 models, 4 hard; 6 of 8 labels negative)
- **managed-relational-databases**: Amazon RDS (8 models, 1 hard; 14 of 57 labels negative), Google Cloud SQL (7 models, 2 hard; 10 of 53 labels negative), Amazon Aurora (6 models, 1 hard; 7 of 18 labels negative), PlanetScale (5 models, 2 hard; 8 of 33 labels negative)
- **ml-platforms**: Amazon SageMaker (9 models, 4 hard; 20 of 47 labels negative), Azure Machine Learning (9 models, 4 hard; 12 of 42 labels negative), Databricks (8 models, 2 hard; 11 of 20 labels negative), Kubeflow (7 models, 8 hard; 9 of 14 labels negative)
- **multi-factor-authentication**: Okta (7 models; 9 of 32 labels negative), Cisco Duo (3 models; 3 of 61 labels negative), Google Authenticator (3 models; 4 of 25 labels negative), Microsoft Authenticator (3 models; 4 of 18 labels negative)
- **next-generation-firewalls**: Palo Alto Networks (7 models, 3 hard; 10 of 16 labels negative), SonicWall (5 models; 5 of 10 labels negative), Zyxel (4 models, 4 hard; 4 of 4 labels negative), Check Point (4 models, 3 hard; 4 of 5 labels negative)
- **nosql-databases**: Apache Cassandra (11 models, 6 hard; 23 of 37 labels negative), Apache HBase (9 models, 6 hard; 9 of 10 labels negative), Amazon DynamoDB (7 models; 9 of 54 labels negative), Neo4j (6 models, 2 hard; 7 of 19 labels negative)
- **object-storage**: Amazon S3 (10 models, 4 hard; 25 of 52 labels negative), Google Cloud Storage (10 models, 3 hard; 14 of 30 labels negative), Azure Blob Storage (9 models, 2 hard; 14 of 28 labels negative), Wasabi (7 models, 1 hard; 12 of 56 labels negative)
- **observability-platforms**: Datadog (11 models, 10 hard; 37 of 58 labels negative), Dynatrace (10 models, 6 hard; 10 of 14 labels negative), New Relic (6 models, 1 hard; 9 of 56 labels negative), Splunk (5 models, 5 hard; 5 of 6 labels negative)
- **patch-management**: Microsoft Configuration Manager (8 models, 5 hard; 8 of 8 labels negative), Windows Server Update Services (6 models, 5 hard; 9 of 13 labels negative), HCL BigFix (5 models, 5 hard; 5 of 5 labels negative), Tanium (5 models, 5 hard; 5 of 6 labels negative)
- **penetration-testing-as-a-service**: Invicti (3 models; 3 of 4 labels negative), Synack (3 models; 3 of 8 labels negative), Acunetix (2 models; 3 of 16 labels negative), Cobalt (2 models; 2 of 33 labels negative)
- **privileged-access-management**: CyberArk (12 models, 12 hard; 35 of 40 labels negative), BeyondTrust (10 models, 9 hard; 25 of 31 labels negative), Delinea (5 models, 2 hard; 7 of 39 labels negative), ARCON PAM (4 models, 2 hard; 4 of 5 labels negative)
- **remote-monitoring-and-management**: Datto RMM (8 models, 2 hard; 9 of 23 labels negative), ConnectWise Automate (6 models, 3 hard; 6 of 10 labels negative), Kaseya VSA (6 models, 3 hard; 6 of 6 labels negative), ConnectWise RMM (5 models; 6 of 12 labels negative)
- **sase-platforms**: Palo Alto Networks Prisma SASE (10 models, 2 hard; 14 of 16 labels negative), Zscaler Zero Trust Exchange (9 models, 4 hard; 24 of 39 labels negative), Fortinet FortiSASE (6 models, 2 hard; 9 of 36 labels negative), Netskope One (6 models, 2 hard; 11 of 19 labels negative)
- **sd-wan**: VMware VeloCloud SD-WAN (11 models, 6 hard; 21 of 35 labels negative), Cisco Meraki SD-WAN (10 models; 11 of 57 labels negative), Cisco Catalyst SD-WAN (8 models, 6 hard; 11 of 33 labels negative), Windstream (5 models, 5 hard; 5 of 6 labels negative)
- **secrets-management**: HashiCorp Vault (12 models, 18 hard; 46 of 66 labels negative), AWS Secrets Manager (8 models, 3 hard; 13 of 52 labels negative), Google Secret Manager (6 models; 8 of 28 labels negative), Azure Key Vault (5 models; 6 of 29 labels negative)
- **security-awareness-training**: KnowBe4 (12 models, 4 hard; 29 of 57 labels negative), Proofpoint ZenGuide (5 models, 1 hard; 8 of 15 labels negative), GoPhish (5 models; 5 of 6 labels negative), Hoxhunt (3 models; 3 of 21 labels negative)
- **siem-platforms**: IBM QRadar (11 models, 11 hard; 19 of 20 labels negative), Splunk (10 models, 10 hard; 24 of 34 labels negative), Wazuh (8 models, 1 hard; 11 of 49 labels negative), Microsoft Sentinel (8 models; 10 of 62 labels negative)
- **soar-platforms**: Splunk SOAR (12 models, 14 hard; 27 of 45 labels negative), Cortex XSOAR (11 models, 15 hard; 30 of 39 labels negative), Torq (6 models, 1 hard; 7 of 23 labels negative), IBM QRadar SOAR (5 models, 6 hard; 8 of 10 labels negative)
- **software-composition-analysis**: Black Duck (8 models, 7 hard; 16 of 20 labels negative), OWASP Dependency-Check (8 models; 10 of 31 labels negative), Mend.io (7 models, 4 hard; 9 of 22 labels negative), Sonatype Lifecycle (7 models, 1 hard; 8 of 11 labels negative)
- **source-control-hosting**: Bitbucket (10 models; 12 of 67 labels negative), AWS CodeCommit (9 models, 5 hard; 11 of 15 labels negative), GitHub (9 models; 10 of 73 labels negative), GitLab (7 models, 1 hard; 11 of 69 labels negative)
- **static-application-security-testing**: Checkmarx One (11 models, 14 hard; 23 of 30 labels negative), Veracode (10 models, 12 hard; 18 of 23 labels negative), OpenText Fortify (10 models, 9 hard; 16 of 18 labels negative), SonarQube (8 models, 1 hard; 11 of 52 labels negative)
- **streaming-platforms**: Apache Kafka (10 models, 8 hard; 29 of 43 labels negative), Apache Pulsar (7 models, 4 hard; 12 of 23 labels negative), Confluent Cloud (6 models, 1 hard; 10 of 47 labels negative), Facebook Live (5 models, 5 hard; 5 of 5 labels negative)
- **third-party-risk-management**: OneTrust Third-Party Risk Management (9 models, 7 hard; 18 of 25 labels negative), ProcessUnity (9 models, 4 hard; 15 of 20 labels negative), Bitsight (8 models, 5 hard; 17 of 30 labels negative), SecurityScorecard (8 models, 3 hard; 13 of 36 labels negative)
- **threat-intelligence-platforms**: Recorded Future (10 models, 12 hard; 22 of 33 labels negative), ThreatConnect (7 models, 9 hard; 15 of 22 labels negative), Anomali (6 models, 5 hard; 7 of 11 labels negative), Flashpoint (5 models, 4 hard; 5 of 6 labels negative)
- **unified-endpoint-management**: Omnissa Workspace ONE (11 models, 13 hard; 21 of 28 labels negative), Microsoft Intune (10 models; 12 of 59 labels negative), IBM MaaS360 (7 models, 6 hard; 8 of 11 labels negative), Jamf (6 models; 7 of 39 labels negative)
- **vector-databases**: Pinecone (11 models, 4 hard; 18 of 67 labels negative), Weaviate (10 models, 3 hard; 15 of 63 labels negative), Milvus (9 models, 7 hard; 18 of 37 labels negative), Chroma (5 models, 2 hard; 8 of 33 labels negative)
- **vulnerability-management-platforms**: Qualys VMDR (9 models, 2 hard; 14 of 21 labels negative), Rapid7 InsightVM (9 models, 1 hard; 9 of 25 labels negative), OpenVAS (8 models, 2 hard; 11 of 35 labels negative), Tenable Vulnerability Management (8 models, 1 hard; 11 of 24 labels negative)
- **web-application-firewalls**: Imperva (9 models, 7 hard; 20 of 30 labels negative), Akamai (8 models, 5 hard; 14 of 20 labels negative), ModSecurity (6 models, 3 hard; 9 of 15 labels negative), AWS WAF (6 models; 9 of 41 labels negative)
- **workflow-orchestration**: Apache Airflow (11 models, 14 hard; 31 of 50 labels negative), Camunda (9 models, 9 hard; 10 of 12 labels negative), Temporal (8 models, 7 hard; 10 of 18 labels negative), Pega (7 models, 7 hard; 7 of 7 labels negative)
- **workforce-identity-and-sso**: Okta (9 models, 3 hard; 18 of 41 labels negative), Ping Identity (8 models, 5 hard; 12 of 16 labels negative), Okta Workforce Identity (8 models, 2 hard; 13 of 18 labels negative), Saviynt (6 models, 6 hard; 6 of 6 labels negative)
- **zero-trust-network-access**: Zscaler (7 models, 6 hard; 11 of 12 labels negative), Palo Alto Networks Prisma Access (6 models, 6 hard; 7 of 8 labels negative), Zscaler Private Access (6 models, 3 hard; 11 of 16 labels negative), Palo Alto (4 models, 1 hard; 6 of 6 labels negative)

## Leadership and criticism

First-choice share and negative label rate are independent, so every product with at least 10 labels in a category is placed on both axes. Cutoffs: leader at 30% or more of first choices, criticized at 25% or more negative labels. An endorsed leader is recommended and not criticized; a criticized default is recommended while the models list its problems; a criticized challenger is named mostly to be warned against.

| Category | Product | First-choice share | Negative rate | Labels | Quadrant |
|---|---|---|---|---|---|
| ai-coding-assistants | GitHub Copilot | 65% | 14% | 71 | endorsed leader |
| ai-coding-assistants | Windsurf | 19% | 12% | 49 | accepted challenger |
| ai-coding-assistants | Cursor | 9% | 17% | 60 | accepted challenger |
| ai-coding-assistants | Amazon Q Developer | 5% | 25% | 24 | criticized challenger |
| ai-coding-assistants | Tabnine | 0% | 6% | 36 | accepted challenger |
| ai-coding-assistants | Claude Code | 0% | 22% | 18 | accepted challenger |
| api-gateways | Zuplo | 43% | 0% | 49 | endorsed leader |
| api-gateways | Kong Gateway | 25% | 41% | 76 | criticized challenger |
| api-gateways | Amazon API Gateway | 12% | 21% | 63 | accepted challenger |
| api-gateways | Tyk | 7% | 2% | 55 | accepted challenger |
| api-gateways | Cloudflare API Gateway | 4% | 0% | 11 | accepted challenger |
| api-gateways | Apache APISIX | 4% | 7% | 14 | accepted challenger |
| api-gateways | Azure API Management | 2% | 56% | 18 | criticized challenger |
| api-gateways | Apigee | 2% | 81% | 26 | criticized challenger |
| api-gateways | Traefik | 0% | 6% | 16 | accepted challenger |
| api-gateways | NGINX | 0% | 13% | 15 | accepted challenger |
| api-management | Zuplo | 38% | 0% | 39 | endorsed leader |
| api-management | Postman | 17% | 25% | 36 | criticized challenger |
| api-management | Kong Gateway | 17% | 37% | 65 | criticized challenger |
| api-management | Amazon API Gateway | 11% | 22% | 59 | accepted challenger |
| api-management | Tyk | 6% | 6% | 50 | accepted challenger |
| api-management | Gravitee | 0% | 11% | 18 | accepted challenger |
| api-management | Azure API Management | 0% | 39% | 28 | criticized challenger |
| api-management | Apigee | 0% | 80% | 35 | criticized challenger |
| api-management | MuleSoft Anypoint Platform | 0% | 83% | 23 | criticized challenger |
| api-management | IBM API Connect | 0% | 100% | 11 | criticized challenger |
| application-performance-monitoring | New Relic | 51% | 3% | 61 | endorsed leader |
| application-performance-monitoring | Datadog | 15% | 62% | 53 | criticized challenger |
| application-performance-monitoring | SigNoz | 11% | 3% | 29 | accepted challenger |
| application-performance-monitoring | Sentry | 6% | 13% | 31 | accepted challenger |
| application-performance-monitoring | Scout APM | 4% | 0% | 19 | accepted challenger |
| application-performance-monitoring | Honeycomb | 2% | 0% | 11 | accepted challenger |
| application-performance-monitoring | Site24x7 | 2% | 0% | 15 | accepted challenger |
| application-performance-monitoring | Grafana Cloud | 2% | 18% | 17 | accepted challenger |
| application-performance-monitoring | AppSignal | 0% | 0% | 19 | accepted challenger |
| application-performance-monitoring | Elastic APM | 0% | 8% | 12 | accepted challenger |
| application-performance-monitoring | Dynatrace | 0% | 77% | 31 | criticized challenger |
| application-performance-monitoring | AppDynamics | 0% | 80% | 20 | criticized challenger |
| attack-surface-management | Intruder | 52% | 0% | 53 | endorsed leader |
| attack-surface-management | runZero | 10% | 0% | 11 | accepted challenger |
| attack-surface-management | Detectify | 6% | 14% | 43 | accepted challenger |
| attack-surface-management | bspeka | 4% | 0% | 10 | accepted challenger |
| attack-surface-management | UpGuard BreachSight | 4% | 19% | 16 | accepted challenger |
| attack-surface-management | Attaxion | 2% | 0% | 20 | accepted challenger |
| attack-surface-management | Aikido Security | 2% | 8% | 13 | accepted challenger |
| attack-surface-management | Censys ASM | 2% | 33% | 15 | criticized challenger |
| attack-surface-management | Microsoft Defender External Attack Surface Management | 2% | 53% | 17 | criticized challenger |
| attack-surface-management | CyCognito | 2% | 77% | 22 | criticized challenger |
| attack-surface-management | Cortex Xpanse | 0% | 100% | 20 | criticized challenger |
| backup-and-disaster-recovery | Acronis Cyber Protect | 37% | 0% | 40 | endorsed leader |
| backup-and-disaster-recovery | IDrive Business | 22% | 0% | 35 | accepted challenger |
| backup-and-disaster-recovery | Backblaze | 7% | 6% | 17 | accepted challenger |
| backup-and-disaster-recovery | Cove Data Protection | 4% | 0% | 12 | accepted challenger |
| backup-and-disaster-recovery | Veeam | 4% | 10% | 20 | accepted challenger |
| backup-and-disaster-recovery | Axcient x360Recover | 0% | 7% | 14 | accepted challenger |
| backup-and-disaster-recovery | Veeam Data Platform | 0% | 18% | 11 | accepted challenger |
| backup-and-disaster-recovery | Datto | 0% | 23% | 13 | accepted challenger |
| business-password-managers | 1Password | 42% | 3% | 60 | endorsed leader |
| business-password-managers | Bitwarden | 38% | 3% | 65 | endorsed leader |
| business-password-managers | NordPass | 11% | 3% | 39 | accepted challenger |
| business-password-managers | RoboForm | 2% | 0% | 24 | accepted challenger |
| business-password-managers | Proton Pass | 2% | 0% | 12 | accepted challenger |
| business-password-managers | Dashlane | 2% | 25% | 24 | criticized challenger |
| business-password-managers | Keeper Security | 0% | 0% | 45 | accepted challenger |
| business-password-managers | LastPass | 0% | 91% | 23 | criticized challenger |
| ci-cd-platforms | GitHub Actions | 93% | 3% | 68 | endorsed leader |
| ci-cd-platforms | GitLab CI/CD | 5% | 13% | 67 | accepted challenger |
| ci-cd-platforms | CircleCI | 2% | 22% | 60 | accepted challenger |
| ci-cd-platforms | DeployHQ | 0% | 0% | 13 | accepted challenger |
| ci-cd-platforms | Buildkite | 0% | 6% | 16 | accepted challenger |
| ci-cd-platforms | Bitbucket Pipelines | 0% | 31% | 13 | criticized challenger |
| ci-cd-platforms | Azure DevOps | 0% | 36% | 11 | criticized challenger |
| ci-cd-platforms | JetBrains TeamCity | 0% | 40% | 10 | criticized challenger |
| ci-cd-platforms | Jenkins | 0% | 75% | 56 | criticized challenger |
| cloud-cost-management | Vantage | 41% | 2% | 57 | endorsed leader |
| cloud-cost-management | AWS Cost Explorer | 14% | 7% | 41 | accepted challenger |
| cloud-cost-management | Microsoft Cost Management | 10% | 0% | 33 | accepted challenger |
| cloud-cost-management | Infracost | 2% | 0% | 33 | accepted challenger |
| cloud-cost-management | SpendArk | 2% | 0% | 17 | accepted challenger |
| cloud-cost-management | Google Cloud Billing | 2% | 5% | 19 | accepted challenger |
| cloud-cost-management | Kubecost | 2% | 10% | 31 | accepted challenger |
| cloud-cost-management | CloudZero | 2% | 22% | 36 | accepted challenger |
| cloud-cost-management | Finout | 2% | 36% | 11 | criticized challenger |
| cloud-cost-management | VMware Tanzu CloudHealth | 2% | 91% | 23 | criticized challenger |
| cloud-cost-management | OpenCost | 0% | 0% | 16 | accepted challenger |
| cloud-cost-management | ProsperOps | 0% | 19% | 16 | accepted challenger |
| cloud-cost-management | nOps | 0% | 20% | 10 | accepted challenger |
| cloud-cost-management | CAST AI | 0% | 24% | 17 | accepted challenger |
| cloud-cost-management | Flexera One | 0% | 79% | 14 | criticized challenger |
| cloud-cost-management | IBM Apptio Cloudability | 0% | 85% | 27 | criticized challenger |
| cloud-hosting | DigitalOcean | 40% | 2% | 45 | endorsed leader |
| cloud-hosting | Amazon Web Services | 11% | 40% | 53 | criticized challenger |
| cloud-hosting | Hostinger | 9% | 25% | 16 | criticized challenger |
| cloud-hosting | Atlantic.Net | 6% | 8% | 13 | accepted challenger |
| cloud-hosting | Hetzner | 4% | 7% | 15 | accepted challenger |
| cloud-hosting | Cloudways | 4% | 7% | 14 | accepted challenger |
| cloud-hosting | Vultr | 4% | 8% | 24 | accepted challenger |
| cloud-hosting | Akamai Connected Cloud | 2% | 8% | 26 | accepted challenger |
| cloud-hosting | Microsoft Azure | 2% | 16% | 25 | accepted challenger |
| cloud-hosting | AWS Lightsail | 2% | 18% | 11 | accepted challenger |
| cloud-hosting | SiteGround | 0% | 10% | 10 | accepted challenger |
| cloud-hosting | Google Cloud | 0% | 24% | 41 | accepted challenger |
| cloud-hosting | Azure | 0% | 50% | 28 | criticized challenger |
| cloud-hosting | GoDaddy | 0% | 91% | 11 | criticized challenger |
| cloud-native-application-protection | Microsoft Defender for Cloud | 46% | 7% | 61 | endorsed leader |
| cloud-native-application-protection | Aikido Security | 25% | 0% | 32 | accepted challenger |
| cloud-native-application-protection | Wiz | 8% | 43% | 49 | criticized challenger |
| cloud-native-application-protection | Prowler | 2% | 0% | 16 | accepted challenger |
| cloud-native-application-protection | Falco | 2% | 0% | 18 | accepted challenger |
| cloud-native-application-protection | Sweet Security | 2% | 6% | 18 | accepted challenger |
| cloud-native-application-protection | Orca Security | 2% | 29% | 34 | criticized challenger |
| cloud-native-application-protection | Sysdig | 0% | 18% | 11 | accepted challenger |
| cloud-native-application-protection | Orca | 0% | 31% | 16 | criticized challenger |
| cloud-native-application-protection | Prisma Cloud | 0% | 76% | 25 | criticized challenger |
| cloud-security-posture-management | Microsoft Defender for Cloud | 31% | 10% | 60 | endorsed leader |
| cloud-security-posture-management | Prowler | 27% | 0% | 56 | accepted challenger |
| cloud-security-posture-management | AWS Security Hub | 12% | 8% | 25 | accepted challenger |
| cloud-security-posture-management | Wiz | 10% | 52% | 56 | criticized challenger |
| cloud-security-posture-management | Orca Security | 6% | 33% | 33 | criticized challenger |
| cloud-security-posture-management | Aikido Security | 4% | 0% | 12 | accepted challenger |
| cloud-security-posture-management | Datadog Cloud Security Management | 0% | 5% | 20 | accepted challenger |
| cloud-security-posture-management | Google Security Command Center | 0% | 18% | 11 | accepted challenger |
| cloud-security-posture-management | Snyk | 0% | 30% | 10 | criticized challenger |
| cloud-security-posture-management | Prisma Cloud | 0% | 68% | 38 | criticized challenger |
| cloud-security-posture-management | Orca | 0% | 75% | 12 | criticized challenger |
| cloud-security-posture-management | Lacework FortiCNAPP | 0% | 77% | 13 | criticized challenger |
| compliance-automation | Vanta | 35% | 21% | 62 | endorsed leader |
| compliance-automation | Sprinto | 29% | 2% | 48 | accepted challenger |
| compliance-automation | Drata | 10% | 21% | 53 | accepted challenger |
| compliance-automation | Secureframe | 8% | 5% | 40 | accepted challenger |
| compliance-automation | Scytale | 0% | 7% | 14 | accepted challenger |
| compliance-automation | Thoropass | 0% | 24% | 17 | accepted challenger |
| compliance-automation | Hyperproof | 0% | 50% | 10 | criticized challenger |
| container-and-kubernetes-security | Trivy | 28% | 4% | 55 | accepted challenger |
| container-and-kubernetes-security | Kubescape | 23% | 0% | 43 | accepted challenger |
| container-and-kubernetes-security | Falco | 22% | 7% | 54 | accepted challenger |
| container-and-kubernetes-security | Snyk | 9% | 3% | 35 | accepted challenger |
| container-and-kubernetes-security | Snyk Container | 5% | 0% | 12 | accepted challenger |
| container-and-kubernetes-security | SUSE NeuVector | 3% | 16% | 19 | accepted challenger |
| container-and-kubernetes-security | Microsoft Defender for Cloud | 3% | 55% | 11 | criticized challenger |
| container-and-kubernetes-security | Calico | 2% | 0% | 23 | accepted challenger |
| container-and-kubernetes-security | Sysdig Secure | 2% | 44% | 16 | criticized challenger |
| container-and-kubernetes-security | Red Hat Advanced Cluster Security for Kubernetes | 0% | 27% | 11 | criticized challenger |
| container-and-kubernetes-security | Wiz | 0% | 31% | 26 | criticized challenger |
| container-and-kubernetes-security | Sysdig | 0% | 39% | 33 | criticized challenger |
| container-and-kubernetes-security | Aqua Security | 0% | 52% | 46 | criticized challenger |
| container-and-kubernetes-security | Prisma Cloud | 0% | 72% | 32 | criticized challenger |
| content-delivery-networks | Cloudflare | 90% | 2% | 65 | endorsed leader |
| content-delivery-networks | Bunny.net | 4% | 0% | 55 | accepted challenger |
| content-delivery-networks | Fastly | 2% | 54% | 37 | criticized challenger |
| content-delivery-networks | KeyCDN | 0% | 7% | 30 | accepted challenger |
| content-delivery-networks | Amazon CloudFront | 0% | 27% | 48 | criticized challenger |
| content-delivery-networks | Akamai | 0% | 70% | 23 | criticized challenger |
| customer-identity-and-access-management | Clerk | 27% | 5% | 38 | accepted challenger |
| customer-identity-and-access-management | Auth0 | 25% | 51% | 61 | criticized challenger |
| customer-identity-and-access-management | Frontegg | 15% | 5% | 19 | accepted challenger |
| customer-identity-and-access-management | WorkOS | 10% | 6% | 31 | accepted challenger |
| customer-identity-and-access-management | LoginRadius | 4% | 11% | 18 | accepted challenger |
| customer-identity-and-access-management | Amazon Cognito | 4% | 50% | 20 | criticized challenger |
| customer-identity-and-access-management | Descope | 2% | 5% | 20 | accepted challenger |
| customer-identity-and-access-management | Firebase Authentication | 2% | 22% | 18 | accepted challenger |
| customer-identity-and-access-management | Stytch | 0% | 0% | 26 | accepted challenger |
| customer-identity-and-access-management | Supabase Auth | 0% | 0% | 15 | accepted challenger |
| customer-identity-and-access-management | FusionAuth | 0% | 6% | 16 | accepted challenger |
| customer-identity-and-access-management | Keycloak | 0% | 36% | 14 | criticized challenger |
| customer-identity-and-access-management | Microsoft Entra External ID | 0% | 42% | 12 | criticized challenger |
| customer-identity-and-access-management | Okta | 0% | 79% | 14 | criticized challenger |
| data-loss-prevention | Microsoft Purview DLP | 30% | 9% | 47 | accepted challenger |
| data-loss-prevention | CurrentWare | 20% | 2% | 43 | accepted challenger |
| data-loss-prevention | Safetica | 13% | 0% | 45 | accepted challenger |
| data-loss-prevention | Nightfall AI | 11% | 2% | 45 | accepted challenger |
| data-loss-prevention | Netwrix Endpoint Protector | 2% | 7% | 43 | accepted challenger |
| data-loss-prevention | miniOrange | 0% | 0% | 11 | accepted challenger |
| data-loss-prevention | Forcepoint DLP | 0% | 95% | 21 | criticized challenger |
| data-loss-prevention | Symantec Data Loss Prevention | 0% | 96% | 26 | criticized challenger |
| data-warehouses | Google BigQuery | 80% | 13% | 69 | endorsed leader |
| data-warehouses | Snowflake | 12% | 29% | 63 | criticized challenger |
| data-warehouses | Amazon Redshift | 4% | 25% | 64 | criticized challenger |
| data-warehouses | MotherDuck | 2% | 0% | 23 | accepted challenger |
| data-warehouses | PostgreSQL | 0% | 0% | 10 | accepted challenger |
| data-warehouses | Azure Synapse Analytics | 0% | 20% | 15 | accepted challenger |
| data-warehouses | ClickHouse Cloud | 0% | 24% | 21 | accepted challenger |
| data-warehouses | Databricks | 0% | 31% | 16 | criticized challenger |
| ddos-protection | Cloudflare | 89% | 0% | 71 | endorsed leader |
| ddos-protection | Gcore | 4% | 9% | 11 | accepted challenger |
| ddos-protection | Sucuri | 2% | 0% | 37 | accepted challenger |
| ddos-protection | Azure DDoS Protection | 2% | 13% | 23 | accepted challenger |
| ddos-protection | AWS Shield | 2% | 14% | 56 | accepted challenger |
| ddos-protection | Flowtriq | 0% | 0% | 13 | accepted challenger |
| ddos-protection | Google Cloud Armor | 0% | 12% | 17 | accepted challenger |
| ddos-protection | Fastly | 0% | 33% | 12 | criticized challenger |
| ddos-protection | Imperva | 0% | 50% | 24 | criticized challenger |
| ddos-protection | Akamai Prolexic | 0% | 67% | 36 | criticized challenger |
| ddos-protection | Radware | 0% | 73% | 15 | criticized challenger |
| email-security | Microsoft Defender for Office 365 | 44% | 7% | 58 | endorsed leader |
| email-security | IRONSCALES | 19% | 0% | 35 | accepted challenger |
| email-security | Abnormal AI | 6% | 0% | 20 | accepted challenger |
| email-security | Check Point Harmony Email & Collaboration | 6% | 8% | 25 | accepted challenger |
| email-security | Barracuda Email Protection | 6% | 11% | 27 | accepted challenger |
| email-security | Proofpoint Email Protection | 6% | 24% | 54 | accepted challenger |
| email-security | SpamTitan | 2% | 10% | 20 | accepted challenger |
| email-security | Coro | 2% | 13% | 15 | accepted challenger |
| email-security | Guardz | 0% | 0% | 12 | accepted challenger |
| email-security | Mimecast Email Security | 0% | 45% | 31 | criticized challenger |
| endpoint-detection-and-response | Huntress Managed EDR | 44% | 0% | 52 | endorsed leader |
| endpoint-detection-and-response | Microsoft Defender for Cloud | 36% | 0% | 46 | endorsed leader |
| endpoint-detection-and-response | SentinelOne Singularity | 10% | 15% | 55 | accepted challenger |
| endpoint-detection-and-response | Bitdefender GravityZone | 4% | 3% | 31 | accepted challenger |
| endpoint-detection-and-response | Sophos Intercept X | 2% | 10% | 21 | accepted challenger |
| endpoint-detection-and-response | Microsoft Defender for Endpoint | 2% | 27% | 11 | criticized challenger |
| endpoint-detection-and-response | Cynet | 0% | 0% | 12 | accepted challenger |
| endpoint-detection-and-response | CrowdStrike | 0% | 44% | 16 | criticized challenger |
| endpoint-detection-and-response | CrowdStrike Falcon | 0% | 44% | 41 | criticized challenger |
| endpoint-protection | Microsoft Defender for Cloud | 50% | 2% | 55 | endorsed leader |
| endpoint-protection | Bitdefender GravityZone Small Business Security | 13% | 0% | 12 | accepted challenger |
| endpoint-protection | Huntress Managed EDR | 7% | 0% | 18 | accepted challenger |
| endpoint-protection | Huntress | 4% | 0% | 10 | accepted challenger |
| endpoint-protection | Bitdefender GravityZone | 4% | 7% | 29 | accepted challenger |
| endpoint-protection | ESET PROTECT | 2% | 0% | 13 | accepted challenger |
| endpoint-protection | Avast Business | 2% | 10% | 10 | accepted challenger |
| endpoint-protection | CrowdStrike Falcon Go | 0% | 6% | 18 | accepted challenger |
| endpoint-protection | SentinelOne Singularity | 0% | 7% | 14 | accepted challenger |
| endpoint-protection | Sophos Intercept X | 0% | 18% | 17 | accepted challenger |
| endpoint-protection | SentinelOne | 0% | 19% | 16 | accepted challenger |
| endpoint-protection | CrowdStrike | 0% | 30% | 10 | criticized challenger |
| endpoint-protection | CrowdStrike Falcon | 0% | 67% | 12 | criticized challenger |
| error-and-crash-monitoring | Sentry | 79% | 9% | 68 | endorsed leader |
| error-and-crash-monitoring | Honeybadger | 14% | 0% | 42 | accepted challenger |
| error-and-crash-monitoring | GlitchTip | 5% | 0% | 24 | accepted challenger |
| error-and-crash-monitoring | Rollbar | 2% | 4% | 48 | accepted challenger |
| error-and-crash-monitoring | Bugsnag | 0% | 10% | 42 | accepted challenger |
| error-and-crash-monitoring | Airbrake | 0% | 12% | 16 | accepted challenger |
| error-and-crash-monitoring | Raygun | 0% | 20% | 10 | accepted challenger |
| error-and-crash-monitoring | LogRocket | 0% | 25% | 12 | criticized challenger |
| error-and-crash-monitoring | Datadog | 0% | 74% | 19 | criticized challenger |
| error-and-crash-monitoring | New Relic | 0% | 85% | 13 | criticized challenger |
| etl-and-elt | Airbyte | 36% | 11% | 63 | endorsed leader |
| etl-and-elt | Hevo Data | 23% | 2% | 48 | accepted challenger |
| etl-and-elt | Stitch | 13% | 16% | 45 | accepted challenger |
| etl-and-elt | Fivetran | 13% | 35% | 52 | criticized challenger |
| etl-and-elt | Skyvia | 9% | 3% | 33 | accepted challenger |
| etl-and-elt | Coupler.io | 0% | 0% | 28 | accepted challenger |
| etl-and-elt | dbt | 0% | 0% | 22 | accepted challenger |
| etl-and-elt | Matillion | 0% | 25% | 16 | criticized challenger |
| etl-and-elt | Integrate.io | 0% | 30% | 10 | criticized challenger |
| etl-and-elt | Talend | 0% | 67% | 21 | criticized challenger |
| etl-and-elt | Informatica | 0% | 92% | 12 | criticized challenger |
| extended-detection-and-response | Coro | 57% | 0% | 54 | endorsed leader |
| extended-detection-and-response | Microsoft Defender for Cloud | 14% | 0% | 11 | accepted challenger |
| extended-detection-and-response | Microsoft Defender XDR | 11% | 18% | 45 | accepted challenger |
| extended-detection-and-response | Huntress Managed EDR | 5% | 0% | 13 | accepted challenger |
| extended-detection-and-response | SentinelOne Singularity | 2% | 22% | 37 | accepted challenger |
| extended-detection-and-response | Bitdefender | 0% | 0% | 10 | accepted challenger |
| extended-detection-and-response | Sophos Intercept X | 0% | 6% | 18 | accepted challenger |
| extended-detection-and-response | Trend Vision One | 0% | 46% | 13 | criticized challenger |
| extended-detection-and-response | CrowdStrike Falcon | 0% | 55% | 31 | criticized challenger |
| extended-detection-and-response | Palo Alto Networks Cortex XDR | 0% | 71% | 28 | criticized challenger |
| feature-flags | ConfigCat | 43% | 4% | 57 | endorsed leader |
| feature-flags | PostHog | 16% | 2% | 43 | accepted challenger |
| feature-flags | Flagsmith | 14% | 5% | 57 | accepted challenger |
| feature-flags | DevCycle | 4% | 0% | 12 | accepted challenger |
| feature-flags | GrowthBook | 4% | 3% | 35 | accepted challenger |
| feature-flags | Statsig | 4% | 3% | 29 | accepted challenger |
| feature-flags | Unleash | 2% | 11% | 44 | accepted challenger |
| feature-flags | Split | 2% | 56% | 18 | criticized challenger |
| feature-flags | LaunchDarkly | 2% | 85% | 53 | criticized challenger |
| feature-flags | Optimizely | 0% | 70% | 10 | criticized challenger |
| grc-platforms | Sprinto | 22% | 3% | 39 | accepted challenger |
| grc-platforms | Vanta | 22% | 9% | 45 | accepted challenger |
| grc-platforms | SimpleRisk | 15% | 8% | 24 | accepted challenger |
| grc-platforms | Drata | 9% | 10% | 42 | accepted challenger |
| grc-platforms | RealCISO | 7% | 0% | 10 | accepted challenger |
| grc-platforms | Secureframe | 4% | 17% | 12 | accepted challenger |
| grc-platforms | Hyperproof | 0% | 16% | 32 | accepted challenger |
| grc-platforms | MetricStream | 0% | 93% | 15 | criticized challenger |
| grc-platforms | ServiceNow Integrated Risk Management | 0% | 95% | 22 | criticized challenger |
| grc-platforms | Archer | 0% | 100% | 13 | criticized challenger |
| identity-governance | AccessOwl | 25% | 0% | 38 | accepted challenger |
| identity-governance | JumpCloud | 15% | 4% | 26 | accepted challenger |
| identity-governance | Iden | 12% | 0% | 17 | accepted challenger |
| identity-governance | Lumos | 7% | 7% | 30 | accepted challenger |
| identity-governance | tenfold | 7% | 8% | 13 | accepted challenger |
| identity-governance | Microsoft Entra ID Governance | 7% | 12% | 24 | accepted challenger |
| identity-governance | Microsoft Entra ID | 5% | 15% | 13 | accepted challenger |
| identity-governance | Okta Identity Governance | 5% | 30% | 33 | criticized challenger |
| identity-governance | Zluri | 3% | 0% | 11 | accepted challenger |
| identity-governance | ConductorOne | 2% | 27% | 15 | criticized challenger |
| identity-governance | Okta | 0% | 33% | 12 | criticized challenger |
| identity-governance | One Identity Manager | 0% | 79% | 19 | criticized challenger |
| identity-governance | SailPoint | 0% | 84% | 45 | criticized challenger |
| identity-governance | Saviynt Enterprise Identity Cloud | 0% | 100% | 39 | criticized challenger |
| incident-management-and-on-call | incident.io | 30% | 10% | 50 | accepted challenger |
| incident-management-and-on-call | Better Stack | 21% | 5% | 40 | accepted challenger |
| incident-management-and-on-call | Squadcast | 13% | 0% | 35 | accepted challenger |
| incident-management-and-on-call | Hyperping | 9% | 0% | 25 | accepted challenger |
| incident-management-and-on-call | PagerDuty | 6% | 58% | 59 | criticized challenger |
| incident-management-and-on-call | TaskCall | 4% | 0% | 10 | accepted challenger |
| incident-management-and-on-call | Spike.sh | 4% | 6% | 17 | accepted challenger |
| incident-management-and-on-call | Grafana IRM | 2% | 31% | 16 | criticized challenger |
| incident-management-and-on-call | Rootly | 0% | 0% | 27 | accepted challenger |
| incident-management-and-on-call | FireHydrant | 0% | 12% | 17 | accepted challenger |
| incident-management-and-on-call | Jira Service Management | 0% | 26% | 19 | criticized challenger |
| incident-management-and-on-call | Opsgenie | 0% | 75% | 24 | criticized challenger |
| incident-management-and-on-call | ServiceNow | 0% | 91% | 11 | criticized challenger |
| infrastructure-as-code | Terraform | 50% | 23% | 74 | endorsed leader |
| infrastructure-as-code | OpenTofu | 33% | 0% | 42 | endorsed leader |
| infrastructure-as-code | Pulumi | 8% | 10% | 61 | accepted challenger |
| infrastructure-as-code | AWS CDK | 2% | 16% | 32 | accepted challenger |
| infrastructure-as-code | Crossplane | 2% | 31% | 16 | criticized challenger |
| infrastructure-as-code | Ansible | 0% | 13% | 39 | accepted challenger |
| infrastructure-as-code | Azure Bicep | 0% | 25% | 12 | criticized challenger |
| infrastructure-as-code | AWS CloudFormation | 0% | 26% | 46 | criticized challenger |
| infrastructure-as-code | Azure Resource Manager templates | 0% | 36% | 11 | criticized challenger |
| infrastructure-as-code | Puppet | 0% | 72% | 25 | criticized challenger |
| infrastructure-as-code | Chef | 0% | 86% | 14 | criticized challenger |
| infrastructure-monitoring | Site24x7 | 22% | 0% | 34 | accepted challenger |
| infrastructure-monitoring | Zabbix | 14% | 22% | 49 | accepted challenger |
| infrastructure-monitoring | Better Stack | 10% | 0% | 12 | accepted challenger |
| infrastructure-monitoring | Netdata | 10% | 0% | 35 | accepted challenger |
| infrastructure-monitoring | Datadog | 10% | 65% | 46 | criticized challenger |
| infrastructure-monitoring | Grafana | 6% | 0% | 23 | accepted challenger |
| infrastructure-monitoring | Paessler PRTG | 6% | 7% | 29 | accepted challenger |
| infrastructure-monitoring | Prometheus + Grafana | 4% | 15% | 26 | accepted challenger |
| infrastructure-monitoring | Prometheus | 4% | 20% | 10 | accepted challenger |
| infrastructure-monitoring | New Relic | 4% | 32% | 41 | criticized challenger |
| infrastructure-monitoring | Dynatrace | 0% | 79% | 19 | criticized challenger |
| infrastructure-monitoring | Nagios | 0% | 86% | 14 | criticized challenger |
| it-asset-management | Snipe-IT | 41% | 18% | 57 | endorsed leader |
| it-asset-management | Rippling IT | 16% | 4% | 26 | accepted challenger |
| it-asset-management | AssetTiger | 6% | 9% | 11 | accepted challenger |
| it-asset-management | Freshservice | 4% | 3% | 31 | accepted challenger |
| it-asset-management | NinjaOne | 4% | 6% | 18 | accepted challenger |
| it-asset-management | Asset Panda | 4% | 8% | 24 | accepted challenger |
| it-asset-management | Lansweeper | 4% | 14% | 28 | accepted challenger |
| it-asset-management | BlueTally | 2% | 0% | 12 | accepted challenger |
| it-asset-management | Reftab | 2% | 0% | 13 | accepted challenger |
| it-asset-management | InvGate Asset Management | 2% | 7% | 15 | accepted challenger |
| it-asset-management | ManageEngine AssetExplorer | 0% | 8% | 25 | accepted challenger |
| it-asset-management | Spiceworks Inventory | 0% | 30% | 10 | criticized challenger |
| it-asset-management | ServiceNow IT Asset Management | 0% | 95% | 21 | criticized challenger |
| it-service-management | Freshservice | 39% | 4% | 56 | endorsed leader |
| it-service-management | ManageEngine ServiceDesk Plus | 16% | 5% | 41 | accepted challenger |
| it-service-management | Jira Service Management | 14% | 10% | 50 | accepted challenger |
| it-service-management | Freshdesk | 8% | 0% | 12 | accepted challenger |
| it-service-management | Zoho Desk | 8% | 0% | 13 | accepted challenger |
| it-service-management | Spiceworks Cloud Help Desk | 6% | 10% | 20 | accepted challenger |
| it-service-management | Alloy Navigator | 2% | 0% | 20 | accepted challenger |
| it-service-management | Zendesk | 2% | 28% | 18 | criticized challenger |
| it-service-management | HappyFox | 0% | 0% | 10 | accepted challenger |
| it-service-management | SysAid | 0% | 0% | 13 | accepted challenger |
| it-service-management | ServiceNow | 0% | 96% | 25 | criticized challenger |
| it-service-management | BMC Helix ITSM | 0% | 100% | 14 | criticized challenger |
| llm-gateways-and-observability | LiteLLM | 46% | 14% | 57 | endorsed leader |
| llm-gateways-and-observability | Portkey | 15% | 8% | 49 | accepted challenger |
| llm-gateways-and-observability | OpenRouter | 10% | 9% | 43 | accepted challenger |
| llm-gateways-and-observability | Helicone | 10% | 22% | 36 | accepted challenger |
| llm-gateways-and-observability | Cloudflare AI Gateway | 4% | 7% | 27 | accepted challenger |
| llm-gateways-and-observability | Bifrost | 0% | 15% | 13 | accepted challenger |
| log-management | Better Stack | 34% | 0% | 51 | endorsed leader |
| log-management | Grafana Loki | 17% | 10% | 40 | accepted challenger |
| log-management | SolarWinds Papertrail | 15% | 2% | 43 | accepted challenger |
| log-management | Axiom | 11% | 0% | 19 | accepted challenger |
| log-management | Datadog Log Management | 6% | 64% | 50 | criticized challenger |
| log-management | Elastic Observability | 4% | 17% | 12 | accepted challenger |
| log-management | Graylog | 4% | 29% | 38 | criticized challenger |
| log-management | Grafana Cloud | 2% | 0% | 14 | accepted challenger |
| log-management | SigNoz | 2% | 13% | 15 | accepted challenger |
| log-management | OpenObserve | 0% | 0% | 10 | accepted challenger |
| log-management | New Relic Logs | 0% | 23% | 22 | accepted challenger |
| log-management | Elastic Stack | 0% | 49% | 39 | criticized challenger |
| log-management | Splunk | 0% | 79% | 38 | criticized challenger |
| managed-detection-and-response | Huntress Managed EDR | 88% | 0% | 53 | endorsed leader |
| managed-detection-and-response | Sophos MDR | 5% | 2% | 45 | accepted challenger |
| managed-detection-and-response | Blackpoint Cyber | 0% | 0% | 14 | accepted challenger |
| managed-detection-and-response | Expel | 0% | 13% | 15 | accepted challenger |
| managed-detection-and-response | Arctic Wolf Managed Detection and Response | 0% | 42% | 33 | criticized challenger |
| managed-detection-and-response | CrowdStrike Falcon Complete | 0% | 58% | 26 | criticized challenger |
| managed-kubernetes-platforms | DigitalOcean Kubernetes | 39% | 7% | 59 | endorsed leader |
| managed-kubernetes-platforms | Google Kubernetes Engine | 27% | 28% | 61 | criticized challenger |
| managed-kubernetes-platforms | Civo | 11% | 3% | 30 | accepted challenger |
| managed-kubernetes-platforms | Linode Kubernetes Engine | 5% | 9% | 34 | accepted challenger |
| managed-kubernetes-platforms | Azure Kubernetes Service | 5% | 27% | 56 | criticized challenger |
| managed-kubernetes-platforms | Amazon EKS | 5% | 52% | 56 | criticized challenger |
| managed-kubernetes-platforms | Render | 2% | 0% | 16 | accepted challenger |
| managed-kubernetes-platforms | Scaleway Kapsule | 2% | 6% | 16 | accepted challenger |
| managed-kubernetes-platforms | Railway | 0% | 0% | 11 | accepted challenger |
| managed-kubernetes-platforms | Vultr Kubernetes Engine | 0% | 8% | 13 | accepted challenger |
| managed-kubernetes-platforms | Rackspace Spot | 0% | 9% | 11 | accepted challenger |
| managed-relational-databases | Amazon RDS | 24% | 25% | 57 | accepted challenger |
| managed-relational-databases | DigitalOcean Managed Databases | 17% | 3% | 29 | accepted challenger |
| managed-relational-databases | Neon | 15% | 3% | 36 | accepted challenger |
| managed-relational-databases | Supabase | 11% | 3% | 33 | accepted challenger |
| managed-relational-databases | Google Cloud SQL | 11% | 19% | 53 | accepted challenger |
| managed-relational-databases | Azure SQL Database | 6% | 21% | 39 | accepted challenger |
| managed-relational-databases | MySQL | 4% | 9% | 11 | accepted challenger |
| managed-relational-databases | Amazon Aurora | 4% | 39% | 18 | criticized challenger |
| managed-relational-databases | PlanetScale | 0% | 24% | 33 | accepted challenger |
| ml-platforms | Google Vertex AI | 17% | 19% | 48 | accepted challenger |
| ml-platforms | Google Colab | 13% | 0% | 12 | accepted challenger |
| ml-platforms | MLflow | 10% | 10% | 21 | accepted challenger |
| ml-platforms | Azure Machine Learning | 10% | 29% | 42 | criticized challenger |
| ml-platforms | Databricks | 4% | 55% | 20 | criticized challenger |
| ml-platforms | BigML | 2% | 0% | 11 | accepted challenger |
| ml-platforms | H2O.ai | 2% | 5% | 19 | accepted challenger |
| ml-platforms | Dataiku | 2% | 18% | 11 | accepted challenger |
| ml-platforms | Amazon SageMaker | 2% | 43% | 47 | criticized challenger |
| ml-platforms | Hugging Face | 0% | 0% | 11 | accepted challenger |
| ml-platforms | KNIME | 0% | 0% | 22 | accepted challenger |
| ml-platforms | RapidMiner | 0% | 0% | 10 | accepted challenger |
| ml-platforms | DataRobot | 0% | 39% | 23 | criticized challenger |
| ml-platforms | Kubeflow | 0% | 64% | 14 | criticized challenger |
| multi-factor-authentication | Cisco Duo | 45% | 5% | 61 | endorsed leader |
| multi-factor-authentication | Microsoft Entra ID | 28% | 2% | 44 | accepted challenger |
| multi-factor-authentication | Microsoft Authenticator | 7% | 22% | 18 | accepted challenger |
| multi-factor-authentication | Google Authenticator | 5% | 16% | 25 | accepted challenger |
| multi-factor-authentication | Google Workspace 2-Step Verification | 3% | 8% | 13 | accepted challenger |
| multi-factor-authentication | Authy | 2% | 19% | 16 | accepted challenger |
| multi-factor-authentication | Okta | 2% | 28% | 32 | criticized challenger |
| multi-factor-authentication | JumpCloud Protect | 0% | 0% | 10 | accepted challenger |
| multi-factor-authentication | JumpCloud | 0% | 0% | 10 | accepted challenger |
| multi-factor-authentication | YubiKey | 0% | 9% | 22 | accepted challenger |
| multi-factor-authentication | Auth0 | 0% | 23% | 13 | accepted challenger |
| next-generation-firewalls | Fortinet FortiGate | 35% | 2% | 42 | endorsed leader |
| next-generation-firewalls | WatchGuard Firebox | 13% | 0% | 30 | accepted challenger |
| next-generation-firewalls | Sophos Firewall | 11% | 0% | 15 | accepted challenger |
| next-generation-firewalls | Sophos XGS | 2% | 0% | 14 | accepted challenger |
| next-generation-firewalls | SonicWall TZ Series | 2% | 33% | 12 | criticized challenger |
| next-generation-firewalls | Cisco Meraki MX | 0% | 18% | 11 | accepted challenger |
| next-generation-firewalls | SonicWall | 0% | 50% | 10 | criticized challenger |
| next-generation-firewalls | Palo Alto Networks | 0% | 62% | 16 | criticized challenger |
| nosql-databases | MongoDB | 77% | 9% | 74 | endorsed leader |
| nosql-databases | Google Cloud Firestore | 8% | 4% | 23 | accepted challenger |
| nosql-databases | PostgreSQL | 4% | 0% | 23 | accepted challenger |
| nosql-databases | Redis | 2% | 13% | 45 | accepted challenger |
| nosql-databases | Amazon DynamoDB | 2% | 17% | 54 | accepted challenger |
| nosql-databases | Couchbase | 2% | 28% | 25 | criticized challenger |
| nosql-databases | Apache CouchDB | 0% | 23% | 13 | accepted challenger |
| nosql-databases | Neo4j | 0% | 37% | 19 | criticized challenger |
| nosql-databases | Apache Cassandra | 0% | 62% | 37 | criticized challenger |
| nosql-databases | ScyllaDB | 0% | 70% | 10 | criticized challenger |
| nosql-databases | Apache HBase | 0% | 90% | 10 | criticized challenger |
| object-storage | Backblaze B2 | 60% | 5% | 61 | endorsed leader |
| object-storage | Cloudflare R2 | 21% | 3% | 58 | accepted challenger |
| object-storage | Wasabi | 12% | 21% | 56 | accepted challenger |
| object-storage | DigitalOcean Spaces | 4% | 13% | 39 | accepted challenger |
| object-storage | Google Cloud Storage | 2% | 47% | 30 | criticized challenger |
| object-storage | Amazon S3 | 2% | 48% | 52 | criticized challenger |
| object-storage | MinIO | 0% | 20% | 10 | accepted challenger |
| object-storage | Storj | 0% | 27% | 11 | criticized challenger |
| object-storage | Azure Blob Storage | 0% | 50% | 28 | criticized challenger |
| observability-platforms | Grafana | 32% | 5% | 64 | endorsed leader |
| observability-platforms | New Relic | 27% | 16% | 56 | accepted challenger |
| observability-platforms | Better Stack | 12% | 0% | 31 | accepted challenger |
| observability-platforms | Datadog | 12% | 64% | 58 | criticized challenger |
| observability-platforms | Site24x7 | 7% | 0% | 13 | accepted challenger |
| observability-platforms | SigNoz | 7% | 0% | 32 | accepted challenger |
| observability-platforms | Sentry | 2% | 0% | 11 | accepted challenger |
| observability-platforms | Uptrace | 2% | 0% | 16 | accepted challenger |
| observability-platforms | Honeycomb | 2% | 17% | 18 | accepted challenger |
| observability-platforms | Prometheus | 0% | 31% | 13 | criticized challenger |
| observability-platforms | Dynatrace | 0% | 71% | 14 | criticized challenger |
| patch-management | Action1 | 68% | 0% | 52 | endorsed leader |
| patch-management | NinjaOne | 12% | 3% | 39 | accepted challenger |
| patch-management | ManageEngine Patch Manager Plus | 10% | 14% | 35 | accepted challenger |
| patch-management | PDQ Connect | 2% | 0% | 15 | accepted challenger |
| patch-management | Automox | 2% | 3% | 38 | accepted challenger |
| patch-management | Patch My PC | 2% | 20% | 10 | accepted challenger |
| patch-management | PDQ Deploy & Inventory | 0% | 8% | 12 | accepted challenger |
| patch-management | Atera | 0% | 14% | 28 | accepted challenger |
| patch-management | Microsoft Intune | 0% | 25% | 16 | criticized challenger |
| patch-management | Windows Server Update Services | 0% | 69% | 13 | criticized challenger |
| penetration-testing-as-a-service | BreachLock | 28% | 0% | 31 | accepted challenger |
| penetration-testing-as-a-service | Cobalt | 21% | 6% | 33 | accepted challenger |
| penetration-testing-as-a-service | Astra Security | 19% | 0% | 22 | accepted challenger |
| penetration-testing-as-a-service | Acunetix | 9% | 19% | 16 | accepted challenger |
| penetration-testing-as-a-service | Bugcrowd | 2% | 0% | 17 | accepted challenger |
| penetration-testing-as-a-service | Intruder | 0% | 20% | 10 | accepted challenger |
| privileged-access-management | KeeperPAM | 27% | 0% | 52 | accepted challenger |
| privileged-access-management | ManageEngine PAM360 | 27% | 6% | 49 | accepted challenger |
| privileged-access-management | Teleport | 11% | 0% | 36 | accepted challenger |
| privileged-access-management | Delinea Secret Server | 7% | 0% | 14 | accepted challenger |
| privileged-access-management | Delinea | 7% | 18% | 39 | accepted challenger |
| privileged-access-management | StrongDM | 5% | 0% | 31 | accepted challenger |
| privileged-access-management | BeyondTrust | 2% | 81% | 31 | criticized challenger |
| privileged-access-management | CyberArk | 2% | 88% | 40 | criticized challenger |
| privileged-access-management | JumpCloud | 0% | 0% | 13 | accepted challenger |
| remote-monitoring-and-management | Atera | 30% | 3% | 59 | endorsed leader |
| remote-monitoring-and-management | NinjaOne | 26% | 3% | 60 | accepted challenger |
| remote-monitoring-and-management | Syncro | 19% | 4% | 55 | accepted challenger |
| remote-monitoring-and-management | Action1 | 15% | 3% | 29 | accepted challenger |
| remote-monitoring-and-management | Pulseway | 2% | 8% | 13 | accepted challenger |
| remote-monitoring-and-management | N-able N-sight | 2% | 9% | 11 | accepted challenger |
| remote-monitoring-and-management | Datto RMM | 2% | 39% | 23 | criticized challenger |
| remote-monitoring-and-management | ConnectWise RMM | 2% | 50% | 12 | criticized challenger |
| remote-monitoring-and-management | SuperOps | 0% | 0% | 20 | accepted challenger |
| remote-monitoring-and-management | ConnectWise Automate | 0% | 60% | 10 | criticized challenger |
| sase-platforms | Cloudflare One | 54% | 2% | 54 | endorsed leader |
| sase-platforms | Cato Networks | 12% | 9% | 32 | accepted challenger |
| sase-platforms | Check Point Harmony SASE | 6% | 19% | 26 | accepted challenger |
| sase-platforms | Fortinet FortiSASE | 6% | 25% | 36 | criticized challenger |
| sase-platforms | Cato SASE Cloud | 2% | 18% | 11 | accepted challenger |
| sase-platforms | Netskope One | 2% | 58% | 19 | criticized challenger |
| sase-platforms | Zscaler Zero Trust Exchange | 2% | 62% | 39 | criticized challenger |
| sase-platforms | NordLayer | 0% | 0% | 14 | accepted challenger |
| sase-platforms | Palo Alto Networks Prisma SASE | 0% | 88% | 16 | criticized challenger |
| sd-wan | Cisco Meraki SD-WAN | 40% | 19% | 57 | endorsed leader |
| sd-wan | Fortinet Secure SD-WAN | 31% | 6% | 63 | endorsed leader |
| sd-wan | Peplink | 10% | 5% | 22 | accepted challenger |
| sd-wan | Cisco Catalyst SD-WAN | 10% | 33% | 33 | criticized challenger |
| sd-wan | Ubiquiti UniFi | 2% | 18% | 11 | accepted challenger |
| sd-wan | Aryaka | 0% | 20% | 10 | accepted challenger |
| sd-wan | HPE Aruba EdgeConnect | 0% | 40% | 10 | criticized challenger |
| sd-wan | Versa Secure SD-WAN | 0% | 50% | 10 | criticized challenger |
| sd-wan | Palo Alto Networks Prisma SD-WAN | 0% | 56% | 16 | criticized challenger |
| sd-wan | VMware VeloCloud SD-WAN | 0% | 60% | 35 | criticized challenger |
| secrets-management | Doppler | 46% | 3% | 59 | endorsed leader |
| secrets-management | Infisical | 25% | 4% | 50 | accepted challenger |
| secrets-management | 1Password | 9% | 2% | 41 | accepted challenger |
| secrets-management | Bitwarden Secrets Manager | 7% | 0% | 35 | accepted challenger |
| secrets-management | HashiCorp Vault | 5% | 70% | 66 | criticized challenger |
| secrets-management | AWS Secrets Manager | 4% | 25% | 52 | criticized challenger |
| secrets-management | Azure Key Vault | 2% | 21% | 29 | accepted challenger |
| secrets-management | Akeyless | 0% | 9% | 11 | accepted challenger |
| secrets-management | OpenBao | 0% | 27% | 11 | criticized challenger |
| secrets-management | Google Secret Manager | 0% | 29% | 28 | criticized challenger |
| security-awareness-training | Hook Security | 34% | 0% | 38 | endorsed leader |
| security-awareness-training | KnowBe4 | 28% | 51% | 57 | criticized challenger |
| security-awareness-training | Wizer | 20% | 0% | 39 | accepted challenger |
| security-awareness-training | CanIPhish | 4% | 0% | 25 | accepted challenger |
| security-awareness-training | Huntress Managed Security Awareness Training | 2% | 0% | 39 | accepted challenger |
| security-awareness-training | EasyLlama | 2% | 8% | 12 | accepted challenger |
| security-awareness-training | Hoxhunt | 2% | 14% | 21 | accepted challenger |
| security-awareness-training | SoSafe | 0% | 10% | 10 | accepted challenger |
| security-awareness-training | Proofpoint ZenGuide | 0% | 53% | 15 | criticized challenger |
| siem-platforms | Blumira | 28% | 0% | 45 | accepted challenger |
| siem-platforms | Microsoft Sentinel | 28% | 16% | 62 | accepted challenger |
| siem-platforms | Wazuh | 17% | 22% | 49 | accepted challenger |
| siem-platforms | Sumo Logic | 7% | 7% | 15 | accepted challenger |
| siem-platforms | ManageEngine Log360 | 4% | 0% | 15 | accepted challenger |
| siem-platforms | Huntress Managed SIEM | 4% | 0% | 16 | accepted challenger |
| siem-platforms | Elastic Security | 4% | 16% | 32 | accepted challenger |
| siem-platforms | Huntress | 2% | 0% | 10 | accepted challenger |
| siem-platforms | Rapid7 InsightIDR | 0% | 9% | 11 | accepted challenger |
| siem-platforms | Datadog Cloud SIEM | 0% | 14% | 14 | accepted challenger |
| siem-platforms | Graylog | 0% | 33% | 12 | criticized challenger |
| siem-platforms | Splunk | 0% | 71% | 34 | criticized challenger |
| siem-platforms | IBM QRadar | 0% | 95% | 20 | criticized challenger |
| siem-platforms | Splunk Enterprise Security | 0% | 100% | 10 | criticized challenger |
| soar-platforms | Tines | 49% | 4% | 47 | endorsed leader |
| soar-platforms | Rapid7 InsightConnect | 7% | 5% | 19 | accepted challenger |
| soar-platforms | Splunk SOAR | 7% | 60% | 45 | criticized challenger |
| soar-platforms | Shuffle | 5% | 4% | 23 | accepted challenger |
| soar-platforms | Microsoft Sentinel | 5% | 19% | 21 | accepted challenger |
| soar-platforms | Torq | 2% | 30% | 23 | criticized challenger |
| soar-platforms | Swimlane | 0% | 50% | 16 | criticized challenger |
| soar-platforms | Cortex XSOAR | 0% | 77% | 39 | criticized challenger |
| soar-platforms | IBM QRadar SOAR | 0% | 80% | 10 | criticized challenger |
| software-composition-analysis | Trivy | 36% | 2% | 48 | endorsed leader |
| software-composition-analysis | Snyk Open Source | 33% | 4% | 50 | endorsed leader |
| software-composition-analysis | GitHub Dependabot | 5% | 12% | 17 | accepted challenger |
| software-composition-analysis | OWASP Dependency-Check | 5% | 32% | 31 | criticized challenger |
| software-composition-analysis | OSV-Scanner | 2% | 0% | 11 | accepted challenger |
| software-composition-analysis | Semgrep Supply Chain | 2% | 5% | 20 | accepted challenger |
| software-composition-analysis | Mend.io | 2% | 41% | 22 | criticized challenger |
| software-composition-analysis | FOSSA | 0% | 0% | 20 | accepted challenger |
| software-composition-analysis | Socket | 0% | 0% | 22 | accepted challenger |
| software-composition-analysis | Endor Labs | 0% | 33% | 12 | criticized challenger |
| software-composition-analysis | Sonatype Lifecycle | 0% | 73% | 11 | criticized challenger |
| software-composition-analysis | Black Duck | 0% | 80% | 20 | criticized challenger |
| source-control-hosting | GitHub | 78% | 14% | 73 | endorsed leader |
| source-control-hosting | GitLab | 13% | 16% | 69 | accepted challenger |
| source-control-hosting | Bitbucket | 7% | 18% | 67 | accepted challenger |
| source-control-hosting | Gitea | 2% | 22% | 37 | accepted challenger |
| source-control-hosting | Forgejo | 0% | 20% | 15 | accepted challenger |
| source-control-hosting | Azure DevOps | 0% | 26% | 19 | criticized challenger |
| source-control-hosting | AWS CodeCommit | 0% | 73% | 15 | criticized challenger |
| static-application-security-testing | Semgrep | 70% | 2% | 63 | endorsed leader |
| static-application-security-testing | Snyk Code | 9% | 6% | 36 | accepted challenger |
| static-application-security-testing | Aikido Security | 9% | 13% | 23 | accepted challenger |
| static-application-security-testing | Snyk | 4% | 10% | 10 | accepted challenger |
| static-application-security-testing | SonarQube | 2% | 21% | 52 | accepted challenger |
| static-application-security-testing | Codacy | 0% | 0% | 11 | accepted challenger |
| static-application-security-testing | Bandit | 0% | 6% | 16 | accepted challenger |
| static-application-security-testing | CodeAnt AI | 0% | 8% | 12 | accepted challenger |
| static-application-security-testing | CodeQL | 0% | 17% | 24 | accepted challenger |
| static-application-security-testing | Checkmarx One | 0% | 77% | 30 | criticized challenger |
| static-application-security-testing | Veracode | 0% | 78% | 23 | criticized challenger |
| static-application-security-testing | OpenText Fortify | 0% | 89% | 18 | criticized challenger |
| streaming-platforms | Redpanda | 30% | 0% | 45 | accepted challenger |
| streaming-platforms | Confluent Cloud | 20% | 21% | 47 | accepted challenger |
| streaming-platforms | Aiven for Apache Kafka | 11% | 8% | 24 | accepted challenger |
| streaming-platforms | Apache Kafka | 7% | 67% | 43 | criticized challenger |
| streaming-platforms | Amazon Kinesis Data Streams | 6% | 9% | 33 | accepted challenger |
| streaming-platforms | StreamYard | 4% | 0% | 14 | accepted challenger |
| streaming-platforms | Google Cloud Pub/Sub | 4% | 6% | 31 | accepted challenger |
| streaming-platforms | Apache Pulsar | 4% | 52% | 23 | criticized challenger |
| streaming-platforms | Azure Event Hubs | 2% | 13% | 15 | accepted challenger |
| streaming-platforms | RabbitMQ | 2% | 15% | 13 | accepted challenger |
| streaming-platforms | Amazon MSK | 0% | 20% | 30 | accepted challenger |
| third-party-risk-management | UpGuard | 44% | 5% | 58 | endorsed leader |
| third-party-risk-management | Vanta | 26% | 9% | 57 | accepted challenger |
| third-party-risk-management | Drata | 6% | 10% | 10 | accepted challenger |
| third-party-risk-management | Secureframe | 2% | 0% | 18 | accepted challenger |
| third-party-risk-management | Panorays | 2% | 20% | 20 | accepted challenger |
| third-party-risk-management | Venminder | 2% | 20% | 10 | accepted challenger |
| third-party-risk-management | Whistic | 0% | 0% | 13 | accepted challenger |
| third-party-risk-management | SecurityScorecard | 0% | 36% | 36 | criticized challenger |
| third-party-risk-management | Prevalent | 0% | 47% | 19 | criticized challenger |
| third-party-risk-management | Bitsight | 0% | 57% | 30 | criticized challenger |
| third-party-risk-management | OneTrust Third-Party Risk Management | 0% | 72% | 25 | criticized challenger |
| third-party-risk-management | ProcessUnity | 0% | 75% | 20 | criticized challenger |
| third-party-risk-management | Archer | 0% | 90% | 10 | criticized challenger |
| threat-intelligence-platforms | NordStellar | 19% | 7% | 27 | accepted challenger |
| threat-intelligence-platforms | MISP | 17% | 12% | 32 | accepted challenger |
| threat-intelligence-platforms | AlienVault OTX | 9% | 0% | 19 | accepted challenger |
| threat-intelligence-platforms | VirusTotal | 4% | 0% | 15 | accepted challenger |
| threat-intelligence-platforms | CrowdStrike Falcon | 4% | 18% | 11 | accepted challenger |
| threat-intelligence-platforms | OpenCTI | 4% | 32% | 19 | criticized challenger |
| threat-intelligence-platforms | ThreatConnect | 4% | 68% | 22 | criticized challenger |
| threat-intelligence-platforms | SOCRadar | 2% | 0% | 15 | accepted challenger |
| threat-intelligence-platforms | Abuse.ch | 2% | 0% | 15 | accepted challenger |
| threat-intelligence-platforms | Recorded Future | 2% | 67% | 33 | criticized challenger |
| threat-intelligence-platforms | GreyNoise | 0% | 4% | 24 | accepted challenger |
| threat-intelligence-platforms | Anomali | 0% | 64% | 11 | criticized challenger |
| threat-intelligence-platforms | Anomali ThreatStream | 0% | 67% | 12 | criticized challenger |
| unified-endpoint-management | Microsoft Intune | 40% | 20% | 59 | endorsed leader |
| unified-endpoint-management | Miradore | 28% | 3% | 37 | accepted challenger |
| unified-endpoint-management | JumpCloud | 9% | 0% | 28 | accepted challenger |
| unified-endpoint-management | ManageEngine Endpoint Central | 9% | 19% | 27 | accepted challenger |
| unified-endpoint-management | Hexnode UEM | 4% | 8% | 39 | accepted challenger |
| unified-endpoint-management | Scalefusion | 2% | 0% | 18 | accepted challenger |
| unified-endpoint-management | Mosyle | 0% | 0% | 15 | accepted challenger |
| unified-endpoint-management | NinjaOne | 0% | 0% | 29 | accepted challenger |
| unified-endpoint-management | Kandji | 0% | 0% | 14 | accepted challenger |
| unified-endpoint-management | Syncro | 0% | 0% | 13 | accepted challenger |
| unified-endpoint-management | Jamf | 0% | 18% | 39 | accepted challenger |
| unified-endpoint-management | IBM MaaS360 | 0% | 73% | 11 | criticized challenger |
| unified-endpoint-management | Omnissa Workspace ONE | 0% | 75% | 28 | criticized challenger |
| vector-databases | pgvector | 46% | 0% | 55 | endorsed leader |
| vector-databases | Qdrant | 30% | 0% | 66 | endorsed leader |
| vector-databases | Pinecone | 16% | 27% | 67 | criticized challenger |
| vector-databases | Weaviate | 4% | 24% | 63 | accepted challenger |
| vector-databases | Chroma | 4% | 24% | 33 | accepted challenger |
| vector-databases | LanceDB | 0% | 0% | 11 | accepted challenger |
| vector-databases | Milvus | 0% | 49% | 37 | criticized challenger |
| vulnerability-management-platforms | Intruder | 59% | 2% | 52 | endorsed leader |
| vulnerability-management-platforms | OpenVAS | 11% | 31% | 35 | criticized challenger |
| vulnerability-management-platforms | ManageEngine Vulnerability Manager Plus | 7% | 4% | 24 | accepted challenger |
| vulnerability-management-platforms | Tenable Vulnerability Management | 7% | 46% | 24 | criticized challenger |
| vulnerability-management-platforms | ESET Vulnerability & Patch Management | 2% | 5% | 19 | accepted challenger |
| vulnerability-management-platforms | Tenable Nessus | 2% | 31% | 26 | criticized challenger |
| vulnerability-management-platforms | Microsoft Defender Vulnerability Management | 0% | 11% | 18 | accepted challenger |
| vulnerability-management-platforms | Rapid7 InsightVM | 0% | 36% | 25 | criticized challenger |
| vulnerability-management-platforms | Qualys | 0% | 50% | 22 | criticized challenger |
| vulnerability-management-platforms | Tenable | 0% | 50% | 18 | criticized challenger |
| vulnerability-management-platforms | Qualys VMDR | 0% | 67% | 21 | criticized challenger |
| vulnerability-management-platforms | Rapid7 | 0% | 70% | 10 | criticized challenger |
| web-application-firewalls | Cloudflare | 73% | 6% | 47 | endorsed leader |
| web-application-firewalls | Cloudflare WAF | 20% | 0% | 19 | accepted challenger |
| web-application-firewalls | Sucuri | 5% | 5% | 38 | accepted challenger |
| web-application-firewalls | Azure WAF | 0% | 18% | 11 | accepted challenger |
| web-application-firewalls | AWS WAF | 0% | 22% | 41 | accepted challenger |
| web-application-firewalls | ModSecurity | 0% | 60% | 15 | criticized challenger |
| web-application-firewalls | Imperva | 0% | 67% | 30 | criticized challenger |
| web-application-firewalls | Akamai | 0% | 70% | 20 | criticized challenger |
| workflow-orchestration | Prefect | 23% | 10% | 42 | accepted challenger |
| workflow-orchestration | Make | 17% | 2% | 40 | accepted challenger |
| workflow-orchestration | Zapier | 17% | 22% | 50 | accepted challenger |
| workflow-orchestration | n8n | 15% | 5% | 44 | accepted challenger |
| workflow-orchestration | Dagster | 8% | 14% | 36 | accepted challenger |
| workflow-orchestration | Temporal | 4% | 56% | 18 | criticized challenger |
| workflow-orchestration | Apache Airflow | 2% | 62% | 50 | criticized challenger |
| workflow-orchestration | Microsoft Power Automate | 0% | 0% | 14 | accepted challenger |
| workflow-orchestration | Argo Workflows | 0% | 64% | 11 | criticized challenger |
| workflow-orchestration | Camunda | 0% | 83% | 12 | criticized challenger |
| workforce-identity-and-sso | JumpCloud | 48% | 2% | 60 | endorsed leader |
| workforce-identity-and-sso | Microsoft Entra ID | 35% | 6% | 64 | endorsed leader |
| workforce-identity-and-sso | Okta | 6% | 44% | 41 | criticized challenger |
| workforce-identity-and-sso | miniOrange | 2% | 5% | 20 | accepted challenger |
| workforce-identity-and-sso | OneLogin | 2% | 6% | 36 | accepted challenger |
| workforce-identity-and-sso | Okta Workforce Identity | 0% | 72% | 18 | criticized challenger |
| workforce-identity-and-sso | Ping Identity | 0% | 75% | 16 | criticized challenger |
| zero-trust-network-access | Cloudflare One | 51% | 0% | 43 | endorsed leader |
| zero-trust-network-access | Twingate | 31% | 5% | 55 | endorsed leader |
| zero-trust-network-access | Cloudflare Access | 9% | 0% | 10 | accepted challenger |
| zero-trust-network-access | Tailscale | 4% | 2% | 42 | accepted challenger |
| zero-trust-network-access | OpenVPN CloudConnexa | 4% | 7% | 14 | accepted challenger |
| zero-trust-network-access | Check Point Harmony SASE | 0% | 6% | 34 | accepted challenger |
| zero-trust-network-access | NordLayer | 0% | 8% | 13 | accepted challenger |
| zero-trust-network-access | Zscaler Private Access | 0% | 69% | 16 | criticized challenger |
| zero-trust-network-access | Zscaler | 0% | 92% | 12 | criticized challenger |

## Treatment of lab-affiliated products by model

Self-preference is only measurable with a control group: how the lab's own model treats its products compared with how every other model treats the same products. Anthropic, OpenAI, Google have no products in the covered categories with enough labels to measure, so nothing is claimed about them.

## Discontinued products recommended

None in this run.

## Normalization

Unresolved, 840 labels counted under the raw name, for human review:

AB Tasty in feature-flags (1), ADP in compliance-automation (1), APM by Corvus Logic in application-performance-monitoring (1), AT&T AlienVault (USM Anywhere / OSSIM) in siem-platforms (1), AT&T SD-Branch / AT&T Connect in sd-wan (1), AWS ALB in api-gateways (1), AWS API Gateway / GCP API Gateway in api-gateways (1), AWS AppConfig in feature-flags (1), AWS Application Load Balancer (ALB) in api-gateways (1), AWS Billing and Cost Management / Cost Explorer in cloud-cost-management (1), AWS Config in cloud-security-posture-management (1), AWS Cost Explorer + AWS Budgets + CUR/FOCUS exports in cloud-cost-management (1), AWS Cost Explorer + Budgets + Cost Anomaly in cloud-cost-management (1), AWS Cost Explorer + Budgets/Trusted Advisor in cloud-cost-management (1), AWS EC2 in cloud-hosting (1), AWS ECS with Fargate in managed-kubernetes-platforms (1), AWS EKS with Fargate / EKS Auto in managed-kubernetes-platforms (1), AWS Lambda + API Gateway in cloud-hosting (1), AWS RDS / Amazon Aurora Serverless in managed-relational-databases (1), AWS SAM in api-gateways (1), AWS SNS/SQS in streaming-platforms (1), AWS Security Hub / Amazon ECR Scan in container-and-kubernetes-security (1), AWS Security Lake / OpenSearch architectures in siem-platforms (1), AWS Shield Advanced / Amazon WAF in web-application-firewalls (1), AWS Workspaces in cloud-hosting (1), AWS/Azure/GCP Native Tools in cloud-cost-management (1), AWS/Azure/GCP Secrets Manager in secrets-management (1), AWS/GCP/Azure Secrets Manager in secrets-management (1), AWS: Security Hub + Config + CloudTrail in cloud-security-posture-management (1), Accelevents in streaming-platforms (1), AccuWeb Hosting in cloud-hosting (1), Ace Cloud Hosting in cloud-hosting (1), Acronis Cyber Protect / Cyber Protect Cloud in backup-and-disaster-recovery (1), Acronis Cyber Protect Backup in backup-and-disaster-recovery (1), Actian Avalanche in data-warehouses (1), Active Directory Federation Services in multi-factor-authentication (1), ActiveFence in threat-intelligence-platforms (1), Activiti in workflow-orchestration (1), Addigy in unified-endpoint-management (1), Airmeet in streaming-platforms (1), Akamai/Shadowbox in web-application-firewalls (1), Alertmanager in infrastructure-monitoring (1), Alibaba Cloud Kubernetes (ACK) in managed-kubernetes-platforms (1), AlienVault (formerly Open Threat Exchange) / AT&T Cybersecurity in siem-platforms (1), Alooma in etl-and-elt (1), Altair in ml-platforms (1), Amazon EC2 in cloud-hosting (1), Amazon ECR scanning in container-and-kubernetes-security (1), Amazon Kiro in ai-coding-assistants (1), Amazon Lightsail in object-storage (1), Amazon RDS or Aurora in managed-relational-databases (1), Amazon S3 Glacier in backup-and-disaster-recovery (1), Amazon SageMaker Autopilot in ml-platforms (1), Amazon SageMaker Studio in ml-platforms (1), Ampersand in workflow-orchestration (1), Anchor in cloud-cost-management (1), Aomei Backupper Free in backup-and-disaster-recovery (1), Apache Accumulo in nosql-databases (1), Apache Spark MLlib in ml-platforms (1), Apache ZooKeeper in streaming-platforms (1), Apiman in api-management (1), AppConfig in feature-flags (1), AppThreat/sast-scan in static-application-security-testing (1), Appcircle in ci-cd-platforms (1), Apple Business in unified-endpoint-management (1), Arrk in sd-wan (1), Aruba Instant On in sd-wan (1), AssetManagement.Global (AMG) in it-asset-management (1), Asus in next-generation-firewalls (1), Atlassian Statuspage in infrastructure-monitoring (1), Atomicwork in it-service-management (1), Attacker in attack-surface-management (1), AutoGluon in ml-platforms (1), Avast Essential Business Security in unified-endpoint-management (1), Avast Small Business Cybersecurity in endpoint-protection (1), AvePoint in backup-and-disaster-recovery (1), Axcient x360 in backup-and-disaster-recovery (1), Azure AD B2B in customer-identity-and-access-management (1), Azure AD B2B/B2C in workforce-identity-and-sso (1), Azure Application Gateway in web-application-firewalls (1), Azure Cognitive Services in ml-platforms (1), Azure DB in managed-relational-databases (1), Azure Dashboard in cloud-cost-management (1), Azure Feature Management in feature-flags (1), Azure Firewall + custom ZTNA in zero-trust-network-access (1), Azure Load Balancer / Application Gateway in api-gateways (1), Azure Log Analytics in log-management (1), Azure Monitor Logs in log-management (1), Azure SQL Database / Azure Database for Postgres/MySQL in managed-relational-databases (1), Azure Stream Analytics / Service Bus in streaming-platforms (1), Azure Synapse Analytics / Microsoft Fabric warehouse in data-warehouses (1), Azure VMs in cloud-hosting (1), Azure/GCP vaults in secrets-management (1), BMC Track‑It! in it-asset-management (1), Backblaze Personal Backup in backup-and-disaster-recovery (1), Backup Exec in backup-and-disaster-recovery (1), Backup360 in backup-and-disaster-recovery (1), Backupify / Datto SaaS Protection in backup-and-disaster-recovery (1), Banana.dev in ml-platforms (1), BarCloud in it-asset-management (1), Bare-Bones Elastic Stack (ELK) / OpenSearch in log-management (1), Barracuda 360 in web-application-firewalls (1), Barracuda Cloud-to-Cloud in backup-and-disaster-recovery (1), Barracuda WAF / WAF-as-a-Service in web-application-firewalls (1), Barracuda physical appliances in web-application-firewalls (1), Base44 in ai-coding-assistants (1), Basic Cron Jobs / GitHub Actions in workflow-orchestration (1), Benchmark Gensuite in incident-management-and-on-call (1), Better Auth in customer-identity-and-access-management (1), BeyondTrust Password Safe in privileged-access-management (1), BeyondTrust Privileged Remote Access in privileged-access-management (1), Bigleaf Networks in sd-wan (1), Bishop Fox ASM in attack-surface-management (1), BitSentry in vulnerability-management-platforms (1), Bitdefender + Managed Service in endpoint-detection-and-response (1), Bitdefender Managed XDR in extended-detection-and-response (1), Bitline in third-party-risk-management (1), Black Duck Binary Analysis (formerly Protecode) in software-composition-analysis (1), Blackpoint in managed-detection-and-response (1), Blacksmith in ci-cd-platforms (1), Blobr in api-management (1), Blocklist.de in threat-intelligence-platforms (1), Bob's Business in security-awareness-training (1), Bolt in ai-coding-assistants (1), Bolt.new in ai-coding-assistants (1), Bonita in workflow-orchestration (1), Botnet Security in attack-surface-management (1), BreachRadar in vulnerability-management-platforms (1), Breachsense in threat-intelligence-platforms (1), Broadcom (Symantec) Secure Access in zero-trust-network-access (1), Broadcom / Symantec SASE in sase-platforms (1), Broadcom / Symantec SSE / SASE in sase-platforms (1), Broadcom Privileged Identity Management in secrets-management (1), Broadcom Symantec Endpoint Protection (SEP) in endpoint-protection (1), Budget Security in penetration-testing-as-a-service (1), Bunny Shield in web-application-firewalls (1), C1Risk in grc-platforms (1), C3X in cloud-cost-management (1), CAST Highlight in software-composition-analysis (1), CIRCL OSINT feed in threat-intelligence-platforms (1), CISA in third-party-risk-management (1), CISA Automated Indicator Sharing/AIS in threat-intelligence-platforms (1), CISA Cyber Hygiene Services in threat-intelligence-platforms (1), CISA Known Exploited Vulnerabilities (KEV) in threat-intelligence-platforms (1), CISA’s AIS in threat-intelligence-platforms (1), CLOUD TOGGLE in cloud-cost-management (1), CacheGuard-OS in web-application-firewalls (1), Carbonite Cloud-to-Cloud in backup-and-disaster-recovery (1), Castr in streaming-platforms (1), Cato Networks Network Firewall in next-generation-firewalls (1), Central Logging in log-management (1), Centrify in privileged-access-management (1), CentrixNodes in ddos-protection (1), Chargebee in cloud-cost-management (1), Check Point CloudGuard WAF in web-application-firewalls (1), Check Point Endpoint Security (Harmony Endpoint) in endpoint-protection (1), Check Point Infinity External Risk Management in attack-surface-management (1), Check Point WAF (formerly CloudGuard WAF) in web-application-firewalls (1), Check Point's Quantum Spark in next-generation-firewalls (1), Checkmarx/Mend-style enterprise offerings in software-composition-analysis (1), Checoscan in container-and-kubernetes-security (1), Chef Automate in infrastructure-as-code (1), Cherwell ITAM in it-asset-management (1), Cisco ASA 5505/5506 in next-generation-firewalls (1), Cisco ASA Series in next-generation-firewalls (1), Cisco Firepower 1000 Series in next-generation-firewalls (1), Cisco Firepower 1010 in next-generation-firewalls (1), Cisco Firepower Virtual (FMCv) in next-generation-firewalls (1), Cisco Firepower/FTD in next-generation-firewalls (1), Cisco Meraki MX/Firepower 1000 in next-generation-firewalls (1), Cisco Meraki vMX in next-generation-firewalls (1), Cisco Secure Edge in sase-platforms (1), Cisco Secure Firewall 220 in next-generation-firewalls (1), Cisco Secure Firewall Small Business Edition in next-generation-firewalls (1), Cisco Umbrella DLP in data-loss-prevention (1), Cisco/XDR-style enterprise platforms in extended-detection-and-response (1), Citrix NetScaler MPX WAF in web-application-firewalls (1), ClearPhish in security-awareness-training (1), Cloud CLI + Git in infrastructure-as-code (1), Cloud Provider IAM (Google Cloud IAM / AWS IAM) in identity-governance (1), Cloud SEK in threat-intelligence-platforms (1), Cloud-Native Options (AWS/GCP/Azure Secrets Managers) in secrets-management (1), Cloud-init in infrastructure-as-code (1), Cloud-native managers in secrets-management (1), CloudAMQP in streaming-platforms (1), CloudAdmin in cloud-cost-management (1), CloudBerry in backup-and-disaster-recovery (1), CloudKarafka in streaming-platforms (1), CloudMatos in cloud-native-application-protection (1), CloudToggle in cloud-cost-management (1), Cloudflare Application Services (CDN) in content-delivery-networks (1), Cloudflare Bot Management in web-application-firewalls (1), Cloudflare Integrated DLP in data-loss-prevention (1), Cloudflare Tunnel (for internal apps) in zero-trust-network-access (1), Cloudflare WAF + Super Bot Fight Mode in web-application-firewalls (1), Cloudflare Workers/Workers KV in api-gateways (1), Cloudflare's Flagship in feature-flags (1), Cobalt Strike ASM in attack-surface-management (1), CodeLlama in ai-coding-assistants (1), Codeship in ci-cd-platforms (1), Coding.net in source-control-hosting (1), ComplianceStack in compliance-automation (1), Comply in compliance-automation (1), ComplyAdvantage in compliance-automation (1), ComplySpace in grc-platforms (1), ComplyUp in compliance-automation (1), Confetti in streaming-platforms (1), Configu in feature-flags (1), Confluence in grc-platforms (1), ConnectWise PSA in it-asset-management (1), Continue.dev with Ollama in ai-coding-assistants (1), Continuum GRC in grc-platforms (1), Convex in nosql-databases (1), Conveyor in third-party-risk-management (1), Copado in ci-cd-platforms (1), CoreDNA in workflow-orchestration (1), Cority in incident-management-and-on-call (1), Cove in backup-and-disaster-recovery (1), CrowdStrike Falcon Go / small-business offerings in endpoint-protection (1), Custom scripts / “just put scripts in Git” in infrastructure-as-code (1), CyberArk Covisix in soar-platforms (1), CyberCure Advanced Cyber Threat Intelligence in threat-intelligence-platforms (1), CyberGRC in grc-platforms (1), CyberGRi in managed-detection-and-response (1), CyberGrantsAlliance in penetration-testing-as-a-service (1), CyberHat in attack-surface-management (1), Cybersaint in grc-platforms (1), Cytellix in extended-detection-and-response (1), D&B Risk Analytics in third-party-risk-management (1), Database Mart in managed-relational-databases (1), Databricks SQL / lakehouse-style platforms in data-warehouses (1), Datadog Cloud Cost Management in cloud-cost-management (1), Datavail in managed-relational-databases (1), Datto / DRaaS tools in backup-and-disaster-recovery (1), Datto ALTO / SIRIS in backup-and-disaster-recovery (1), Datto RMM / Kaseya-related platforms in remote-monitoring-and-management (1), Datto Secure Edge in sase-platforms (1), Defendify MDR in extended-detection-and-response (1), Defer.ai in vulnerability-management-platforms (1), Definite in data-warehouses (1), Delinea Privilege Manager in privileged-access-management (1), Dell SonicWall WAF in web-application-firewalls (1), Descartes in third-party-risk-management (1), Devolutions Password Hub (Free) in privileged-access-management (1), Devolutions Server / Password Hub in privileged-access-management (1), Digital Guardian Endpoint DLP in data-loss-prevention (1), DigitalOcean CDN in content-delivery-networks (1), DigitalOcean Droplets in cloud-hosting (1), Docker Hub in container-and-kubernetes-security (1), Docker Swarm in infrastructure-as-code (1), DomainRacer in cloud-hosting (1), Dropbox Backup in backup-and-disaster-recovery (1), Druva InSync / Phoenix in backup-and-disaster-recovery (1), DuckDB / Postgres + BI tools in data-warehouses (1), EasyDMARC in email-security (1), Eesel in it-service-management (1), Elastic Beanstalk in managed-kubernetes-platforms (1), Elastic Cloud SIEM in log-management (1), Elastic SIEM/XDR in extended-detection-and-response (1), Emsisoft in endpoint-protection (1), Endgame in managed-detection-and-response (1), Envoy-based solutions in api-gateways (1), Envoyer in ci-cd-platforms (1), Errbit in error-and-crash-monitoring (1), Eventleaf in streaming-platforms (1), Exchange Online Protection in email-security (1), Exim in email-security (1), Exium in sase-platforms (1), Exoscale Simple Object Storage in object-storage (1), F5 Distributed Cloud DDoS in ddos-protection (1), F5 Essential App Protect in web-application-firewalls (1), F5 Networks in web-application-firewalls (1), F5 Silverline in ddos-protection (1), FIDO2 in multi-factor-authentication (1), FIDO2 security keys in multi-factor-authentication (1), Facebook in streaming-platforms (1), Fair TPRM or LT-VRM in third-party-risk-management (1), Falcon Intelligence in threat-intelligence-platforms (1), FalconFeeds in threat-intelligence-platforms (1), Faraday in attack-surface-management (1), Fastly Web Application Security in web-application-firewalls (1), Feast in ml-platforms (1), Fencer in cloud-security-posture-management (1), FinOpsly in cloud-cost-management (1), FireEye iSight in threat-intelligence-platforms (1), Firebase Performance Monitoring in error-and-crash-monitoring (1), Firewalla in next-generation-firewalls (1), Firewalla Gold Pro or Gold Plus in next-generation-firewalls (1), Flipper in feature-flags (1), Fluence in cloud-hosting (1), Forcepoint ZTNA in zero-trust-network-access (1), FortiGate 30G/60F in next-generation-firewalls (1), FortiGate 40F/60F in next-generation-firewalls (1), FortiWeb in web-application-firewalls (1), Fortinet FortiEDR / FortiXDR in extended-detection-and-response (1), Fortinet FortiGate 70G in next-generation-firewalls (1), Fortinet FortiGate Virtual Appliance in next-generation-firewalls (1), Fortinet’s complimentary training offerings in security-awareness-training (1), FoxIDs in workforce-identity-and-sso (1), Freenom in cloud-hosting (1), Front in it-service-management (1), Fugue in cloud-security-posture-management (1), Funnel in etl-and-elt (1), GCP native tools in cloud-cost-management (1), GCloud in managed-kubernetes-platforms (1), GitLab Auto-DevSecOps in software-composition-analysis (1), Gitbucket in source-control-hosting (1), Glasstrail in attack-surface-management (1), GoAccess in log-management (1), Golioth in infrastructure-as-code (1), Google AI / Vertex AI in ml-platforms (1), Google AutoML Tables in ml-platforms (1), Google Cloud AI / Vertex AI in ml-platforms (1), Google Cloud AutoML in ml-platforms (1), Google Cloud Data Fusion in etl-and-elt (1), Google Colab / Vertex AI Workbench in ml-platforms (1), Google Gemini Flash in ml-platforms (1), Google Identity-Aware Proxy / Google Workspace Advanced Protection in multi-factor-authentication (1), Google Prompt in multi-factor-authentication (1), Google Securing Assets (GCP) in container-and-kubernetes-security (1), Google Security in email-security (1), Google Sheets in it-asset-management (1), Google Vault in email-security (1), Google Vertex AI / AI Platform in ml-platforms (1), Google Vertex AI AutoML in ml-platforms (1), Google Workspace Native DLP in data-loss-prevention (1), Google's managed Kafka in streaming-platforms (1), Grafana Cloud / OpenTelemetry stack in application-performance-monitoring (1), Grafana with OpenTelemetry in application-performance-monitoring (1), Graphite Note in ml-platforms (1), GreyNoise Community in threat-intelligence-platforms (1), Grip (by Auth0) in identity-governance (1), Groove in it-service-management (1), H2O-3 in ml-platforms (1), HPE Aruba / Juniper (formerly Silver Peak / VeloCloud-style offerings in sd-wan (1), Hackal in attack-surface-management (1), HackerOne ASM in attack-surface-management (1), Hadoop in etl-and-elt (1), Halo PSA in it-asset-management (1), HaloPSA in it-service-management (1), Harmony in it-asset-management (1), HaveIBeenPwned in threat-intelligence-platforms (1), Headscale in zero-trust-network-access (1), Heimdal PAM in privileged-access-management (1), Hexiosec in attack-surface-management (1), HeyOnCall in incident-management-and-on-call (1), Hologree in cloud-cost-management (1), HookPhish in security-awareness-training (1), Hopin in streaming-platforms (1), Horizon3 NodeZero in attack-surface-management (1), Hostwinds in cloud-hosting (1), Hugging Face Spaces in ml-platforms (1), Huma in compliance-automation (1), Humaans in grc-platforms (1), Huntress Managed SIEM / MDR in siem-platforms (1), Hypersky in third-party-risk-management (1), IBM ACF2 in secrets-management (1), IBM Identity Platforms in identity-governance (1), IBM Security Identity Management (ISM) in identity-governance (1), IBM Security Verify Privilege (and IBM DevOps Vault) in privileged-access-management (1), IBM Security Verify Privilege Vault in privileged-access-management (1), IBM Threat Intelligence in threat-intelligence-platforms (1), IBM Watson / watsonx in ml-platforms (1), IPFS in object-storage (1), ISNetworld in compliance-automation (1), IT Glue in it-asset-management (1), Identiqa WebShield in web-application-firewalls (1), ImmuniWeb Discovery in attack-surface-management (1), Imperva/App Protect in ddos-protection (1), Improvado in etl-and-elt (1), Infisec in secrets-management (1), Infomaniak K8s in managed-kubernetes-platforms (1), Instabug in error-and-crash-monitoring (1), IntelFinder in threat-intelligence-platforms (1), Intrig in penetration-testing-as-a-service (1), InvenioIT in backup-and-disaster-recovery (1), Involve in it-asset-management (1), Ironclad in data-loss-prevention (1), Ivanti Neurons / Ivanti patching stacks in patch-management (1), JMP (by SAS) in ml-platforms (1), Jamf Protect in endpoint-protection (1), Jimber in sase-platforms (1), Jira Service Management + asset add-ons in it-asset-management (1), Jit.io in static-application-security-testing (1), Jotform in workflow-orchestration (1), Juniper vMX/NFX in sd-wan (1), K7 Computing in managed-detection-and-response (1), KServe in ml-platforms (1), Kaseya VSA or Datto RMM in remote-monitoring-and-management (1), Kaspersky Small Office Security in endpoint-protection (1), Keel in grc-platforms (1), Keeper Secrets Manager / Keeper Connect in privileged-access-management (1), Kintaps in attack-surface-management (1), Kiuwan in static-application-security-testing (1), Klaay in compliance-automation (1), KnowBe4 PhishER in email-security (1), Krasan in grc-platforms (1), Kronos in managed-detection-and-response (1), Kuberns in cloud-hosting (1), LMCache in llm-gateways-and-observability (1), Lago in llm-gateways-and-observability (1), LastDash in privileged-access-management (1), LastPass Authenticator in multi-factor-authentication (1), Legacy NetBox in remote-monitoring-and-management (1), Libraries.io in software-composition-analysis (1), LicenseScanner in software-composition-analysis (1), Lightning AI in ml-platforms (1), Lightspin in cloud-native-application-protection (1), Limelight Networks / Verizon EdgeCast in content-delivery-networks (1), LiveAgent in incident-management-and-on-call (1), LogMonitor in log-management (1), Logfire in error-and-crash-monitoring (1), Logflare in infrastructure-monitoring (1), Logging Made Easy (LME) by CISA in log-management (1), Logit.io in log-management (1), Looker Studio in data-warehouses (1), Lovable in ai-coding-assistants (1), Loveable in ai-coding-assistants (1), MDT (Microsoft Deployment Toolkit) in patch-management (1), MLflow + open-source serving in ml-platforms (1), MailEnable in email-security (1), Mailgun in email-security (1), MaintainX in it-asset-management (1), Maltiverse in threat-intelligence-platforms (1), Malwarebytes for Business in endpoint-protection (1), Mammoth Analytics in workflow-orchestration (1), ManageEngine AD Manager Plus in identity-governance (1), ManageEngine AD360 / ADManager Plus in identity-governance (1), ManageEngine DataSecurity Plus in data-loss-prevention (1), ManageEngine Endpoint Central / MDM Plus in unified-endpoint-management (1), ManageEngine SecurityManager Plus in siem-platforms (1), ManageEngine's Browser Security Plus in email-security (1), Manual Tracking (Notion/Excel) in grc-platforms (1), MariaDB in managed-relational-databases (1), MaxCDN in content-delivery-networks (1), McAfee Endpoint DLP in data-loss-prevention (1), McAfee Home in endpoint-protection (1), McAfee Personal in endpoint-protection (1), McAfee ePO in siem-platforms (1), McAfee/McAfee MVISION in cloud-security-posture-management (1), Medianova CDN in content-delivery-networks (1), Mendel in managed-detection-and-response (1), Metaplane in etl-and-elt (1), Metomic in data-loss-prevention (1), MicroK8s in managed-kubernetes-platforms (1), Microsoft 365 Copilot for Business in ai-coding-assistants (1), Microsoft 365 E5 / Defender Bundle in sase-platforms (1), Microsoft 365 Exchange Online Protection (EOP) in email-security (1), Microsoft Azure Free Trial in ml-platforms (1), Microsoft Copilot Studio in ml-platforms (1), Microsoft Defender Suite for Microsoft 365 Business Premium in endpoint-detection-and-response (1), Microsoft Defender XDR / Defender Suite for Business Premium in extended-detection-and-response (1), Microsoft Defender for Cloud Apps / Endpoint P2 in managed-detection-and-response (1), Microsoft Defender for Cloud with Sentinel in vulnerability-management-platforms (1), Microsoft Defender for Endpoint E5 in endpoint-protection (1), Microsoft Defender for Endpoint/Business in extended-detection-and-response (1), Microsoft Defender for Identity / Entra Permissions Management in privileged-access-management (1), Microsoft Defender threat intel in threat-intelligence-platforms (1), Microsoft Dynamics 365 Governance in third-party-risk-management (1), Microsoft Entra / Azure Active Directory-style service CIAM in customer-identity-and-access-management (1), Microsoft Entra External Identities in zero-trust-network-access (1), Microsoft Entra ID + Conditional Access in zero-trust-network-access (1), Microsoft Entra ID with Intune in zero-trust-network-access (1), Microsoft Entra security defaults + Microsoft Authenticator in multi-factor-authentication (1), Microsoft Security Awareness in security-awareness-training (1), Microsoft Sentinel / Defender Fusion in soar-platforms (1), Microsoft Teams with the built-in ticketing app in it-service-management (1), Microsoft built-ins in threat-intelligence-platforms (1), Microsoft-centric options in managed-detection-and-response (1), Mimir/Prometheus in infrastructure-monitoring (1), MiniMax in llm-gateways-and-observability (1), Mist in sase-platforms (1), Mitratech Prevalent / VendorINSIGHT in third-party-risk-management (1), ModSecurity with OWASP CRS in web-application-firewalls (1), Mojo Helpdesk in it-service-management (1), MongooseIM in nosql-databases (1), Monoscope in error-and-crash-monitoring (1), Moonshot AI in llm-gateways-and-observability (1), MotherDuck/Definite in data-warehouses (1), Mozilla Firefox in business-password-managers (1), Mozy in backup-and-disaster-recovery (1), Muster in penetration-testing-as-a-service (1), Muvi Live in streaming-platforms (1), Mux in content-delivery-networks (1), Mux Video in streaming-platforms (1), MyMonitor365 in infrastructure-monitoring (1), N-able Mail Assure in email-security (1), NAVEX Global GRC in grc-platforms (1), NIST/CISA Resources in security-awareness-training (1), NX in ci-cd-platforms (1), Native Windows Updates / macOS Updates in patch-management (1), Netgate / pfSense in next-generation-firewalls (1), Netgate 1100 in next-generation-firewalls (1), Netlify / Vercel Edge in content-delivery-networks (1), Netsurion in siem-platforms (1), Netwrix 1Secure in data-loss-prevention (1), Netwrix Directory Manager in identity-governance (1), Nikto in vulnerability-management-platforms (1), Nimblr in security-awareness-training (1), Nmap + script engine in attack-surface-management (1), Nokia SR OS in sd-wan (1), Noloco in it-asset-management (1), Nortal in ci-cd-platforms (1), Norton 360 in endpoint-protection (1), Norton Personal in endpoint-protection (1), Notion in grc-platforms (1), Notion databases in managed-relational-databases (1), OBS in streaming-platforms (1), OVH Object Storage in object-storage (1), OVHcloud Managed Kubernetes in managed-kubernetes-platforms (1), OVHcloud Managed Rancher in managed-kubernetes-platforms (1), ObservIQ in infrastructure-monitoring (1), Ofox in llm-gateways-and-observability (1), Okta B2B in identity-governance (1), Okta Workflows / OIA in identity-governance (1), On-Premises Microsoft Active Directory (AD) in workforce-identity-and-sso (1), OneTrust Tech Risk & Compliance in compliance-automation (1), Open Systems in sase-platforms (1), Open-source LLMs (self-hosted) in ai-coding-assistants (1), Open-source linters / language-specific analyzers in static-application-security-testing (1), Open-source stack in penetration-testing-as-a-service (1), OpenAI/Anthropic APIs in ml-platforms (1), OpenAppSec (Community Edition) in web-application-firewalls (1), OpenOTP/RCDevs in multi-factor-authentication (1), OpenOps in cloud-cost-management (1), OpenText SMAX in it-service-management (1), Opengrep in static-application-security-testing (1), Opentext/Micro Focus in incident-management-and-on-call (1), Optimal IdM's OptimalCloud in identity-governance (1), Oracle Data Integrator (ODI) / Oracle Warehouse Builder in etl-and-elt (1), Oracle Machine Learning (OML) in ml-platforms (1), Oracle MySQL HeatWave in managed-relational-databases (1), Oracle RDS / Oracle Autonomous Database in managed-relational-databases (1), Oracle Sentinel in siem-platforms (1), Oracle-managed offerings in managed-relational-databases (1), Origin by Cursor in source-control-hosting (1), Otoroshi in api-gateways (1), OutSystems in incident-management-and-on-call (1), PDQ Connect/Detect in vulnerability-management-platforms (1), PDQ Deploy & Patch in patch-management (1), PDQ Inventory/Deploy in vulnerability-management-platforms (1), Paddle in cloud-cost-management (1), Pagerly in incident-management-and-on-call (1), Palo Alto GlobalProtect (ZTNA mode) in zero-trust-network-access (1), Palo Alto Networks PA-400 in next-generation-firewalls (1), Palo Alto Networks PA-400/440 Series in next-generation-firewalls (1), Palo Alto Networks Prisma for Business in data-loss-prevention (1), Palo Alto PA-200/PA-220 in next-generation-firewalls (1), Palo Alto PA-220 in next-generation-firewalls (1), Palo Alto PA-400 in next-generation-firewalls (1), Palo Alto PA-400 Series / Prisma Access in next-generation-firewalls (1), Palo Alto PA-410 in next-generation-firewalls (1), Palo Alto PA-501 in next-generation-firewalls (1), Palo Alto VMs in web-application-firewalls (1), Panther in siem-platforms (1), Parameter in penetration-testing-as-a-service (1), Patchman in patch-management (1), Paubox in email-security (1), Paycor in compliance-automation (1), Pentest People in penetration-testing-as-a-service (1), Perch in siem-platforms (1), Percona in managed-relational-databases (1), Pexo in backup-and-disaster-recovery (1), PhishDrills in security-awareness-training (1), PlanetScale/Vitess in managed-relational-databases (1), PocketBase in customer-identity-and-access-management (1), Port in incident-management-and-on-call (1), Porter in ci-cd-platforms (1), Postfix in email-security (1), PostgreSQL + BI tool in data-warehouses (1), PostgreSQL + columnar extension (e.g., Citus, TimescaleDB) in data-warehouses (1), Postmark in email-security (1), Power BI in ml-platforms (1), Power Query (via Excel or Power BI) in etl-and-elt (1), Powerpipe in cloud-security-posture-management (1), Praetorian Chariot in attack-surface-management (1), Presto in data-warehouses (1), Prevalent Vendor Threat Monitor in third-party-risk-management (1), Prevalon in third-party-risk-management (1), Procurify in third-party-risk-management (1), Project Discovery (Nuclei & Subfinder) in attack-surface-management (1), Proofpoint Essentials / Proofpoint 365 Total Protection in email-security (1), Proofpoint Threat Response in soar-platforms (1), Protectli Vault in next-generation-firewalls (1), Proxmox Backup Server in backup-and-disaster-recovery (1), PureSecurity in cloud-native-application-protection (1), Pydantic Logfire in error-and-crash-monitoring (1), Pyrra in threat-intelligence-platforms (1), Python scripts with libraries in etl-and-elt (1), Qualys Community Edition / FreeScan in vulnerability-management-platforms (1), Qualys Free Scanner in vulnerability-management-platforms (1), Qualys Small Business in vulnerability-management-platforms (1), Qubby in it-asset-management (1), Qwak in ml-platforms (1), Qwen in llm-gateways-and-observability (1), RADICL in managed-detection-and-response (1), Radware Bot Manager in web-application-firewalls (1), Raff in streaming-platforms (1), Rapid7 InsightIDR/InsightConnect in soar-platforms (1), Rapid7 InsightVM / InsightCloudSec exposure features in attack-surface-management (1), Rapid7 InsightVM / Rapid7 Command in vulnerability-management-platforms (1), RapidAPI Hub in api-management (1), Refresh in it-asset-management (1), Request Tracker (RT) in it-service-management (1), Risk Cognizance in grc-platforms (1), RiskIQ PassiveTotal in threat-intelligence-platforms (1), Riverside.fm in streaming-platforms (1), Rivet in llm-gateways-and-observability (1), Roboflow in ml-platforms (1), RocketMQ in streaming-platforms (1), RunCloud in cloud-hosting (1), SAP API Management in api-gateways (1), SAP Ariba in third-party-risk-management (1), SAP Asset Manager in it-asset-management (1), SAP‑based suites in grc-platforms (1), SHIFT HOSTING LLC in cloud-hosting (1), SNS+SQS in streaming-platforms (1), SOPS + age in secrets-management (1), SOTI ONE Platform / MobiControl in unified-endpoint-management (1), SRS Networks in penetration-testing-as-a-service (1), SST (v3 / "Ion") in infrastructure-as-code (1), SST Ion (SST v3) in infrastructure-as-code (1), SageMaker Studio Lab (free) in ml-platforms (1), Salesforce Backup & Recover in backup-and-disaster-recovery (1), SamWaf in web-application-firewalls (1), Samsung Knox Suite in unified-endpoint-management (1), Sangfor Endpoint Detection and Response (EDR) in endpoint-detection-and-response (1), Savio in feature-flags (1), Scalefusion / Hive in unified-endpoint-management (1), ScienceLogic in infrastructure-monitoring (1), Scikit-learn + Python in ml-platforms (1), Screenata in compliance-automation (1), Scylla in managed-relational-databases (1), SealedKeys in business-password-managers (1), SecureLeap in penetration-testing-as-a-service (1), Securelayer7 in managed-detection-and-response (1), Securiti in grc-platforms (1), Security by Proxy in security-awareness-training (1), Seldon in ml-platforms (1), Self-Hosted Wazuh or Graylog in siem-platforms (1), Self-managed PostgreSQL in managed-relational-databases (1), SendGrid in email-security (1), Sendmail in email-security (1), Senhasegura in privileged-access-management (1), SentinelOne ASM in attack-surface-management (1), SentinelOne Managed in endpoint-protection (1), SentinelOne Singularity Control in threat-intelligence-platforms (1), SentinelOne Singularity Core/Control in endpoint-protection (1), SentinelOne Stargate in zero-trust-network-access (1), Sequenzy in api-management (1), Serverless functions (AWS Lambda + EventBridge) in workflow-orchestration (1), ServiceNow Cloud Cost Management in cloud-cost-management (1), ServiceNow Vuln Management in vulnerability-management-platforms (1), Shadow Copy in backup-and-disaster-recovery (1), ShadowSecurityScanner in vulnerability-management-platforms (1), ShotMark in error-and-crash-monitoring (1), Sigma in ml-platforms (1), Silicon Cloud in sd-wan (1), Silk Road Networks in sd-wan (1), Simple Observability in infrastructure-monitoring (1), SimpleMDM in it-asset-management (1), SkyHigh in email-security (1), SkyKick in backup-and-disaster-recovery (1), Snowflake Native Tasks in etl-and-elt (1), SolarWinds DLP in data-loss-prevention (1), Solr in vector-databases (1), Somee.com in managed-relational-databases (1), Sonatype Nexus Lifecycle / Repository Pro in software-composition-analysis (1), Sonatype OSS Index in software-composition-analysis (1), SonicWALL SOHO in next-generation-firewalls (1), SonicWall ConnectSecure in sase-platforms (1), SonicWall Firewall in next-generation-firewalls (1), SonicWall Gen 7 / TZ series in next-generation-firewalls (1), SonicWall TZ/Gen 7 in next-generation-firewalls (1), SonicWall TZ205 in next-generation-firewalls (1), SonicWall TZ270/TZ370 in next-generation-firewalls (1), SonicWall entry-level / SOHO models in next-generation-firewalls (1), Sophos Firewall (XGS) WAF in web-application-firewalls (1), Sophos Intercept X / MDR in endpoint-protection (1), Sophos Intercept X / small business packages in endpoint-protection (1), Sophos MDR / Intercept X with XDR in extended-detection-and-response (1), Sophos MDR/XDR in extended-detection-and-response (1), Sophos XGS Virtual in next-generation-firewalls (1), Sophos ZTNA in zero-trust-network-access (1), Sortly in it-asset-management (1), Spacewalk/Foreman in patch-management (1), SpamAssassin in email-security (1), SpamTitan / Graphus in email-security (1), SpamTitan GlobalProtect in email-security (1), Spanning Backup in backup-and-disaster-recovery (1), Speakeasy in api-management (1), Splunk Intelligence Management in threat-intelligence-platforms (1), Spreadsheets + Notion/Confluence in grc-platforms (1), Spyse in attack-surface-management (1), StackHawk in cloud-native-application-protection (1), Stackhero in streaming-platforms (1), StarCoder in ai-coding-assistants (1), Starboard (by Aqua Security) in container-and-kubernetes-security (1), StatusCake in infrastructure-monitoring (1), Statuspage.io in observability-platforms (1), StepFun in llm-gateways-and-observability (1), Stoic MDR in managed-detection-and-response (1), StorageCraft in backup-and-disaster-recovery (1), Streamlit / Gradio in ml-platforms (1), Streamly in content-delivery-networks (1), Strimzi in streaming-platforms (1), Sweet in cloud-native-application-protection (1), Swif.ai in unified-endpoint-management (1), Symantec Endpoint Detection and Response (SEDR) in endpoint-protection (1), Symbiant in grc-platforms (1), Symbol Security in security-awareness-training (1), Synadia in streaming-platforms (1), Synology + Active Backup Suite in backup-and-disaster-recovery (1), Synology DS220j in backup-and-disaster-recovery (1), Synology DS923+ in backup-and-disaster-recovery (1), Synology NAS + Active Backup in backup-and-disaster-recovery (1), TPx in sd-wan (1), Tactical Training in security-awareness-training (1), Tailscale / Tailscale Netbird in zero-trust-network-access (1), Tailscale / ZeroTier in zero-trust-network-access (1), Tealium AudienceStream in customer-identity-and-access-management (1), Team Cymru (Pure Signal Recon / Orbit) in attack-surface-management (1), Team Cymru Pure Signal Orbit in attack-surface-management (1), Team Cymru Pure Signal Recon in attack-surface-management (1), Team Cymru Pure Signal products in attack-surface-management (1), Teams in streaming-platforms (1), TechMagic in penetration-testing-as-a-service (1), Techs Together in remote-monitoring-and-management (1), Tenable One Cloud Exposure / CNAPP in cloud-native-application-protection (1), Tenable Qualys in data-loss-prevention (1), TensorFlow/PyTorch + local setup in ml-platforms (1), TensorTurn in ml-platforms (1), TensorZero in llm-gateways-and-observability (1), Terratest in infrastructure-as-code (1), ThingsRecon in attack-surface-management (1), TigerGraph in nosql-databases (1), TikTok Live in streaming-platforms (1), Time Machine in backup-and-disaster-recovery (1), Tinybird in data-warehouses (1), Tongyi Lingma in ai-coding-assistants (1), Tracekit in application-performance-monitoring (1), Trae (ByteDance) in ai-coding-assistants (1), Trellix (formerly McAfee) DLP in data-loss-prevention (1), Trellix Advanced Threat Defense (ATD) in endpoint-protection (1), Trello in compliance-automation (1), Tremore in identity-governance (1), Trend Micro Deep Security in siem-platforms (1), Trend Micro Maximum Security in endpoint-protection (1), Trend Micro Office Scan / Apex One in email-security (1), Trend Micro Worry-Free Business Security in endpoint-protection (1), Tugboat in grc-platforms (1), Typeform in third-party-risk-management (1), UFW (Uncomplicated Firewall) in ddos-protection (1), UK National Cyber Security Centre (NCSC) in security-awareness-training (1), Ubicloud in ci-cd-platforms (1), Ubiquiti UniFi Cloud Gateway in next-generation-firewalls (1), Ubiquiti UniFi Cloud Gateway Max in next-generation-firewalls (1), Ubiquiti/UniFi firewalls (UDM, USG, etc.) in next-generation-firewalls (1), UnderDefense MAXI in soar-platforms (1), Unify (Unify.ai) in llm-gateways-and-observability (1), Unkey in api-gateways (1), Upstash QStash in streaming-platforms (1), Uptrends in application-performance-monitoring (1), UrBackup in backup-and-disaster-recovery (1), Userback in feature-flags (1), V7 in ml-platforms (1), VMRay's ThreatFeed in threat-intelligence-platforms (1), VMware Aria (formerly CloudHealth) in cloud-cost-management (1), VNC/UltraVNC in remote-monitoring-and-management (1), Vantage AI in grc-platforms (1), Vantaj in incident-management-and-on-call (1), Vast.ai in ml-platforms (1), Veeam Agent in backup-and-disaster-recovery (1), Veeam Availability Suite in backup-and-disaster-recovery (1), Veeam Backup Community Edition in backup-and-disaster-recovery (1), Veeam Data Cloud for SaaS in backup-and-disaster-recovery (1), VendorGuard in third-party-risk-management (1), Vercel AI SDK in llm-gateways-and-observability (1), Vercel Feature Flags in feature-flags (1), Vercel Queues in streaming-platforms (1), Verizon Secure Access Service Edge (SASE) in sase-platforms (1), Vertex AI AutoML in ml-platforms (1), Vimeo Livestream in streaming-platforms (1), Vimeo Livestream's premium tiers in streaming-platforms (1), Viso Trust in third-party-risk-management (1), Vulert in software-composition-analysis (1), Vulmon Recon in attack-surface-management (1), WarpBuild in ci-cd-platforms (1), WatchGate in attack-surface-management (1), WatchGuard Firebox T-series in next-generation-firewalls (1), WatchGuard Firebox T40/T85 in next-generation-firewalls (1), WatchGuard FireboxV in next-generation-firewalls (1), WatchGuard Firewalls in next-generation-firewalls (1), WebKnight in web-application-firewalls (1), WebSitePulse in infrastructure-monitoring (1), Webex in streaming-platforms (1), WebinarNinja in streaming-platforms (1), Windows Update / GPO (Group Policy Objects) in patch-management (1), Windsor.ai in etl-and-elt (1), Winglang in infrastructure-as-code (1), WireGuard in zero-trust-network-access (1), WorldServer in nosql-databases (1), Xylus in vulnerability-management-platforms (1), Y42 in data-warehouses (1), Z.AI in llm-gateways-and-observability (1), ZTEdge in sase-platforms (1), Zania in third-party-risk-management (1), Zapier Webhooks in streaming-platforms (1), Zecurit Endpoint Manager in unified-endpoint-management (1), ZeriFlow in static-application-security-testing (1), Znuny in it-service-management (1), Zoho Creator in managed-relational-databases (1), Zoom Sessions in streaming-platforms (1), Zscaler Internet Access + Private Access in sase-platforms (1), Zscaler Private Access (ZPA) / Zero Trust Exchange in zero-trust-network-access (1), Zuul in ci-cd-platforms (1), Zyxel Firewalls (e.g., USG FLEX, ZyWALL) in next-generation-firewalls (1), Zyxel USG in next-generation-firewalls (1), abuse.ch PhishTank in threat-intelligence-platforms (1), cnvrg.io in ml-platforms (1), dmarcian in email-security (1), eesel AI in it-service-management (1), iDrive Personal in backup-and-disaster-recovery (1), iDrive consumer in backup-and-disaster-recovery (1), iLert in incident-management-and-on-call (1), inFlow Inventory in it-asset-management (1), is*hosting in cloud-hosting (1), koddos.net in ddos-protection (1), legacy Cisco stacks in sase-platforms (1), macOS Automatic Updates in patch-management (1), managed Prometheus/Loki stacks in observability-platforms (1), native cloud billing tools in cloud-cost-management (1), pfSense Community Edition (CE) in next-generation-firewalls (1), uEMosis in patch-management (1), v0 in ai-coding-assistants (1), v0.dev in ai-coding-assistants (1), vFairs in streaming-platforms (1), vul.ninja in cloud-native-application-protection (1), whiteintel.io in threat-intelligence-platforms (1), wye scan in attack-surface-management (1)

Category-scoped resolutions, 1903 labels. A bare vendor name was read as that vendor's product for the asked category, which assigns specificity the model did not write; each one is listed so the assumption is visible:

Grafana Cloud in observability-platforms read as Grafana (54), Huntress in managed-detection-and-response read as Huntress Managed EDR (44), Proofpoint Essentials in email-security read as Proofpoint Email Protection (37), Saviynt in identity-governance read as Saviynt Enterprise Identity Cloud (36), Datadog in log-management read as Datadog Log Management (34), Snyk in software-composition-analysis read as Snyk Open Source (33), Kong in api-management read as Kong Gateway (32), AWS in cloud-hosting read as Amazon Web Services (31), Kong in api-gateways read as Kong Gateway (31), Zscaler in sase-platforms read as Zscaler Zero Trust Exchange (31), Arctic Wolf in managed-detection-and-response read as Arctic Wolf Managed Detection and Response (29), Mimecast in email-security read as Mimecast Email Security (26), MongoDB Atlas in nosql-databases read as MongoDB (26), Keeper in business-password-managers read as Keeper Security (25), Keeper Security in privileged-access-management read as KeeperPAM (25), Cisco Meraki in sd-wan read as Cisco Meraki SD-WAN (24), SentinelOne in endpoint-detection-and-response read as SentinelOne Singularity (24), Checkmarx in static-application-security-testing read as Checkmarx One (22), Hexnode in unified-endpoint-management read as Hexnode UEM (22), New Relic in log-management read as New Relic Logs (22), OneTrust in third-party-risk-management read as OneTrust Third-Party Risk Management (22), Attaxion in attack-surface-management read as Attaxion (20), CrowdStrike Falcon Go in endpoint-detection-and-response read as CrowdStrike Falcon (20), Netskope in sase-platforms read as Netskope One (18), SentinelOne Singularity in endpoint-detection-and-response read as SentinelOne Singularity (18), Keeper Business in business-password-managers read as Keeper Security (17), Microsoft Purview in data-loss-prevention read as Microsoft Purview DLP (16), VMware VeloCloud in sd-wan read as VMware VeloCloud SD-WAN (16), Barracuda in email-security read as Barracuda Email Protection (15), Grafana Cloud in infrastructure-monitoring read as Grafana (15), Huntress in endpoint-detection-and-response read as Huntress Managed EDR (15), Proofpoint in email-security read as Proofpoint Email Protection (15), Aiven in streaming-platforms read as Aiven for Apache Kafka (14), Aqua in container-and-kubernetes-security read as Aqua Security (14), Linode in cloud-hosting read as Akamai Connected Cloud (14), CrowdStrike in extended-detection-and-response read as CrowdStrike Falcon (13), Amazon Kinesis in streaming-platforms read as Amazon Kinesis Data Streams (12), Akamai in ddos-protection read as Akamai Prolexic (11), Censys in attack-surface-management read as Censys ASM (11), Forcepoint in data-loss-prevention read as Forcepoint DLP (11), Fortinet in sd-wan read as Fortinet Secure SD-WAN (11), Hevo in etl-and-elt read as Hevo Data (11), One Identity in identity-governance read as One Identity Manager (11), Symantec in data-loss-prevention read as Symantec Data Loss Prevention (11), UpGuard in attack-surface-management read as UpGuard BreachSight (11), AWS (Amazon Web Services) in cloud-hosting read as Amazon Web Services (10), Azure Blob in object-storage read as Azure Blob Storage (10), Scaleway in managed-kubernetes-platforms read as Scaleway Kapsule (10), Scout Monitoring in application-performance-monitoring read as Scout APM (10), DigitalOcean in managed-kubernetes-platforms read as DigitalOcean Kubernetes (9), Fortinet in sase-platforms read as Fortinet FortiSASE (9), GitLab CI in ci-cd-platforms read as GitLab CI/CD (9), Huntress in extended-detection-and-response read as Huntress Managed EDR (9), Keeper Security (KeeperPAM) in privileged-access-management read as KeeperPAM (9), Linode in managed-kubernetes-platforms read as Linode Kubernetes Engine (9), Microsoft Entra in workforce-identity-and-sso read as Microsoft Entra ID (9), MuleSoft in api-management read as MuleSoft Anypoint Platform (9), Palo Alto Networks Cortex XSOAR in soar-platforms read as Cortex XSOAR (9), ServiceNow in grc-platforms read as ServiceNow Integrated Risk Management (9), Bitdefender in endpoint-detection-and-response read as Bitdefender GravityZone (8), Flexera in cloud-cost-management read as Flexera One (8), Proofpoint in security-awareness-training read as Proofpoint ZenGuide (8), SentinelOne Singularity Endpoint in endpoint-detection-and-response read as SentinelOne Singularity (8), Vultr in managed-kubernetes-platforms read as Vultr Kubernetes Engine (8), DigitalOcean in managed-relational-databases read as DigitalOcean Managed Databases (7), ELK Stack in log-management read as Elastic Stack (7), Huntress in security-awareness-training read as Huntress Managed Security Awareness Training (7), Linode (Akamai) in cloud-hosting read as Akamai Connected Cloud (7), Mend in software-composition-analysis read as Mend.io (7), MuleSoft in api-gateways read as MuleSoft Anypoint Platform (7), Palo Alto Cortex XSOAR in soar-platforms read as Cortex XSOAR (7), Rippling in it-asset-management read as Rippling IT (7), SentinelOne in extended-detection-and-response read as SentinelOne Singularity (7), ServiceNow in it-asset-management read as ServiceNow IT Asset Management (7), Aikido in attack-surface-management read as Aikido Security (6), Aikido in static-application-security-testing read as Aikido Security (6), Azure in object-storage read as Azure Blob Storage (6), Azure SQL in managed-relational-databases read as Azure SQL Database (6), BMC Helix in it-service-management read as BMC Helix ITSM (6), Cisco Meraki MX in sd-wan read as Cisco Meraki SD-WAN (6), Lacework in cloud-native-application-protection read as FortiCNAPP (6), Meraki in sd-wan read as Cisco Meraki SD-WAN (6), Mimecast in security-awareness-training read as Mimecast Engage (6), Palo Alto Prisma in sd-wan read as Palo Alto Networks Prisma SD-WAN (6), Red Hat Advanced Cluster Security (ACS) in container-and-kubernetes-security read as Red Hat Advanced Cluster Security for Kubernetes (6), UpCloud in managed-kubernetes-platforms read as UpCloud Managed Kubernetes (6), ARCON in privileged-access-management read as ARCON PAM (5), AWS in object-storage read as Amazon S3 (5), Astronomer in workflow-orchestration read as Astronomer Astro (5), Azure DDoS in ddos-protection read as Azure DDoS Protection (5), Bitsight in attack-surface-management read as Bitsight (5), Cloudflare in sase-platforms read as Cloudflare One (5), CrowdStrike Falcon Go in extended-detection-and-response read as CrowdStrike Falcon (5), CyberArk in workforce-identity-and-sso read as CyberArk Identity (5), D3 Security in soar-platforms read as D3 Security Smart SOAR (5), Datadog in siem-platforms read as Datadog Cloud SIEM (5), Datadog Cloud Security in cloud-security-posture-management read as Datadog Cloud Security Management (5), Fortinet (FortiGate) in sd-wan read as Fortinet Secure SD-WAN (5), GitLab in ci-cd-platforms read as GitLab CI/CD (5), Google Cloud in object-storage read as Google Cloud Storage (5), Google Workspace in multi-factor-authentication read as Google Workspace 2-Step Verification (5), Intruder.io in attack-surface-management read as Intruder (5), InvGate in it-asset-management read as InvGate Asset Management (5), Ivanti in it-asset-management read as Ivanti Neurons for ITAM (5), Microsoft Defender in email-security read as Microsoft Defender for Office 365 (5), Okta Workforce Identity in multi-factor-authentication read as Okta (5), Ubiquiti in sd-wan read as Ubiquiti UniFi (5), Versa in sd-wan read as Versa Secure SD-WAN (5), Aikido Cloud in cloud-security-posture-management read as Aikido Security (4), Azure Synapse in data-warehouses read as Azure Synapse Analytics (4), BitSight in attack-surface-management read as Bitsight (4), Bitwarden in secrets-management read as Bitwarden Secrets Manager (4), Cato Networks in sd-wan read as Cato Networks (4), Cato Networks SASE Cloud in sase-platforms read as Cato SASE Cloud (4), DigitalOcean (DOKS) in managed-kubernetes-platforms read as DigitalOcean Kubernetes (4), Elastic in log-management read as Elastic Stack (4), Field Effect in managed-detection-and-response read as Field Effect MDR (4), Firebase in customer-identity-and-access-management read as Firebase Authentication (4), Lacework in cloud-security-posture-management read as Lacework FortiCNAPP (4), Linode in managed-relational-databases read as Linode Managed Databases (4), Netskope in data-loss-prevention read as Netskope DLP (4), Omada in identity-governance read as Omada Identity (4), PDQ Deploy in patch-management read as PDQ Deploy & Inventory (4), Palo Alto Cortex in extended-detection-and-response read as Palo Alto Networks Cortex XDR (4), Securden in privileged-access-management read as Securden Unified PAM (4), SentinelOne in managed-detection-and-response read as SentinelOne Singularity MDR (4), Sophos in endpoint-detection-and-response read as Sophos Intercept X (4), Tenable in cloud-security-posture-management read as Tenable Cloud Security (4), ThreatDown in endpoint-detection-and-response read as ThreatDown EDR (4), Trend Micro in extended-detection-and-response read as Trend Vision One (4), AWS CloudWatch in log-management read as Amazon CloudWatch Logs (3), Abnormal in email-security read as Abnormal AI (3), Aikido in cloud-native-application-protection read as Aikido Security (3), AlloyDB in managed-relational-databases read as AlloyDB for PostgreSQL (3), Amazon Q in ai-coding-assistants read as Amazon Q Developer (3), Aqua in cloud-native-application-protection read as Aqua Security (3), Arctic Wolf in security-awareness-training read as Arctic Wolf Managed Security Awareness (3), Cisco Meraki MX Series in sd-wan read as Cisco Meraki SD-WAN (3), ELK Stack (Elasticsearch, Logstash, Kibana) in log-management read as Elastic Stack (3), ESET in vulnerability-management-platforms read as ESET Vulnerability & Patch Management (3), Elastic in extended-detection-and-response read as Elastic Security (3), Elastic Cloud in log-management read as Elastic Stack (3), Fortinet FortiGate in sd-wan read as Fortinet Secure SD-WAN (3), Ivanti in it-service-management read as Ivanti Neurons for ITSM (3), Lacework / FortiCNAPP in cloud-security-posture-management read as Lacework FortiCNAPP (3), Lacework/FortiCNAPP in cloud-security-posture-management read as Lacework FortiCNAPP (3), Linode in object-storage read as Linode Object Storage (3), ManageEngine in it-service-management read as ManageEngine ServiceDesk Plus (3), Palo Alto Cortex XDR in endpoint-detection-and-response read as Palo Alto Networks Cortex XDR (3), Render in managed-relational-databases read as Render Postgres (3), Replit in ai-coding-assistants read as Replit AI (3), Sonatype in software-composition-analysis read as Sonatype Lifecycle (3), Spiceworks in it-service-management read as Spiceworks Cloud Help Desk (3), Versa Networks in sd-wan read as Versa Secure SD-WAN (3), Aikido in container-and-kubernetes-security read as Aikido Security (2), Aikido in software-composition-analysis read as Aikido Security (2), Aqua in cloud-security-posture-management read as Aqua Security (2), Azure Resource Manager (ARM) in infrastructure-as-code read as Azure Resource Manager templates (2), BMC Helix in incident-management-and-on-call read as BMC Helix ITSM (2), Backblaze in object-storage read as Backblaze B2 (2), Bitdefender GravityZone Business Security Premium in endpoint-detection-and-response read as Bitdefender GravityZone (2), Carbon Black in endpoint-detection-and-response read as VMware Carbon Black (2), Cato in sase-platforms read as Cato SASE Cloud (2), Cisco Meraki (MX Series) in sd-wan read as Cisco Meraki SD-WAN (2), Cynet 360 in endpoint-detection-and-response read as Cynet (2), D3 in soar-platforms read as D3 Security Smart SOAR (2), Datadog Security in siem-platforms read as Datadog Cloud SIEM (2), Datto in remote-monitoring-and-management read as Datto RMM (2), DigitalOcean in object-storage read as DigitalOcean Spaces (2), Diligent in third-party-risk-management read as Diligent One (2), Domino in ml-platforms read as Domino Data Lab (2), ELK in log-management read as Elastic Stack (2), ELK Stack (Elasticsearch + Logstash + Kibana) in log-management read as Elastic Stack (2), ESET in security-awareness-training read as ESET Cybersecurity Awareness Training (2), Elastic in siem-platforms read as Elastic Security (2), Elastic (ELK) in log-management read as Elastic Stack (2), Elastic Cloud in siem-platforms read as Elastic Security (2), Flexera in it-asset-management read as Flexera One (2), Fortinet (FortiSASE) in sase-platforms read as Fortinet FortiSASE (2), Fortinet FortiGate (Secure SD-WAN) in sd-wan read as Fortinet Secure SD-WAN (2), GitLab in software-composition-analysis read as GitLab Dependency Scanning (2), Google SecOps / Chronicle in siem-platforms read as Google Security Operations (2), Google Security Operations in soar-platforms read as Google Security Operations SOAR (2), Harness in cloud-cost-management read as Harness Cloud Cost Management (2), Huntress Managed Security Awareness in security-awareness-training read as Huntress Managed Security Awareness Training (2), Ivanti Neurons in it-service-management read as Ivanti Neurons for ITSM (2), Kong Enterprise in api-gateways read as Kong Gateway (2), Lacework (FortiCNAPP) in cloud-security-posture-management read as Lacework FortiCNAPP (2), Linode (LKE) in managed-kubernetes-platforms read as Linode Kubernetes Engine (2), Linode/Akamai in cloud-hosting read as Akamai Connected Cloud (2), ManageEngine in it-asset-management read as ManageEngine AssetExplorer (2), Mend (formerly WhiteSource) in software-composition-analysis read as Mend.io (2), Microsoft 365 Business Premium in data-loss-prevention read as Microsoft 365 (2), Microsoft Defender in extended-detection-and-response read as Microsoft Defender XDR (2), Microsoft Edge in business-password-managers read as Microsoft Edge Password Manager (2), Microsoft Entra (formerly Azure AD) in workforce-identity-and-sso read as Microsoft Entra ID (2), Microsoft System Center Configuration Manager (SCCM) in patch-management read as Microsoft Configuration Manager (2), MuleSoft in workflow-orchestration read as MuleSoft Anypoint Platform (2), MuleSoft (Salesforce) in api-management read as MuleSoft Anypoint Platform (2), Nightfall in data-loss-prevention read as Nightfall AI (2), Omnissa (Workspace ONE) in unified-endpoint-management read as Omnissa Workspace ONE (2), Omnissa (formerly VMware Workspace ONE) in unified-endpoint-management read as Omnissa Workspace ONE (2), Palo Alto in endpoint-detection-and-response read as Palo Alto Networks Cortex XDR (2), Palo Alto in sase-platforms read as Palo Alto Networks Prisma SASE (2), Palo Alto Networks in sase-platforms read as Palo Alto Networks Prisma SASE (2), Palo Alto Networks (Prisma Cloud) in cloud-security-posture-management read as Prisma Cloud (2), Pentaho in etl-and-elt read as Pentaho Data Integration (2), Ping in identity-governance read as Ping Identity (2), Proofpoint in data-loss-prevention read as Proofpoint Enterprise DLP (2), Rapid7 in cloud-native-application-protection read as Rapid7 InsightCloudSec (2), Rippling in unified-endpoint-management read as Rippling IT (2), SentinelOne in container-and-kubernetes-security read as SentinelOne Singularity (2), ServiceNow in compliance-automation read as ServiceNow Integrated Risk Management (2), SolarWinds in it-service-management read as SolarWinds Service Desk (2), Sophos in managed-detection-and-response read as Sophos MDR (2), Symantec/Broadcom in data-loss-prevention read as Symantec Data Loss Prevention (2), Trellix in endpoint-detection-and-response read as Trellix EDR (2), VMware VeloCloud (Broadcom) in sd-wan read as VMware VeloCloud SD-WAN (2), VMware VeloCloud (now Broadcom) in sd-wan read as VMware VeloCloud SD-WAN (2), VMware Velocloud in sd-wan read as VMware VeloCloud SD-WAN (2), Vectra in siem-platforms read as Vectra AI (2), Vonahi in penetration-testing-as-a-service read as Vonahi Security vPenTest (2), 42Gears in unified-endpoint-management read as 42Gears SureMDM (1), Aikido in cloud-security-posture-management read as Aikido Security (1), Akamai (Prolexic) in ddos-protection read as Akamai Prolexic (1), ArcSight in siem-platforms read as OpenText ArcSight (1), Astronomer (Airflow) in workflow-orchestration read as Astronomer Astro (1), Astronomer (Astro) in workflow-orchestration read as Astronomer Astro (1), Azure Resource Manager in infrastructure-as-code read as Azure Resource Manager templates (1), BMC in it-service-management read as BMC Helix ITSM (1), BMC Helix in it-asset-management read as BMC Helix ITAM (1), BMC Helix (formerly BMC Remedy) in it-service-management read as BMC Helix ITSM (1), BMC Helix (formerly Remedy) in it-service-management read as BMC Helix ITSM (1), BMC Remedy in it-service-management read as BMC Helix ITSM (1), Barracuda in sase-platforms read as Barracuda SecureEdge (1), Bitwarden (Business) in secrets-management read as Bitwarden Secrets Manager (1), Broadcom in data-loss-prevention read as Symantec Data Loss Prevention (1), Broadcom (CA Identity Suite) in identity-governance read as Symantec Identity Governance and Administration (1), Broadcom (Symantec DLP) in data-loss-prevention read as Symantec Data Loss Prevention (1), Broadcom (VMware) in sd-wan read as VMware VeloCloud SD-WAN (1), Broadcom/Symantec in data-loss-prevention read as Symantec Data Loss Prevention (1), CATO Networks in sd-wan read as Cato Networks (1), Cato Networks (SASE) in sd-wan read as Cato Networks (1), Cato Networks (SASE/SD-WAN) in sd-wan read as Cato Networks (1), Check Point in cloud-security-posture-management read as Check Point CloudGuard (1), Check Point in email-security read as Check Point Harmony Email & Collaboration (1), Check Point in sase-platforms read as Check Point Harmony SASE (1), Check Point in zero-trust-network-access read as Check Point Harmony SASE (1), Check Point (CloudGuard) in cloud-native-application-protection read as Check Point CloudGuard (1), Check Point Harmony Email in email-security read as Check Point Harmony Email & Collaboration (1), Checkmarx (Checkmarx One) in static-application-security-testing read as Checkmarx One (1), Checkmarx (CxSAST) in static-application-security-testing read as Checkmarx One (1), Cisco in email-security read as Cisco Secure Email (1), Cisco AppDynamics in application-performance-monitoring read as AppDynamics (1), Cisco Meraki (MX series) in sd-wan read as Cisco Meraki SD-WAN (1), CloudBees in ci-cd-platforms read as CloudBees CI (1), Cloudflare in object-storage read as Cloudflare R2 (1), Comcast in sd-wan read as Comcast Business (1), Copilot Free in ai-coding-assistants read as GitHub Copilot (1), Cortex XDR in endpoint-detection-and-response read as Palo Alto Networks Cortex XDR (1), Cortex XSIAM in siem-platforms read as Palo Alto Networks Cortex XSIAM (1), CrowdStrike Falcon in cloud-native-application-protection read as CrowdStrike Falcon Cloud Security (1), CrowdStrike Falcon Cloud in cloud-native-application-protection read as CrowdStrike Falcon Cloud Security (1), CrowdStrike Falcon Cloud in cloud-security-posture-management read as CrowdStrike Falcon Cloud Security (1), CrowdStrike Falcon Complete in endpoint-detection-and-response read as CrowdStrike Falcon (1), CrowdStrike Falcon Complete Next-Gen MDR in endpoint-detection-and-response read as CrowdStrike Falcon (1), Cynet 360 in extended-detection-and-response read as Cynet (1), Datadog in cloud-security-posture-management read as Datadog Cloud Security Management (1), Datadog Security in cloud-security-posture-management read as Datadog Cloud Security Management (1), Datto in patch-management read as Datto RMM (1), Defender for Endpoint in endpoint-detection-and-response read as Microsoft Defender for Endpoint (1), ELK in observability-platforms read as Elastic Stack (1), ELK (Elasticsearch, Logstash, Kibana) in observability-platforms read as Elastic Stack (1), ELK Stack (Elasticsearch) in log-management read as Elastic Stack (1), ELK Stack (Elasticsearch/Logstash/Kibana) in log-management read as Elastic Stack (1), ELK stack in log-management read as Elastic Stack (1), ESET (ESET PROTECT) in extended-detection-and-response read as ESET PROTECT (1), ESET PROTECT Entry in endpoint-detection-and-response read as ESET PROTECT (1), ESET PROTECT Platform in endpoint-detection-and-response read as ESET PROTECT (1), Elastic in endpoint-detection-and-response read as Elastic Security (1), Elastic (ELK Stack) in log-management read as Elastic Stack (1), FatPipe in sd-wan read as FatPipe SD-WAN (1), Field Effect (Covalence) in managed-detection-and-response read as Field Effect MDR (1), Flexera (Flexera One) in it-asset-management read as Flexera One (1), Flexera (including Cloud Cost Optimization and former Spot/CloudCheckr) in cloud-cost-management read as Flexera One (1), Fortinet in email-security read as FortiMail (1), Fortinet in security-awareness-training read as FortiSAT (1), Fortinet (FortiGate SD-WAN) in sd-wan read as Fortinet Secure SD-WAN (1), Fortinet (Full Feature Set) in sd-wan read as Fortinet Secure SD-WAN (1), Fortinet FortiGate (FortiWAN / Secure SD-WAN) in sd-wan read as Fortinet Secure SD-WAN (1), GCP in object-storage read as Google Cloud Storage (1), GitLab CI (Premium/Ultimate) in ci-cd-platforms read as GitLab CI/CD (1), GitLab CI (SaaS) in ci-cd-platforms read as GitLab CI/CD (1), GitLab Premium in ci-cd-platforms read as GitLab CI/CD (1), GitLab Ultimate in static-application-security-testing read as GitLab SAST (1), GitLab self-managed in ci-cd-platforms read as GitLab CI/CD (1), Google in object-storage read as Google Cloud Storage (1), Google Chronicle in siem-platforms read as Google Security Operations (1), Google Chronicle in soar-platforms read as Google Security Operations SOAR (1), Google Cloud in ddos-protection read as Google Cloud Armor (1), Grafana Cloud (LGTM Stack) in observability-platforms read as Grafana (1), Grafana Cloud (LGTM stack) in observability-platforms read as Grafana (1), Grafana Cloud (LGTM) in observability-platforms read as Grafana (1), Grafana stack in observability-platforms read as Grafana (1), HPE in sd-wan read as HPE Aruba EdgeConnect (1), HPE Aruba in sd-wan read as HPE Aruba EdgeConnect (1), Horizon3.ai (NodeZero) in penetration-testing-as-a-service read as Horizon3.ai NodeZero (1), Huntress (Managed EDR) in managed-detection-and-response read as Huntress Managed EDR (1), IBM Cloud in object-storage read as IBM Cloud Object Storage (1), InvGate in it-service-management read as InvGate Service Management (1), Ivanti in incident-management-and-on-call read as Ivanti Neurons for ITSM (1), Jira in it-service-management read as Jira Service Management (1), Kaseya in patch-management read as Kaseya VSA (1), Kaspersky in endpoint-detection-and-response read as Kaspersky Endpoint Detection and Response (EDR) Expert (1), Keeper (Business) in business-password-managers read as Keeper Security (1), Keeper Business Starter in business-password-managers read as Keeper Security (1), Keeper Business Starter in privileged-access-management read as KeeperPAM (1), Keeper Security (Business Starter) in privileged-access-management read as KeeperPAM (1), Kong in llm-gateways-and-observability read as Kong AI Gateway (1), Kong (Community Edition) in api-gateways read as Kong Gateway (1), Kong (Community Edition) in api-management read as Kong Gateway (1), Kong (Enterprise / Konnect) in api-management read as Kong Gateway (1), Kong (Kong Gateway & Kong Konnect) in api-gateways read as Kong Gateway (1), Kong (Konnect / Enterprise) in api-management read as Kong Gateway (1), Kong (Konnect) in api-gateways read as Kong Gateway (1), Kong (Konnect) in api-management read as Kong Gateway (1), Kong (OSS or Konnect) in api-gateways read as Kong Gateway (1), Kong (OSS/Konnect) in api-management read as Kong Gateway (1), Kong (Open Source) in api-gateways read as Kong Gateway (1), Kong (Open Source/Konnect) in api-management read as Kong Gateway (1), Kong (Open-Source Edition) in api-management read as Kong Gateway (1), Kong (especially Kong Konnect) in api-management read as Kong Gateway (1), Kong Cloud in api-gateways read as Kong Gateway (1), Kong Enterprise in api-management read as Kong Gateway (1), Lacework / FortiCNAPP in cloud-native-application-protection read as FortiCNAPP (1), Linode (Akamai) in managed-kubernetes-platforms read as Linode Kubernetes Engine (1), Linode (now Akamai Cloud Computing) in cloud-hosting read as Akamai Connected Cloud (1), Linode (now Akamai) in cloud-hosting read as Akamai Connected Cloud (1), Linode/Akamai in managed-kubernetes-platforms read as Linode Kubernetes Engine (1), Mandiant in attack-surface-management read as Mandiant Attack Surface Management (1), Mend (WhiteSource) in software-composition-analysis read as Mend.io (1), Microsoft Azure in object-storage read as Azure Blob Storage (1), Microsoft Defender in cloud-security-posture-management read as Microsoft Defender for Cloud (1), Microsoft Defender (Enterprise E5) in extended-detection-and-response read as Microsoft Defender XDR (1), Microsoft Defender Experts in managed-detection-and-response read as Microsoft Defender Experts for XDR (1), Microsoft Entra in identity-governance read as Microsoft Entra ID (1), Microsoft Entra in zero-trust-network-access read as Microsoft Entra ID (1), Microsoft Entra (formerly Azure AD) in identity-governance read as Microsoft Entra ID (1), Microsoft Purview (Business Premium Add-on) in data-loss-prevention read as Microsoft Purview DLP (1), Microsoft Purview (Microsoft 365 DLP) in data-loss-prevention read as Microsoft Purview DLP (1), Microsoft Purview Suite in data-loss-prevention read as Microsoft Purview DLP (1), MongoDB Atlas in vector-databases read as MongoDB Atlas Vector Search (1), N-able in patch-management read as N-able N-central (1), Nessus Essentials in attack-surface-management read as Tenable Nessus (1), Netscout in ddos-protection read as NETSCOUT Arbor (1), Netskope (Netskope One) in sase-platforms read as Netskope One (1), Omnissa in unified-endpoint-management read as Omnissa Workspace ONE (1), One Identity (One Identity Manager) in identity-governance read as One Identity Manager (1), OneTrust (SMB Offerings) in third-party-risk-management read as OneTrust Third-Party Risk Management (1), OneTrust (TPRM module) in third-party-risk-management read as OneTrust Third-Party Risk Management (1), Oracle in managed-kubernetes-platforms read as Oracle Container Engine for Kubernetes (1), Oracle Cloud in cloud-hosting read as Oracle Cloud Infrastructure (1), Oracle Cloud in object-storage read as Oracle Cloud Infrastructure Object Storage (1), Oracle Cloud (OCI) in cloud-hosting read as Oracle Cloud Infrastructure (1), Oracle NoSQL in nosql-databases read as Oracle NoSQL Database (1), PDQ Deploy (Free Version) in patch-management read as PDQ Deploy & Inventory (1), PDQ Deploy (free version) in patch-management read as PDQ Deploy & Inventory (1), Palo Alto in cloud-security-posture-management read as Prisma Cloud (1), Palo Alto in sd-wan read as Palo Alto Networks Prisma SD-WAN (1), Palo Alto Networks in endpoint-detection-and-response read as Palo Alto Networks Cortex XDR (1), Palo Alto Networks in managed-detection-and-response read as Unit 42 Managed Detection and Response (1), Palo Alto Networks in sd-wan read as Palo Alto Networks Prisma SD-WAN (1), Palo Alto Networks (Prisma Cloud) in container-and-kubernetes-security read as Prisma Cloud (1), Palo Alto Networks (Prisma SASE / Prisma Access) in sase-platforms read as Palo Alto Networks Prisma SASE (1), Palo Alto Networks (Prisma SASE) in sase-platforms read as Palo Alto Networks Prisma SASE (1), Palo Alto Networks (Prisma) in sase-platforms read as Palo Alto Networks Prisma SASE (1), Palo Alto Networks (Prisma/SR-X series) in sd-wan read as Palo Alto Networks Prisma SD-WAN (1), Palo Alto Networks' Cortex XSOAR in soar-platforms read as Cortex XSOAR (1), Peplink SD-WAN in sd-wan read as Peplink (1), Ping in customer-identity-and-access-management read as Ping Identity (1), Ping in workforce-identity-and-sso read as Ping Identity (1), Proofpoint (Standard) in email-security read as Proofpoint Email Protection (1), Proofpoint Enterprise in email-security read as Proofpoint Email Protection (1), Rapid7 in container-and-kubernetes-security read as Rapid7 InsightVM (1), Rapid7 (InsightCloudSec) in cloud-native-application-protection read as Rapid7 InsightCloudSec (1), Rapid7 Attack Surface Management in attack-surface-management read as Rapid7 ASM (1), Remedy in it-service-management read as BMC Helix ITSM (1), Rippling (IT Cloud) in it-asset-management read as Rippling IT (1), Rippling (IT Cloud) in unified-endpoint-management read as Rippling IT (1), Riverbed in sd-wan read as Riverbed SteelConnect (1), SAP in compliance-automation read as SAP GRC (1), SCCM in patch-management read as Microsoft Configuration Manager (1), Saviynt (Enterprise Identity Cloud) in identity-governance read as Saviynt Enterprise Identity Cloud (1), Scout in application-performance-monitoring read as Scout APM (1), Securden in business-password-managers read as Securden Password Vault (1), Self-hosted GitLab in source-control-hosting read as GitLab (1), SentinelOne in cloud-security-posture-management read as SentinelOne Singularity Cloud Security (1), SentinelOne (MTR) in managed-detection-and-response read as SentinelOne Singularity MDR (1), SentinelOne (Singularity Complete) in extended-detection-and-response read as SentinelOne Singularity (1), SentinelOne (Singularity) in extended-detection-and-response read as SentinelOne Singularity (1), SentinelOne Singularity (Complete tier) in endpoint-detection-and-response read as SentinelOne Singularity (1), SentinelOne Singularity (Core/Control tiers) in endpoint-detection-and-response read as SentinelOne Singularity (1), SentinelOne Singularity (SMB tier) in endpoint-detection-and-response read as SentinelOne Singularity (1), SentinelOne Singularity Complete in endpoint-detection-and-response read as SentinelOne Singularity (1), SentinelOne Singularity Core in endpoint-detection-and-response read as SentinelOne Singularity (1), ServiceNow IT Service Management in incident-management-and-on-call read as ServiceNow ITSM (1), Snyk (Free Tier) in software-composition-analysis read as Snyk Open Source (1), Snyk (Open Source) in software-composition-analysis read as Snyk Open Source (1), Snyk Free Tier in software-composition-analysis read as Snyk Open Source (1), Snyk Team in software-composition-analysis read as Snyk Open Source (1), Sophos Endpoint (Intercept X) in endpoint-detection-and-response read as Sophos Intercept X (1), Sophos Essentials in managed-detection-and-response read as Sophos MDR (1), Sophos XG Firewall in sd-wan read as Sophos (1), Spiceworks in it-asset-management read as Spiceworks Inventory (1), Splunk in soar-platforms read as Splunk SOAR (1), Tenable in cloud-native-application-protection read as Tenable Cloud Security (1), The ELK Stack (Elasticsearch, Logstash, Kibana) in log-management read as Elastic Stack (1), ThreatDown (formerly Malwarebytes EDR) in endpoint-detection-and-response read as ThreatDown EDR (1), Thycotic in privileged-access-management read as Delinea (1), Thycotic in secrets-management read as Delinea Secret Server (1), Thycotic (Dassault Systèmes) in privileged-access-management read as Delinea (1), Thycotic (now Delinea) in privileged-access-management read as Delinea (1), Trellix in extended-detection-and-response read as Trellix XDR (1), Trellix (formerly McAfee Enterprise) in endpoint-detection-and-response read as Trellix EDR (1), Trend Micro Vision One in endpoint-detection-and-response read as Trend Micro (1), Ubiquiti (UniFi) in sd-wan read as Ubiquiti UniFi (1), UpGuard (Breach Risk) in attack-surface-management read as UpGuard BreachSight (1), VMware in unified-endpoint-management read as Omnissa Workspace ONE (1), VMware VeloCloud (now via Broadcom) in sd-wan read as VMware VeloCloud SD-WAN (1), VMware/Broadcom in sd-wan read as VMware VeloCloud SD-WAN (1), Verizon SD-WAN in sd-wan read as Verizon (1), Versa in sase-platforms read as Versa SASE (1), Versa Networks (via Lumen or MSPs) in sd-wan read as Versa Secure SD-WAN (1), Vultr Kubernetes in managed-kubernetes-platforms read as Vultr Kubernetes Engine (1), WSO2 in api-management read as WSO2 API Manager (1), Zscaler (ZIA / ZPA / ZDX) in sase-platforms read as Zscaler Zero Trust Exchange (1), Zscaler Zero Trust in sase-platforms read as Zscaler Zero Trust Exchange (1)

Combined answers split into one label per product: 1Password/Bitwarden Enterprise, AWS API Gateway + Cognito, AWS Cost Explorer & Budgets / Azure Cost Management / Google Cloud Billing Reports, AWS Cost Explorer / Azure Cost Management / GCP Billing, AWS RDS / Aurora Serverless v2, AWS Secrets Manager / Azure Key Vault, AWS Shield / Azure DDoS, AWS/Google/Azure, Acunetix/Invicti, Aiven/Linode/Vultr, Amazon CloudFront + AWS WAF, Amazon MSK Serverless / MSK, Amazon MSK/Kinesis, Apigee/Google, Archer IRM / RSA Archer, Atera / Syncro, Avanan/Check Point Harmony Email & Collaboration, Azure Bicep/ARM Templates, Azure Cost Management / Azure Advisor, Azure SQL Database / Azure Database for PostgreSQL, Azure Synapse Analytics / Microsoft Fabric, Bandit/gosec, Barracuda / ESET, Better Uptime / Better Stack, Bitdefender GravityZone / ThreatDown, Broadcom Symantec IGA / RSA Governance & Lifecycle, Cassandra/ScyllaDB, Check Point Harmony Email / Avanan, Checkov / KICS, Cisco Duo + Cisco Umbrella, Cisco Secure Access/Meraki, Cisco Secure Firewall / Meraki MX, Cloudability / Apptio, Cloudflare API Gateway / Cloudflare Workers, Cloudflare One / Cloudflare Zero Trust, Cloudflare Zero Trust / Cloudflare One, Codeium/Amazon Q, ConnectWise Automate / ScreenConnect / ConnectWise RMM, Cortex Cloud / Prisma Cloud (Palo Alto Networks), Cortex XSOAR / Cortex XSIAM, CrowdStrike Falcon Complete / LogScale, CyberArk / Thycotic, Delinea/Thycotic, Drone CI / Woodpecker CI, ELK Stack / OpenSearch, ELK/Prometheus, Elastic Observability / Elastic Cloud, Elastic Observability/ELK, Falco / Tetragon, Firebase Realtime Database / Firestore, Fortra DLP / Digital Guardian, GitHub Dependabot / GitLab Dependency Scanning, GitHub code scanning / CodeQL, GitLab Ultimate / GitHub Advanced Security, Gitea + Drone, Gitea / Gogs, GlitchTip / Bugsink, Google Colab/Kaggle, Google Vertex AI / Google Cloud AI Platform, Google Workspace + Cloud Identity, Google Workspace MFA / Google Authenticator, Google Workspace/Google Cloud Identity, Google/Microsoft Authenticator, Grafana Cloud + Prometheus + Loki, Grafana Cloud Logs / Loki, Grafana Loki / Grafana Cloud, Grafana/Grafana Cloud, Graylog Open/ELK, Helm/Kustomize, Hetzner / Linode / Vultr, Hevo Data / Hevo, IBM Security QRadar SOAR / IBM Resilient, Informatica PowerCenter / Informatica Cloud, Keycloak/Authentik, Linode/Rackspace Spot, LogMeIn Resolve / GoTo Resolve, MLflow & DVC (Data Version Control), Make (formerly Integromat) / n8n, Mandiant Threat Intelligence / Google Threat Intelligence, McAfee / Trellix Endpoint Security, McAfee/Trellix DLP, Meraki (Cisco) / Tenable, Microsoft 365 / Google Workspace DLP, Microsoft 365/Intune, Microsoft Defender / Sentinel, Microsoft Entra ID (with Conditional Access) and Intune, Microsoft Fabric / Azure SQL, Microsoft Intune + Defender for Endpoint + Entra ID, Microsoft Power Automate / Logic Apps (Sentinel), Microsoft/Google Authenticator, ModSecurity + OWASP Core Rule Set (CRS), NATS / NATS JetStream, Netlify/Vercel, Nginx/HAProxy, Norton LifeLock / Norton Password Manager, OPNsense / pfSense, OVHcloud / Civo, OWASP Amass/Subfinder, OWASP Dependency-Check / Dependency-Track, OWASP Dependency-Check/Trivy, Okta Customer Identity Cloud/Auth0, OneLogin / Okta (with Governance Modules), OpenTelemetry + Grafana Cloud, OpenVAS/Wazuh, Oracle Identity Manager / Identity Manager, PDQ Connect / PDQ Deploy & Inventory, PagerDuty/Opsgenie, Palo Alto / IBM, Palo Alto Networks Cortex XSOAR / XSIAM, Palo Alto Networks PA-Series / Prisma, Perimeter 81/Cato, Prevalent/Mitratech, Prometheus + Grafana + Jaeger, Radware / F5 / Nexusguard, Red Hat Advanced Cluster Security / StackRox, Redis / Redis Cloud, Render/Neon (serverless Postgres), Scouter / Stagemonitor, Self-hosted Milvus/Qdrant, Shodan/Censys, SonarQube Community/SonarCloud, Splunk SOAR/XSOAR, Spot by NetApp / Spot.io, StrongDM/Teleport, Supabase + pgvector, Symantec/Norton, Tailscale / Twingate, Tekton/Argo, Tenable Vulnerability Management / Tenable One, Twistlock/Palo Alto Prisma Cloud, Uptrace/OpenObserve, VMware/Omnissa, VMware/Omnissa Workspace ONE, Veeam Backup Essentials / Veeam Data Cloud, Vultr / Linode (Akamai), WSO2 API Manager / WSO2 API Platform, YouTube/Facebook Live, Zoom Webinars and Zoom Events

## Appendix: loose paraphrase stability

- Claude Haiku 4.5: a direct first choice kept as first choice or alternative in 29 of 63 categories (46%); differing under the strict rule: ai-coding-assistants, api-gateways, api-management, application-performance-monitoring, attack-surface-management, business-password-managers, ci-cd-platforms, cloud-cost-management, cloud-hosting, cloud-native-application-protection, cloud-security-posture-management, compliance-automation, container-and-kubernetes-security, content-delivery-networks, customer-identity-and-access-management, data-loss-prevention, data-warehouses, email-security, etl-and-elt, extended-detection-and-response, feature-flags, grc-platforms, identity-governance, incident-management-and-on-call, infrastructure-as-code, infrastructure-monitoring, it-asset-management, it-service-management, llm-gateways-and-observability, log-management, managed-kubernetes-platforms, managed-relational-databases, ml-platforms, multi-factor-authentication, next-generation-firewalls, nosql-databases, object-storage, observability-platforms, penetration-testing-as-a-service, remote-monitoring-and-management, sase-platforms, sd-wan, secrets-management, security-awareness-training, siem-platforms, soar-platforms, software-composition-analysis, source-control-hosting, static-application-security-testing, streaming-platforms, third-party-risk-management, threat-intelligence-platforms, unified-endpoint-management, vector-databases, web-application-firewalls, workflow-orchestration, workforce-identity-and-sso, zero-trust-network-access
- GPT-5.4 mini: a direct first choice kept as first choice or alternative in 48 of 67 categories (72%); differing under the strict rule: api-gateways, application-performance-monitoring, attack-surface-management, backup-and-disaster-recovery, cloud-cost-management, cloud-hosting, cloud-native-application-protection, compliance-automation, container-and-kubernetes-security, error-and-crash-monitoring, etl-and-elt, grc-platforms, identity-governance, incident-management-and-on-call, infrastructure-monitoring, it-asset-management, llm-gateways-and-observability, log-management, multi-factor-authentication, object-storage, observability-platforms, patch-management, penetration-testing-as-a-service, privileged-access-management, sase-platforms, sd-wan, secrets-management, software-composition-analysis, streaming-platforms, threat-intelligence-platforms, vector-databases, web-application-firewalls, workflow-orchestration, workforce-identity-and-sso
- Gemini 3.5 Flash: a direct first choice kept as first choice or alternative in 55 of 67 categories (82%); differing under the strict rule: ai-coding-assistants, cloud-hosting, cloud-security-posture-management, container-and-kubernetes-security, data-loss-prevention, etl-and-elt, identity-governance, infrastructure-as-code, it-asset-management, it-service-management, llm-gateways-and-observability, managed-relational-databases, ml-platforms, multi-factor-authentication, observability-platforms, penetration-testing-as-a-service, privileged-access-management, remote-monitoring-and-management, secrets-management, siem-platforms, software-composition-analysis, streaming-platforms, third-party-risk-management, threat-intelligence-platforms, vulnerability-management-platforms, web-application-firewalls, workflow-orchestration, workforce-identity-and-sso
- Perplexity Sonar: a direct first choice kept as first choice or alternative in 45 of 67 categories (67%); differing under the strict rule: api-gateways, application-performance-monitoring, attack-surface-management, cloud-cost-management, cloud-hosting, cloud-security-posture-management, compliance-automation, container-and-kubernetes-security, data-loss-prevention, email-security, endpoint-detection-and-response, endpoint-protection, etl-and-elt, extended-detection-and-response, feature-flags, grc-platforms, identity-governance, incident-management-and-on-call, infrastructure-monitoring, it-asset-management, it-service-management, llm-gateways-and-observability, log-management, managed-relational-databases, ml-platforms, next-generation-firewalls, patch-management, penetration-testing-as-a-service, privileged-access-management, sase-platforms, sd-wan, secrets-management, siem-platforms, software-composition-analysis, source-control-hosting, streaming-platforms, third-party-risk-management, threat-intelligence-platforms, unified-endpoint-management, vector-databases, web-application-firewalls, workflow-orchestration, workforce-identity-and-sso
- Grok 4.1 Fast: a direct first choice kept as first choice or alternative in 56 of 67 categories (84%); differing under the strict rule: api-gateways, api-management, business-password-managers, compliance-automation, container-and-kubernetes-security, customer-identity-and-access-management, data-loss-prevention, email-security, endpoint-protection, etl-and-elt, feature-flags, identity-governance, incident-management-and-on-call, infrastructure-monitoring, it-asset-management, it-service-management, llm-gateways-and-observability, log-management, managed-relational-databases, ml-platforms, next-generation-firewalls, object-storage, observability-platforms, patch-management, penetration-testing-as-a-service, privileged-access-management, remote-monitoring-and-management, sd-wan, security-awareness-training, soar-platforms, software-composition-analysis, streaming-platforms, threat-intelligence-platforms, unified-endpoint-management, vector-databases, workflow-orchestration
- Mistral Small: a direct first choice kept as first choice or alternative in 38 of 67 categories (57%); differing under the strict rule: api-gateways, api-management, application-performance-monitoring, attack-surface-management, backup-and-disaster-recovery, business-password-managers, ci-cd-platforms, cloud-cost-management, cloud-hosting, cloud-native-application-protection, cloud-security-posture-management, compliance-automation, container-and-kubernetes-security, content-delivery-networks, customer-identity-and-access-management, data-loss-prevention, ddos-protection, email-security, endpoint-detection-and-response, endpoint-protection, error-and-crash-monitoring, etl-and-elt, feature-flags, grc-platforms, identity-governance, incident-management-and-on-call, infrastructure-monitoring, it-asset-management, it-service-management, llm-gateways-and-observability, log-management, managed-kubernetes-platforms, managed-relational-databases, ml-platforms, nosql-databases, object-storage, observability-platforms, patch-management, penetration-testing-as-a-service, privileged-access-management, remote-monitoring-and-management, sase-platforms, sd-wan, secrets-management, security-awareness-training, siem-platforms, soar-platforms, software-composition-analysis, streaming-platforms, third-party-risk-management, unified-endpoint-management, vector-databases, workflow-orchestration, workforce-identity-and-sso, zero-trust-network-access
- DeepSeek V4 Flash: a direct first choice kept as first choice or alternative in 52 of 67 categories (78%); differing under the strict rule: ai-coding-assistants, api-gateways, application-performance-monitoring, backup-and-disaster-recovery, business-password-managers, cloud-hosting, cloud-native-application-protection, cloud-security-posture-management, compliance-automation, container-and-kubernetes-security, customer-identity-and-access-management, data-loss-prevention, email-security, endpoint-detection-and-response, endpoint-protection, etl-and-elt, extended-detection-and-response, grc-platforms, identity-governance, incident-management-and-on-call, infrastructure-monitoring, it-service-management, llm-gateways-and-observability, managed-kubernetes-platforms, managed-relational-databases, ml-platforms, multi-factor-authentication, next-generation-firewalls, observability-platforms, patch-management, penetration-testing-as-a-service, remote-monitoring-and-management, sd-wan, secrets-management, siem-platforms, software-composition-analysis, source-control-hosting, streaming-platforms, third-party-risk-management, threat-intelligence-platforms, unified-endpoint-management, web-application-firewalls, workflow-orchestration, workforce-identity-and-sso, zero-trust-network-access
- Llama 4 Maverick: a direct first choice kept as first choice or alternative in 14 of 56 categories (25%); differing under the strict rule: ai-coding-assistants, api-gateways, attack-surface-management, backup-and-disaster-recovery, business-password-managers, ci-cd-platforms, cloud-cost-management, cloud-hosting, cloud-security-posture-management, compliance-automation, container-and-kubernetes-security, content-delivery-networks, customer-identity-and-access-management, data-loss-prevention, data-warehouses, ddos-protection, endpoint-detection-and-response, endpoint-protection, error-and-crash-monitoring, feature-flags, grc-platforms, identity-governance, infrastructure-monitoring, it-asset-management, llm-gateways-and-observability, managed-kubernetes-platforms, managed-relational-databases, multi-factor-authentication, nosql-databases, object-storage, observability-platforms, patch-management, penetration-testing-as-a-service, privileged-access-management, remote-monitoring-and-management, sd-wan, secrets-management, security-awareness-training, siem-platforms, software-composition-analysis, source-control-hosting, third-party-risk-management, threat-intelligence-platforms, unified-endpoint-management, vector-databases, workflow-orchestration, zero-trust-network-access
- Qwen 3.7 Flash: a direct first choice kept as first choice or alternative in 44 of 67 categories (66%); differing under the strict rule: api-gateways, api-management, backup-and-disaster-recovery, cloud-cost-management, cloud-native-application-protection, cloud-security-posture-management, compliance-automation, container-and-kubernetes-security, customer-identity-and-access-management, data-loss-prevention, data-warehouses, email-security, endpoint-detection-and-response, endpoint-protection, etl-and-elt, extended-detection-and-response, feature-flags, grc-platforms, identity-governance, incident-management-and-on-call, infrastructure-as-code, infrastructure-monitoring, it-asset-management, it-service-management, llm-gateways-and-observability, log-management, managed-kubernetes-platforms, managed-relational-databases, ml-platforms, multi-factor-authentication, object-storage, observability-platforms, patch-management, penetration-testing-as-a-service, privileged-access-management, remote-monitoring-and-management, sase-platforms, security-awareness-training, software-composition-analysis, source-control-hosting, static-application-security-testing, third-party-risk-management, threat-intelligence-platforms, unified-endpoint-management, vector-databases, vulnerability-management-platforms, workflow-orchestration, workforce-identity-and-sso
- Kimi K2: a direct first choice kept as first choice or alternative in 51 of 67 categories (76%); differing under the strict rule: api-gateways, api-management, attack-surface-management, backup-and-disaster-recovery, business-password-managers, cloud-hosting, cloud-native-application-protection, cloud-security-posture-management, compliance-automation, container-and-kubernetes-security, customer-identity-and-access-management, data-loss-prevention, endpoint-detection-and-response, endpoint-protection, error-and-crash-monitoring, etl-and-elt, extended-detection-and-response, feature-flags, grc-platforms, identity-governance, incident-management-and-on-call, infrastructure-as-code, infrastructure-monitoring, it-asset-management, it-service-management, llm-gateways-and-observability, managed-kubernetes-platforms, managed-relational-databases, ml-platforms, multi-factor-authentication, next-generation-firewalls, nosql-databases, observability-platforms, patch-management, penetration-testing-as-a-service, privileged-access-management, remote-monitoring-and-management, sd-wan, secrets-management, security-awareness-training, siem-platforms, software-composition-analysis, static-application-security-testing, streaming-platforms, threat-intelligence-platforms, unified-endpoint-management, vector-databases, vulnerability-management-platforms, web-application-firewalls, workflow-orchestration, zero-trust-network-access
- GLM 4.7 FlashX: a direct first choice kept as first choice or alternative in 49 of 67 categories (73%); differing under the strict rule: ai-coding-assistants, application-performance-monitoring, business-password-managers, cloud-cost-management, compliance-automation, container-and-kubernetes-security, customer-identity-and-access-management, data-loss-prevention, data-warehouses, endpoint-detection-and-response, endpoint-protection, etl-and-elt, feature-flags, grc-platforms, identity-governance, incident-management-and-on-call, infrastructure-as-code, infrastructure-monitoring, it-service-management, llm-gateways-and-observability, log-management, managed-kubernetes-platforms, managed-relational-databases, ml-platforms, multi-factor-authentication, next-generation-firewalls, observability-platforms, patch-management, penetration-testing-as-a-service, secrets-management, security-awareness-training, siem-platforms, soar-platforms, software-composition-analysis, streaming-platforms, third-party-risk-management, threat-intelligence-platforms, vector-databases, web-application-firewalls, workflow-orchestration, workforce-identity-and-sso, zero-trust-network-access
- MiniMax M2.5: a direct first choice kept as first choice or alternative in 47 of 67 categories (70%); differing under the strict rule: api-gateways, api-management, application-performance-monitoring, attack-surface-management, backup-and-disaster-recovery, cloud-hosting, cloud-security-posture-management, compliance-automation, container-and-kubernetes-security, customer-identity-and-access-management, data-loss-prevention, data-warehouses, endpoint-detection-and-response, endpoint-protection, error-and-crash-monitoring, etl-and-elt, feature-flags, grc-platforms, identity-governance, incident-management-and-on-call, infrastructure-as-code, infrastructure-monitoring, it-asset-management, it-service-management, llm-gateways-and-observability, log-management, managed-kubernetes-platforms, managed-relational-databases, ml-platforms, multi-factor-authentication, next-generation-firewalls, object-storage, observability-platforms, patch-management, penetration-testing-as-a-service, privileged-access-management, remote-monitoring-and-management, sd-wan, security-awareness-training, siem-platforms, soar-platforms, software-composition-analysis, source-control-hosting, static-application-security-testing, streaming-platforms, third-party-risk-management, threat-intelligence-platforms, unified-endpoint-management, vector-databases, vulnerability-management-platforms, workflow-orchestration, workforce-identity-and-sso