# Segment: Mid-market

# IT AI Recommendation Index, run mai-20261004-1101-calibration_b

72 prompts, 14 models, 5,486 raw judge labels, 5,518 scored labels after normalization. Published weights: first choice +3, alternative +2, mention +1, soft negative -2, hard negative -3.

Scored under vendor alias table version 2026-10.8. Raw judge labels are the permanent record; the numbers below are derived from them and are regenerated for every run whenever the alias table changes, so the whole series is always scored under one table version. Resolution of raw names: 4,505 by alias or canonical name, 638 by category-scoped alias, 79 from combined answers split into their products, 42 from combined answers counted once for their first product, 0 excluded by rule, 236 unresolved and counted under the raw name.

## Paraphrase stability

Share of categories where a model's first choice set on the direct prompt equals its set on the paraphrase.

| Model | Same | Different | Stability |
|---|---|---|---|
| Claude Haiku 4.5 | 4 | 7 | 36% |
| GPT-5.4 mini | 4 | 8 | 33% |
| Gemini 3.5 Flash | 4 | 8 | 33% |
| Perplexity Sonar | 6 | 6 | 50% |
| Grok 4.1 Fast | 5 | 7 | 42% |
| Mistral Small | 3 | 9 | 25% |
| DeepSeek V4 Flash | 7 | 5 | 58% |
| Llama 4 Maverick | 1 | 6 | 14% |
| Qwen 3.7 Flash | 4 | 8 | 33% |
| Kimi K2 | 4 | 8 | 33% |
| GLM 4.7 FlashX | 2 | 10 | 17% |
| MiniMax M2.5 | 2 | 10 | 17% |
| GPT-6 Luna | 9 | 3 | 75% |
| Muse Glimmer 30B | 5 | 7 | 42% |

A looser measure, whether a direct first choice survives as a first choice or alternative on the paraphrase, is in the appendix.

## Standing by category

First choice share across the direct, paraphrase, budget and scale prompts and all 14 models. The top product's share is published alongside the label: contested means the top share is at or below 40%, and a category just above the line is not meaningfully different from one just below it. Consensus means every model's direct-prompt first choice is the same single product.

| Category | Top product | Top share | First choices | Status |
|---|---|---|---|---|
| ai-coding-assistants | GitHub Copilot | 65% | 52 | clear leader |
| api-management | Kong Gateway | 45% | 55 | clear leader |
| application-performance-monitoring | New Relic | 57% | 49 | clear leader |
| backup-and-disaster-recovery | Veeam Data Platform | 40% | 62 | clear leader |
| business-password-managers | 1Password | 54% | 50 | clear leader |
| cloud-cost-management | Vantage | 40% | 63 | contested |
| compliance-automation | Drata | 38% | 52 | contested |
| content-delivery-networks | Cloudflare | 73% | 51 | clear leader |
| customer-identity-and-access-management | Frontegg | 19% | 62 | contested |
| data-warehouses | Snowflake | 54% | 52 | clear leader |
| etl-and-elt | Fivetran | 35% | 54 | contested |
| sase-platforms | Cato Networks | 35% | 54 | contested |

**ai-coding-assistants**: GitHub Copilot 65%, Windsurf 10%, Cline 4%, Continue 4%, JetBrains AI Assistant 4%

**api-management**: Kong Gateway 45%, Tyk 20%, Postman 7%, Amazon API Gateway 5%, Gravitee 5%

**application-performance-monitoring**: New Relic 57%, Datadog APM 14%, IBM Instana 8%, SigNoz 6%, ManageEngine Applications Manager 4%

**backup-and-disaster-recovery**: Veeam Data Platform 40%, Druva Data Security Cloud 16%, Veeam Community Edition 5%, Acronis Cyber Protect 3%, Amazon S3 3%

**business-password-managers**: 1Password 54%, Bitwarden 32%, Keeper Security 4%, RoboForm 4%, LastPass 2%

**cloud-cost-management**: Vantage 40%, CloudZero 14%, Finout 10%, AWS Cost Explorer 8%, Microsoft Cost Management 6%

**compliance-automation**: Drata 38%, Vanta 21%, Sprinto 17%, Secureframe 8%, ComplyJet 6%

**content-delivery-networks**: Cloudflare 73%, Bunny.net 14%, Fastly 4%, KeyCDN 4%, Amazon CloudFront 2%

**customer-identity-and-access-management**: Clerk 19%, Frontegg 19%, Auth0 15%, WorkOS 13%, Amazon Cognito 5%

**data-warehouses**: Snowflake 54%, Google BigQuery 40%, Amazon Redshift 6%

**etl-and-elt**: Fivetran 35%, Airbyte 31%, Integrate.io 11%, Hevo Data 7%, Coupler.io 4%

**sase-platforms**: Cato Networks 35%, Cloudflare One 20%, Cato SASE Cloud 17%, Fortinet FortiSASE 15%, Netskope One 6%

## Anti-recommendations

Products most often labeled soft or hard negative, with the number of models that did so at least once in the category, and the share of that product's labels in the category that were negative. A high negative share on a product with few labels is a warning; a low share on a product with many labels is salience, not sentiment.

- **ai-coding-assistants**: GitHub Copilot (10 models, 1 hard; 12 of 72 labels negative), Cursor (7 models; 11 of 57 labels negative), Claude Code (6 models; 6 of 30 labels negative), Windsurf (5 models; 7 of 37 labels negative)
- **api-management**: Apigee (12 models, 2 hard; 22 of 56 labels negative), Amazon API Gateway (9 models, 2 hard; 14 of 51 labels negative), Azure API Management (9 models; 11 of 49 labels negative), MuleSoft Anypoint Platform (8 models, 4 hard; 17 of 41 labels negative)
- **application-performance-monitoring**: Dynatrace (12 models, 4 hard; 23 of 54 labels negative), Datadog APM (12 models, 2 hard; 19 of 65 labels negative), New Relic (10 models; 10 of 69 labels negative), AppDynamics (9 models, 3 hard; 13 of 25 labels negative)
- **backup-and-disaster-recovery**: Rubrik Security Cloud (5 models, 1 hard; 6 of 33 labels negative), Dropbox (4 models, 4 hard; 4 of 4 labels negative), Veeam Backup & Replication (4 models; 4 of 8 labels negative), Google Drive (3 models, 3 hard; 3 of 4 labels negative)
- **business-password-managers**: LastPass (12 models, 17 hard; 28 of 43 labels negative), Dashlane (7 models, 2 hard; 12 of 49 labels negative), 1Password (6 models, 3 hard; 7 of 68 labels negative), Google Password Manager (4 models, 2 hard; 4 of 4 labels negative)
- **cloud-cost-management**: IBM Apptio Cloudability (10 models, 3 hard; 18 of 45 labels negative), VMware Tanzu CloudHealth (9 models, 3 hard; 17 of 35 labels negative), AWS Cost Explorer (9 models, 1 hard; 13 of 38 labels negative), Google Cloud Billing (6 models; 6 of 12 labels negative)
- **compliance-automation**: Vanta (10 models, 4 hard; 13 of 66 labels negative), Drata (9 models, 2 hard; 12 of 65 labels negative), MetricStream (4 models; 5 of 8 labels negative), Archer (3 models, 2 hard; 4 of 5 labels negative)
- **content-delivery-networks**: Akamai (9 models, 1 hard; 18 of 49 labels negative), Fastly (8 models; 10 of 58 labels negative), Amazon CloudFront (6 models; 7 of 61 labels negative), Cloudflare (5 models; 5 of 71 labels negative)
- **customer-identity-and-access-management**: Ping Identity (10 models, 6 hard; 11 of 28 labels negative), Auth0 (10 models, 5 hard; 20 of 70 labels negative), Amazon Cognito (9 models, 2 hard; 11 of 41 labels negative), Okta (8 models, 4 hard; 11 of 14 labels negative)
- **data-warehouses**: Snowflake (14 models, 1 hard; 18 of 77 labels negative), Amazon Redshift (11 models, 1 hard; 12 of 74 labels negative), Google BigQuery (11 models; 11 of 78 labels negative), Azure Synapse Analytics (8 models, 3 hard; 8 of 32 labels negative)
- **etl-and-elt**: Talend (10 models, 8 hard; 14 of 36 labels negative), Informatica PowerCenter (7 models, 3 hard; 8 of 13 labels negative), Microsoft SQL Server Integration Services (6 models, 3 hard; 7 of 9 labels negative), Fivetran (6 models, 1 hard; 7 of 57 labels negative)
- **sase-platforms**: Palo Alto Networks Prisma SASE (11 models, 3 hard; 20 of 44 labels negative), Cisco (10 models, 2 hard; 10 of 17 labels negative), Cloudflare One (9 models, 2 hard; 10 of 52 labels negative), Zscaler Zero Trust Exchange (9 models; 15 of 43 labels negative)

## Leadership and criticism

First-choice share and negative label rate are independent, so every product with at least 10 labels in a category is placed on both axes. Cutoffs: leader at 30% or more of first choices, criticized at 25% or more negative labels. An endorsed leader is recommended and not criticized; a criticized default is recommended while the models list its problems; a criticized challenger is named mostly to be warned against.

| Category | Product | First-choice share | Negative rate | Labels | Quadrant |
|---|---|---|---|---|---|
| ai-coding-assistants | GitHub Copilot | 65% | 17% | 72 | endorsed leader |
| ai-coding-assistants | Windsurf | 10% | 19% | 37 | accepted challenger |
| ai-coding-assistants | JetBrains AI Assistant | 4% | 0% | 11 | accepted challenger |
| ai-coding-assistants | Continue | 4% | 0% | 11 | accepted challenger |
| ai-coding-assistants | Cline | 4% | 10% | 10 | accepted challenger |
| ai-coding-assistants | Cursor | 2% | 19% | 57 | accepted challenger |
| ai-coding-assistants | Claude Code | 2% | 20% | 30 | accepted challenger |
| ai-coding-assistants | Tabnine | 0% | 0% | 34 | accepted challenger |
| ai-coding-assistants | Amazon Q Developer | 0% | 12% | 40 | accepted challenger |
| ai-coding-assistants | Replit AI | 0% | 18% | 11 | accepted challenger |
| ai-coding-assistants | Aider | 0% | 27% | 11 | criticized challenger |
| api-management | Kong Gateway | 45% | 13% | 75 | endorsed leader |
| api-management | Tyk | 20% | 6% | 35 | accepted challenger |
| api-management | Postman | 7% | 35% | 17 | criticized challenger |
| api-management | Gravitee | 5% | 0% | 27 | accepted challenger |
| api-management | Amazon API Gateway | 5% | 27% | 51 | criticized challenger |
| api-management | WSO2 API Manager | 4% | 11% | 18 | accepted challenger |
| api-management | MuleSoft Anypoint Platform | 2% | 41% | 41 | criticized challenger |
| api-management | Azure API Management | 0% | 22% | 49 | accepted challenger |
| api-management | IBM API Connect | 0% | 24% | 25 | accepted challenger |
| api-management | Apigee | 0% | 39% | 56 | criticized challenger |
| application-performance-monitoring | New Relic | 57% | 14% | 69 | endorsed leader |
| application-performance-monitoring | Datadog APM | 14% | 29% | 65 | criticized challenger |
| application-performance-monitoring | IBM Instana | 8% | 8% | 13 | accepted challenger |
| application-performance-monitoring | SigNoz | 6% | 0% | 25 | accepted challenger |
| application-performance-monitoring | ManageEngine Applications Manager | 4% | 0% | 12 | accepted challenger |
| application-performance-monitoring | Grafana Cloud | 0% | 7% | 28 | accepted challenger |
| application-performance-monitoring | Honeycomb | 0% | 8% | 12 | accepted challenger |
| application-performance-monitoring | Elastic APM | 0% | 12% | 26 | accepted challenger |
| application-performance-monitoring | Dynatrace | 0% | 43% | 54 | criticized challenger |
| application-performance-monitoring | AppDynamics | 0% | 52% | 25 | criticized challenger |
| backup-and-disaster-recovery | Veeam Data Platform | 40% | 0% | 44 | endorsed leader |
| backup-and-disaster-recovery | Druva Data Security Cloud | 16% | 0% | 34 | accepted challenger |
| backup-and-disaster-recovery | Acronis Cyber Protect | 3% | 3% | 29 | accepted challenger |
| backup-and-disaster-recovery | Rubrik Security Cloud | 3% | 18% | 33 | accepted challenger |
| backup-and-disaster-recovery | Commvault | 2% | 4% | 23 | accepted challenger |
| backup-and-disaster-recovery | Datto SIRIS | 2% | 6% | 18 | accepted challenger |
| backup-and-disaster-recovery | Cohesity DataProtect | 2% | 12% | 26 | accepted challenger |
| business-password-managers | 1Password | 54% | 10% | 68 | endorsed leader |
| business-password-managers | Bitwarden | 32% | 4% | 68 | endorsed leader |
| business-password-managers | Keeper Security | 4% | 0% | 50 | accepted challenger |
| business-password-managers | RoboForm | 4% | 8% | 12 | accepted challenger |
| business-password-managers | NordPass | 2% | 4% | 28 | accepted challenger |
| business-password-managers | Zoho Vault | 2% | 20% | 10 | accepted challenger |
| business-password-managers | LastPass | 2% | 65% | 43 | criticized challenger |
| business-password-managers | Dashlane | 0% | 24% | 49 | accepted challenger |
| cloud-cost-management | Vantage | 40% | 2% | 47 | endorsed leader |
| cloud-cost-management | CloudZero | 14% | 8% | 52 | accepted challenger |
| cloud-cost-management | Finout | 10% | 10% | 30 | accepted challenger |
| cloud-cost-management | AWS Cost Explorer | 8% | 34% | 38 | criticized challenger |
| cloud-cost-management | Microsoft Cost Management | 6% | 26% | 27 | criticized challenger |
| cloud-cost-management | Harness Cloud Cost Management | 2% | 0% | 11 | accepted challenger |
| cloud-cost-management | CAST AI | 2% | 10% | 20 | accepted challenger |
| cloud-cost-management | Spot by NetApp | 2% | 17% | 12 | accepted challenger |
| cloud-cost-management | Flexera One | 2% | 29% | 21 | criticized challenger |
| cloud-cost-management | IBM Apptio Cloudability | 2% | 40% | 45 | criticized challenger |
| cloud-cost-management | VMware Tanzu CloudHealth | 2% | 49% | 35 | criticized challenger |
| cloud-cost-management | Google Cloud Billing | 2% | 50% | 12 | criticized challenger |
| cloud-cost-management | nOps | 0% | 5% | 21 | accepted challenger |
| cloud-cost-management | OpenCost | 0% | 10% | 10 | accepted challenger |
| cloud-cost-management | Kubecost | 0% | 12% | 25 | accepted challenger |
| cloud-cost-management | ProsperOps | 0% | 16% | 19 | accepted challenger |
| compliance-automation | Drata | 38% | 18% | 65 | endorsed leader |
| compliance-automation | Vanta | 21% | 20% | 66 | accepted challenger |
| compliance-automation | Sprinto | 17% | 2% | 49 | accepted challenger |
| compliance-automation | Secureframe | 8% | 6% | 54 | accepted challenger |
| compliance-automation | Scrut Automation | 2% | 0% | 19 | accepted challenger |
| compliance-automation | Scytale | 0% | 7% | 14 | accepted challenger |
| compliance-automation | Hyperproof | 0% | 10% | 30 | accepted challenger |
| compliance-automation | Thoropass | 0% | 11% | 19 | accepted challenger |
| compliance-automation | OneTrust Tech Risk & Compliance | 0% | 40% | 10 | criticized challenger |
| content-delivery-networks | Cloudflare | 73% | 7% | 71 | endorsed leader |
| content-delivery-networks | Bunny.net | 14% | 2% | 41 | accepted challenger |
| content-delivery-networks | KeyCDN | 4% | 0% | 28 | accepted challenger |
| content-delivery-networks | Fastly | 4% | 17% | 58 | accepted challenger |
| content-delivery-networks | Amazon CloudFront | 2% | 11% | 61 | accepted challenger |
| content-delivery-networks | CDN77 | 0% | 0% | 10 | accepted challenger |
| content-delivery-networks | Google Cloud CDN | 0% | 9% | 22 | accepted challenger |
| content-delivery-networks | Akamai | 0% | 37% | 49 | criticized challenger |
| customer-identity-and-access-management | Frontegg | 19% | 3% | 33 | accepted challenger |
| customer-identity-and-access-management | Clerk | 19% | 7% | 30 | accepted challenger |
| customer-identity-and-access-management | Auth0 | 15% | 29% | 70 | criticized challenger |
| customer-identity-and-access-management | WorkOS | 13% | 3% | 29 | accepted challenger |
| customer-identity-and-access-management | Descope | 5% | 0% | 27 | accepted challenger |
| customer-identity-and-access-management | Amazon Cognito | 5% | 27% | 41 | criticized challenger |
| customer-identity-and-access-management | LoginRadius | 3% | 6% | 18 | accepted challenger |
| customer-identity-and-access-management | Keycloak | 2% | 5% | 20 | accepted challenger |
| customer-identity-and-access-management | Stytch | 2% | 9% | 22 | accepted challenger |
| customer-identity-and-access-management | FusionAuth | 2% | 13% | 15 | accepted challenger |
| customer-identity-and-access-management | Ping Identity | 2% | 39% | 28 | criticized challenger |
| customer-identity-and-access-management | Microsoft Entra External ID | 0% | 21% | 39 | accepted challenger |
| customer-identity-and-access-management | Okta | 0% | 79% | 14 | criticized challenger |
| data-warehouses | Snowflake | 54% | 23% | 77 | endorsed leader |
| data-warehouses | Google BigQuery | 40% | 14% | 78 | endorsed leader |
| data-warehouses | Amazon Redshift | 6% | 16% | 74 | accepted challenger |
| data-warehouses | Microsoft Fabric Data Warehouse | 0% | 10% | 20 | accepted challenger |
| data-warehouses | Databricks SQL | 0% | 17% | 42 | accepted challenger |
| data-warehouses | ClickHouse Cloud | 0% | 18% | 22 | accepted challenger |
| data-warehouses | Azure Synapse Analytics | 0% | 25% | 32 | criticized challenger |
| etl-and-elt | Fivetran | 35% | 12% | 57 | endorsed leader |
| etl-and-elt | Airbyte | 31% | 5% | 63 | endorsed leader |
| etl-and-elt | Integrate.io | 11% | 0% | 19 | accepted challenger |
| etl-and-elt | Hevo Data | 7% | 6% | 32 | accepted challenger |
| etl-and-elt | Skyvia | 4% | 10% | 10 | accepted challenger |
| etl-and-elt | Stitch | 4% | 25% | 24 | criticized challenger |
| etl-and-elt | Apache Airflow | 2% | 10% | 21 | accepted challenger |
| etl-and-elt | Meltano | 0% | 0% | 17 | accepted challenger |
| etl-and-elt | dbt | 0% | 3% | 33 | accepted challenger |
| etl-and-elt | Azure Data Factory | 0% | 7% | 15 | accepted challenger |
| etl-and-elt | Matillion | 0% | 10% | 30 | accepted challenger |
| etl-and-elt | AWS Glue | 0% | 15% | 20 | accepted challenger |
| etl-and-elt | Apache NiFi | 0% | 20% | 10 | accepted challenger |
| etl-and-elt | Talend | 0% | 39% | 36 | criticized challenger |
| etl-and-elt | Informatica Intelligent Data Management Cloud | 0% | 40% | 15 | criticized challenger |
| etl-and-elt | Informatica PowerCenter | 0% | 62% | 13 | criticized challenger |
| sase-platforms | Cato Networks | 35% | 11% | 38 | endorsed leader |
| sase-platforms | Cloudflare One | 20% | 19% | 52 | accepted challenger |
| sase-platforms | Cato SASE Cloud | 17% | 17% | 23 | accepted challenger |
| sase-platforms | Fortinet FortiSASE | 15% | 11% | 56 | accepted challenger |
| sase-platforms | Netskope One | 6% | 10% | 50 | accepted challenger |
| sase-platforms | Cisco Secure Access | 2% | 0% | 11 | accepted challenger |
| sase-platforms | Check Point Harmony SASE | 2% | 38% | 16 | criticized challenger |
| sase-platforms | Versa SASE | 0% | 12% | 17 | accepted challenger |
| sase-platforms | Zscaler Zero Trust Exchange | 0% | 35% | 43 | criticized challenger |
| sase-platforms | Palo Alto Networks Prisma SASE | 0% | 45% | 44 | criticized challenger |
| sase-platforms | Cisco | 0% | 59% | 17 | criticized challenger |

## Treatment of lab-affiliated products by model

Self-preference is only measurable with a control group: how the lab's own model treats its products compared with how every other model treats the same products.  have no products in the covered categories with enough labels to measure, so nothing is claimed about them.

**Anthropic products** (2 products, 33 labels). Cells are positive/negative/all labels.

| Product | Claude Haiku 4.5 | GPT-5.4 mini | Gemini 3.5 Flash | Perplexity Sonar | Grok 4.1 Fast | Mistral Small | DeepSeek V4 Flash | Llama 4 Maverick | Qwen 3.7 Flash | Kimi K2 | GLM 4.7 FlashX | MiniMax M2.5 | GPT-6 Luna | Muse Glimmer 30B |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Claude Code | 1/0/1 | 2/0/2 | 1/1/2 | 2/0/2 | 2/1/3 | 1/0/1 | 3/0/3 | 3/0/3 | 0/1/1 | 1/0/1 | 3/1/4 | 1/1/2 | 1/0/1 | 3/1/4 |
| Claude | 1/0/1 | 1/0/1 |  |  |  |  |  |  |  |  | 1/0/1 |  |  |  |

Mean label weight on Anthropic products: Claude Haiku 4.5 +2.50 over 2 labels; the other 13 models +1.06 over 31 labels. Weights run from +3 (first choice) to -3 (hard negative). A gap under about half a point on this few labels is not a finding.

**OpenAI products** (2 products, 13 labels). Cells are positive/negative/all labels.

| Product | Claude Haiku 4.5 | GPT-5.4 mini | Gemini 3.5 Flash | Perplexity Sonar | Grok 4.1 Fast | Mistral Small | DeepSeek V4 Flash | Llama 4 Maverick | Qwen 3.7 Flash | Kimi K2 | GLM 4.7 FlashX | MiniMax M2.5 | GPT-6 Luna | Muse Glimmer 30B |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ChatGPT | 0/1/1 | 1/0/1 |  |  | 1/0/1 |  |  |  |  |  | 1/1/2 | 1/0/1 |  | 1/1/2 |
| OpenAI Codex |  | 1/0/1 |  |  |  |  | 0/1/1 |  |  |  |  |  | 1/1/2 | 0/1/1 |

Mean label weight on OpenAI products: GPT-5.4 mini, GPT-6 Luna +1.00 over 4 labels; the other 12 models -0.67 over 9 labels. Weights run from +3 (first choice) to -3 (hard negative). A gap under about half a point on this few labels is not a finding.

**Google products** (22 products, 233 labels). Cells are positive/negative/all labels.

| Product | Claude Haiku 4.5 | GPT-5.4 mini | Gemini 3.5 Flash | Perplexity Sonar | Grok 4.1 Fast | Mistral Small | DeepSeek V4 Flash | Llama 4 Maverick | Qwen 3.7 Flash | Kimi K2 | GLM 4.7 FlashX | MiniMax M2.5 | GPT-6 Luna | Muse Glimmer 30B |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Google BigQuery | 6/1/7 | 5/1/6 | 5/1/6 | 3/1/4 | 6/1/7 | 5/1/6 | 5/1/6 | 4/0/4 | 5/1/6 | 6/0/6 | 6/1/7 | 6/0/6 | 6/1/7 | 4/1/5 |
| Apigee | 1/1/2 | 4/1/5 | 1/4/5 | 2/2/4 | 4/2/6 | 3/1/4 | 2/3/5 | 3/0/3 | 2/3/5 | 4/0/4 | 1/1/2 | 1/2/3 | 2/1/3 | 4/1/5 |
| Google Cloud CDN | 1/0/1 | 1/0/1 | 1/0/1 | 1/0/1 | 2/1/3 | 2/0/2 | 1/1/2 | 1/0/1 | 1/0/1 | 1/0/1 | 2/0/2 | 3/0/3 | 1/0/1 | 2/0/2 |
| Google Cloud Billing |  | 1/0/1 | 1/1/2 |  | 1/0/1 | 0/1/1 |  | 0/1/1 | 0/1/1 | 0/1/1 |  | 3/0/3 |  | 0/1/1 |
| Firebase Authentication | 0/1/1 |  | 0/1/1 |  | 2/0/2 |  |  | 1/0/1 |  | 2/1/3 |  |  | 1/0/1 |  |
| Google Cloud Dataflow | 1/0/1 |  |  |  | 1/0/1 | 1/0/1 | 1/0/1 | 1/0/1 |  | 1/0/1 |  | 1/1/2 |  | 1/0/1 |
| Gemini Code Assist |  | 1/1/2 |  | 2/0/2 | 2/0/2 |  |  |  | 1/0/1 |  | 1/0/1 |  |  |  |
| Google Cloud Cost Management | 1/0/1 |  |  | 1/0/1 |  | 1/0/1 | 1/0/1 |  |  |  | 1/0/1 |  |  | 1/0/1 |
| Google Cloud Identity | 2/0/2 |  |  |  | 1/0/1 | 1/0/1 |  |  |  | 1/0/1 |  |  |  |  |
| Google Password Manager |  |  | 0/1/1 | 0/1/1 |  |  | 0/1/1 |  | 0/1/1 |  |  |  |  |  |
| Google Drive |  |  | 0/1/1 |  |  |  | 0/1/1 |  | 0/1/1 |  |  | 1/0/1 |  |  |
| Google Gemini |  |  | 0/1/1 |  |  |  | 0/1/1 |  |  |  |  | 1/0/1 |  |  |
| Google Cloud | 1/0/1 |  |  |  | 1/0/1 |  |  |  |  |  |  |  |  |  |
| Google Cloud Endpoints |  |  |  |  |  |  |  |  | 0/1/1 | 0/1/1 |  |  |  |  |
| Google Identity Platform |  |  |  |  |  |  |  |  |  |  |  |  | 1/0/1 |  |
| GCP |  |  |  |  |  |  |  |  | 1/0/1 |  |  |  |  |  |
| Google Hosted Libraries |  |  | 0/1/1 |  |  |  |  |  |  |  |  |  |  |  |
| Google Cloud Backup and DR Service |  |  |  |  |  |  |  |  |  | 1/0/1 |  |  |  |  |
| Google Workspace |  |  | 0/1/1 |  |  |  |  |  |  |  |  |  |  |  |
| Google Cloud API Gateway |  |  |  |  |  |  |  |  |  |  |  | 1/0/1 |  |  |
| Google Cloud Data Fusion |  |  |  |  |  |  |  |  |  |  |  |  | 1/0/1 |  |
| Google Antigravity |  |  |  |  |  |  |  |  |  |  |  |  | 1/0/1 |  |

Mean label weight on Google products: Gemini 3.5 Flash -0.65 over 20 labels; the other 13 models +0.92 over 213 labels. Weights run from +3 (first choice) to -3 (hard negative). A gap under about half a point on this few labels is not a finding.

## Discontinued products recommended

None in this run.

## Normalization

Unresolved, 236 labels counted under the raw name, for human review:

StarRocks in data-warehouses (3), UrBackup in backup-and-disaster-recovery (3), CBackup in backup-and-disaster-recovery (2), Cursor agent mode in ai-coding-assistants (2), EaseUS Todo Backup Free in backup-and-disaster-recovery (2), Jimber in sase-platforms (2), Jitterbit Harmony in api-management (2), OneLogin CIAM in customer-identity-and-access-management (2), Pinpoint in application-performance-monitoring (2), Qodo Gen in ai-coding-assistants (2), Sourcegraph in ai-coding-assistants (2), Striim in etl-and-elt (2), Webflow CDN in content-delivery-networks (2), Windows Backup in backup-and-disaster-recovery (2), ZenGRC Free Edition in compliance-automation (2), 1Kosmos BlockID Customer in customer-identity-and-access-management (1), 1Password Personal in business-password-managers (1), AI Dev Helper in ai-coding-assistants (1), AJT Compliance in compliance-automation (1), AOMEI Backupper in backup-and-disaster-recovery (1), AOMEI Backupper Standard in backup-and-disaster-recovery (1), API Gateway in api-management (1), API7.ai in api-management (1), APPSeCONNECT in api-management (1), AT&T Business Managed SASE Cybersecurity Network Solution in sase-platforms (1), AT&T Managed SASE in sase-platforms (1), AWS AppSync in api-management (1), AWS EC2 snapshots in backup-and-disaster-recovery (1), Acronis Cyber Protect Home & Business in backup-and-disaster-recovery (1), Akamai's CIAM in customer-identity-and-access-management (1), All-in-One WP Migration and Backup in backup-and-disaster-recovery (1), Altaro VM Backup Free Edition in backup-and-disaster-recovery (1), Amanda in backup-and-disaster-recovery (1), Amazon Lightsail CDN in content-delivery-networks (1), Amazon QLDB in data-warehouses (1), Amplify in api-management (1), Apache Hadoop in etl-and-elt (1), Apiable in api-management (1), Apiable API Portal-as-a-Service in api-management (1), Aporeto in api-management (1), AppDynamics, now Splunk Observability Cloud in application-performance-monitoring (1), Arcserve Continuous Availability in backup-and-disaster-recovery (1), Ascent in compliance-automation (1), AutoCoder 3000 in ai-coding-assistants (1), Azure Data Factory (ADF) Mapping Data Flows in etl-and-elt (1), Azure SQL Data Warehouse / Synapse-style Microsoft stack options in data-warehouses (1), Azure pricing calculator in cloud-cost-management (1), BDRShield in backup-and-disaster-recovery (1), Bacula Community in backup-and-disaster-recovery (1), Bareos in backup-and-disaster-recovery (1), Better Auth in customer-identity-and-access-management (1), Blackbox AI in ai-coding-assistants (1), Broadcom CloudHealth (VMware Aria Cost) in cloud-cost-management (1), Broadcom VMware Aria CloudHealth in cloud-cost-management (1), Built-in browser password managers in business-password-managers (1), CMIT Solutions Denver in backup-and-disaster-recovery (1), CTERA in backup-and-disaster-recovery (1), Carbonite Cloud Backup in backup-and-disaster-recovery (1), Carbonite Recover in backup-and-disaster-recovery (1), Carbonite Recover (DRaaS) in backup-and-disaster-recovery (1), CastAI in cloud-cost-management (1), China Telecom in content-delivery-networks (1), Cisco Secure Access Service Edge (SASE) in sase-platforms (1), Clonezilla in backup-and-disaster-recovery (1), Cloud Billing + Cost Management in cloud-cost-management (1), Cloud Health (by Broadcom/VMware) in cloud-cost-management (1), Cloud Postgres / MySQL / SQL Server (Used as Analytical DWH) in data-warehouses (1), CloudAlly in backup-and-disaster-recovery (1), CloudFix in cloud-cost-management (1), Cloudchkr in cloud-cost-management (1), Cloudera Data Warehouse (CDW) on Cloud in data-warehouses (1), Cloudflare Business plan in content-delivery-networks (1), Cloudflare One with Cloudflare WAN in sase-platforms (1), Cloudshot in cloud-cost-management (1), CodeBuddy in ai-coding-assistants (1), CodeGen Pro in ai-coding-assistants (1), CodeHelper AI in ai-coding-assistants (1), CodeRabbit in ai-coding-assistants (1), Coefficient in etl-and-elt (1), Cohesity Data Management Platform in backup-and-disaster-recovery (1), Commvault Complete Backup in backup-and-disaster-recovery (1), Commvault Complete Data Platform in backup-and-disaster-recovery (1), Convercent in compliance-automation (1), Cost Optimization Hub in cloud-cost-management (1), Cursor Agent Mode in ai-coding-assistants (1), CustomerLabs 1PD Ops in customer-identity-and-access-management (1), Dashlane Password Management in business-password-managers (1), Databricks SQL warehouses in data-warehouses (1), Datadog Cloud Cost in cloud-cost-management (1), Datto Endpoint Backup in backup-and-disaster-recovery (1), Debezium in etl-and-elt (1), DeepSeek API in ai-coding-assistants (1), Default in etl-and-elt (1), DigitalAPI API Developer Portal in api-management (1), Equally.ai in compliance-automation (1), FalconStor in backup-and-disaster-recovery (1), FitGap's Tiered Packages in compliance-automation (1), GCP Cost Tools in cloud-cost-management (1), GPT-4 in ai-coding-assistants (1), Gemini CLI in ai-coding-assistants (1), GitHub Copilot Business or Enterprise in ai-coding-assistants (1), GitHub Copilot Free, Pro, Pro+, or Max in ai-coding-assistants (1), Google APIs in content-delivery-networks (1), Google Cloud DR in backup-and-disaster-recovery (1), Google Cloud Dataform in etl-and-elt (1), Google Cloud billing tools in cloud-cost-management (1), Google Cloud – Document AI Warehouse in data-warehouses (1), Google Cloud: Billing APIs in cloud-cost-management (1), Google's Gemini in ai-coding-assistants (1), Google’s Gemini Code Assist in ai-coding-assistants (1), Graphite Agent in ai-coding-assistants (1), Gravitee API Platform in api-management (1), G‑Core Labs in content-delivery-networks (1), Harness CACM in cloud-cost-management (1), IBM Cloud CDN in content-delivery-networks (1), IBM DataSphere in etl-and-elt (1), IBM StreamSets in etl-and-elt (1), IBM's Cloudability in cloud-cost-management (1), IDrive Online in backup-and-disaster-recovery (1), Immutable Cloud in backup-and-disaster-recovery (1), Isms. Online in compliance-automation (1), JetBrains in ai-coding-assistants (1), Jotform in compliance-automation (1), Keel (Keel GRC) in compliance-automation (1), Keeper for Business in business-password-managers (1), Kilo in ai-coding-assistants (1), Kimi Code in ai-coding-assistants (1), Kion in cloud-cost-management (1), Klaviyo in customer-identity-and-access-management (1), LogMeOnce in business-password-managers (1), Lovable.dev in ai-coding-assistants (1), MS Edge in business-password-managers (1), Mashlayer / Stoplight in api-management (1), MaxCDN in content-delivery-networks (1), Media CDN in content-delivery-networks (1), Microsoft BizTalk Server (on-prem) in api-management (1), Microsoft Fabric Data Factory / Azure Data Factory in etl-and-elt (1), Microsoft Global Secure Access (Entra Suite) in sase-platforms (1), Monmouth Cyber in backup-and-disaster-recovery (1), MuleSoft Anypoint Platform API Management in api-management (1), N2W in backup-and-disaster-recovery (1), Nakivo Backup and Replication in backup-and-disaster-recovery (1), NetApp Spot by NetApp in cloud-cost-management (1), New Relic Cloud Cost in cloud-cost-management (1), New Relic Cloud Cost Management in cloud-cost-management (1), NextAuth.js in customer-identity-and-access-management (1), NordPass Personal in business-password-managers (1), Nutanix Beam in cloud-cost-management (1), OBI in etl-and-elt (1), OCI API Gateway in api-management (1), OneDrive for Business in backup-and-disaster-recovery (1), OpenAI's GPT in ai-coding-assistants (1), OpenAI’s ChatGPT in ai-coding-assistants (1), OpenText CloudAlly in backup-and-disaster-recovery (1), Optro formerly AuditBoard in compliance-automation (1), Oracle API Platform Cloud Service in api-management (1), Oracle APM in application-performance-monitoring (1), Oracle Autonomous in data-warehouses (1), Oracle WebLogic in api-management (1), Passage in customer-identity-and-access-management (1), PingOne Advanced Identity Cloud in customer-identity-and-access-management (1), Pinot in data-warehouses (1), Portable in etl-and-elt (1), Pricing Calculator in cloud-cost-management (1), Python + orchestrator (Airflow) in etl-and-elt (1), Python/Airflow in etl-and-elt (1), Qlik Talend Data Integration in etl-and-elt (1), QuickCode Pro in ai-coding-assistants (1), QuickScript in ai-coding-assistants (1), Quickwit in application-performance-monitoring (1), Regulativ AI in compliance-automation (1), Riverbed APM in application-performance-monitoring (1), SAP CIAM in customer-identity-and-access-management (1), SAP Data Warehouse Cloud in data-warehouses (1), SaaS Backup in backup-and-disaster-recovery (1), Salesforce CIAM / Customer 360-style offerings in customer-identity-and-access-management (1), Salesforce Headless 360 Platform (Identity) in customer-identity-and-access-management (1), Salesforce Identity in customer-identity-and-access-management (1), Salesforce's Customer Identity platform in customer-identity-and-access-management (1), Secure Data: Backup Planning and Management Services in backup-and-disaster-recovery (1), ServiceNow Archer in compliance-automation (1), Skyhigh in sase-platforms (1), SmartCode AI in ai-coding-assistants (1), SolarWinds Server and Application Monitor in application-performance-monitoring (1), Sprintly in compliance-automation (1), Sticky Password for Teams in business-password-managers (1), Storware in backup-and-disaster-recovery (1), Synapse Analytics in data-warehouses (1), Synology C2 in backup-and-disaster-recovery (1), Tableau Prep in etl-and-elt (1), Thomson Reuters Regulatory Intelligence in compliance-automation (1), Traditional Amazon Redshift (Provisioned) in data-warehouses (1), Transcend in compliance-automation (1), Trello in compliance-automation (1), Trilio in backup-and-disaster-recovery (1), TrustArc in compliance-automation (1), Unitrends Backup Appliances in backup-and-disaster-recovery (1), UpdraftPlus WP Backup & Migration Plugin in backup-and-disaster-recovery (1), VMware Live Recovery in backup-and-disaster-recovery (1), VS Code in ai-coding-assistants (1), Veeam Agent for Microsoft Windows FREE in backup-and-disaster-recovery (1), Veeam Community in backup-and-disaster-recovery (1), Web Browsers' Built-in "Auto-Fill" (e.g., Chrome, Edge, Safari) in business-password-managers (1), Xplenty in etl-and-elt (1), Xplenty (Integrate.io) in etl-and-elt (1), Zerto Platform in backup-and-disaster-recovery (1), Zhipu AI's ZCode (Z.ai) in ai-coding-assistants (1), Zscaler Zero Trust Exchange Platform in sase-platforms (1), Zscaler Zero-Trust Exchange in sase-platforms (1), Zuplo Builder in api-management (1), bootcdn.net in content-delivery-networks (1), bootcss.com in content-delivery-networks (1), iAuditor in compliance-automation (1), jsdelivr.net in content-delivery-networks (1), native AWS/Azure/GCP tools in cloud-cost-management (1), public CDNs in content-delivery-networks (1), rclone in backup-and-disaster-recovery (1), staticfile.org in content-delivery-networks (1), v0.dev in ai-coding-assistants (1)

Category-scoped resolutions, 638 labels. A bare vendor name was read as that vendor's product for the asked category, which assigns specificity the model did not write; each one is listed so the assumption is visible:

Datadog in application-performance-monitoring read as Datadog APM (61), Databricks in data-warehouses read as Databricks SQL (30), Keeper in business-password-managers read as Keeper Security (29), Zscaler in sase-platforms read as Zscaler Zero Trust Exchange (29), Netskope in sase-platforms read as Netskope One (28), Kong in api-management read as Kong Gateway (23), Rubrik in backup-and-disaster-recovery read as Rubrik Security Cloud (22), Cohesity in backup-and-disaster-recovery read as Cohesity DataProtect (19), Cloudflare in sase-platforms read as Cloudflare One (16), Fortinet in sase-platforms read as Fortinet FortiSASE (15), Veeam in backup-and-disaster-recovery read as Veeam Data Platform (15), Azure Synapse in data-warehouses read as Azure Synapse Analytics (14), Druva in backup-and-disaster-recovery read as Druva Data Security Cloud (13), Palo Alto Networks in sase-platforms read as Palo Alto Networks Prisma SASE (13), Microsoft Fabric in data-warehouses read as Microsoft Fabric Data Warehouse (12), Fortinet (FortiSASE) in sase-platforms read as Fortinet FortiSASE (11), MuleSoft in api-management read as MuleSoft Anypoint Platform (11), OneTrust in compliance-automation read as OneTrust Tech Risk & Compliance (10), Cato Networks SASE Cloud in sase-platforms read as Cato SASE Cloud (9), Hevo in etl-and-elt read as Hevo Data (9), Informatica in etl-and-elt read as Informatica Intelligent Data Management Cloud (9), Palo Alto Networks (Prisma SASE) in sase-platforms read as Palo Alto Networks Prisma SASE (8), Cato in sase-platforms read as Cato SASE Cloud (7), Datto in backup-and-disaster-recovery read as Datto SIRIS (7), Keeper Business in business-password-managers read as Keeper Security (7), Spot by NetApp in cloud-cost-management read as Spot by NetApp (7), Axway Amplify in api-management read as Axway Amplify API Management (6), Grafana in application-performance-monitoring read as Grafana Cloud (6), WSO2 in api-management read as WSO2 API Manager (6), Acronis in backup-and-disaster-recovery read as Acronis Cyber Protect (5), Arcserve in backup-and-disaster-recovery read as Arcserve UDP (5), Estuary in etl-and-elt read as Estuary Flow (5), Flexera in cloud-cost-management read as Flexera One (5), Harness in cloud-cost-management read as Harness Cloud Cost Management (5), Replit in ai-coding-assistants read as Replit AI (5), Veritas in backup-and-disaster-recovery read as Veritas Alta Data Protection (5), Zscaler (Zero Trust Exchange) in sase-platforms read as Zscaler Zero Trust Exchange (5), Carbonite in backup-and-disaster-recovery read as Carbonite Safe (4), Databricks in etl-and-elt read as Databricks Lakeflow (4), JetBrains AI in ai-coding-assistants read as JetBrains AI Assistant (4), Keeper Business Starter in business-password-managers read as Keeper Security (4), Ping in customer-identity-and-access-management read as Ping Identity (4), Versa in sase-platforms read as Versa SASE (4), Amazon Q in ai-coding-assistants read as Amazon Q Developer (3), Axcient in backup-and-disaster-recovery read as Axcient x360Recover (3), Axway in api-management read as Axway Amplify API Management (3), Cisco AppDynamics in application-performance-monitoring read as AppDynamics (3), Flexera One FinOps in cloud-cost-management read as Flexera One (3), HYCU in backup-and-disaster-recovery read as HYCU R-Cloud (3), Kong Enterprise in api-management read as Kong Gateway (3), MuleSoft (Salesforce) in api-management read as MuleSoft Anypoint Platform (3), Netskope (Netskope One) in sase-platforms read as Netskope One (3), Palo Alto in sase-platforms read as Palo Alto Networks Prisma SASE (3), Palo Alto Networks (Prisma Access) in sase-platforms read as Palo Alto Networks Prisma SASE (3), Scrut in compliance-automation read as Scrut Automation (3), AWS in content-delivery-networks read as Amazon CloudFront (2), Azure Blob in backup-and-disaster-recovery read as Azure Blob Storage (2), Check Point in sase-platforms read as Check Point Harmony SASE (2), Check Point (Harmony SASE) in sase-platforms read as Check Point Harmony SASE (2), Cohesity Data Cloud in backup-and-disaster-recovery read as Cohesity DataProtect (2), Datadog in cloud-cost-management read as Datadog Cloud Cost Management (2), DoiT in cloud-cost-management read as DoiT Cloud Intelligence (2), Elastic in application-performance-monitoring read as Elastic APM (2), Elastic (ELK Stack) in application-performance-monitoring read as Elastic APM (2), Fabric in data-warehouses read as Microsoft Fabric Data Warehouse (2), Keeper (Business Starter) in business-password-managers read as Keeper Security (2), Keeper Enterprise in business-password-managers read as Keeper Security (2), Kong (Kong Konnect / Kong Gateway) in api-management read as Kong Gateway (2), Kong (Kong Konnect) in api-management read as Kong Gateway (2), Microsoft Fabric Warehouse in data-warehouses read as Microsoft Fabric Data Warehouse (2), Netskope (One Platform) in sase-platforms read as Netskope One (2), Ping Identity / PingOne for Customers in customer-identity-and-access-management read as Ping Identity (2), Splunk APM in application-performance-monitoring read as Splunk Observability Cloud (2), AWS in api-management read as Amazon API Gateway (1), AWS Budgets in cloud-cost-management read as AWS Cost Explorer (1), AWS Cost Explorer & Budgets in cloud-cost-management read as AWS Cost Explorer (1), AWS Cost Explorer + AWS Budgets in cloud-cost-management read as AWS Cost Explorer (1), Amazon in content-delivery-networks read as Amazon CloudFront (1), Azure in api-management read as Azure API Management (1), Check Point (Harmony Connect / Harmony SASE) in sase-platforms read as Check Point Harmony SASE (1), Cloudflare (Cloudflare One) in sase-platforms read as Cloudflare One (1), Cloudflare (One) in sase-platforms read as Cloudflare One (1), Copilot in ai-coding-assistants read as GitHub Copilot (1), Databricks (Lakehouse) in data-warehouses read as Databricks SQL (1), Databricks (SQL / Lakehouse) in data-warehouses read as Databricks SQL (1), Datto (SIRIS) in backup-and-disaster-recovery read as Datto SIRIS (1), Datto (by Kaseya) in backup-and-disaster-recovery read as Datto SIRIS (1), Druva (inSync/Phoenix) in backup-and-disaster-recovery read as Druva Data Security Cloud (1), Elastic (Elastic Stack) in application-performance-monitoring read as Elastic APM (1), Flexera (Spot + ProsperOps) in cloud-cost-management read as Flexera One (1), Flexera (formerly Spot.io / NetApp) in cloud-cost-management read as Flexera One (1), Fortinet (FortiGate/FortiSwitch) in sase-platforms read as Fortinet FortiSASE (1), Fortinet (Unified SASE) in sase-platforms read as Fortinet FortiSASE (1), Grafana Cloud / Grafana Stack in application-performance-monitoring read as Grafana Cloud (1), HPE in sase-platforms read as HPE Aruba (1), IBM in api-management read as IBM API Connect (1), Informatica (IDMC/PowerCenter) in etl-and-elt read as Informatica Intelligent Data Management Cloud (1), Informatica Cloud (IDMC) in etl-and-elt read as Informatica Intelligent Data Management Cloud (1), Informatica PowerCenter / IDMC in etl-and-elt read as Informatica Intelligent Data Management Cloud (1), Kong (Community Edition) in api-management read as Kong Gateway (1), Kong (Konghq) in api-management read as Kong Gateway (1), Kong (Konnect) in api-management read as Kong Gateway (1), Kong (Open Source) in api-management read as Kong Gateway (1), MSP360 (CloudBerry) in backup-and-disaster-recovery read as MSP360 Managed Backup (1), ManageEngine in business-password-managers read as ManageEngine Password Manager Pro (1), Microsoft Edge in business-password-managers read as Microsoft Edge Password Manager (1), Microsoft Fabric (formerly Azure Synapse Analytics) in data-warehouses read as Microsoft Fabric Data Warehouse (1), NAKIVO in backup-and-disaster-recovery read as NAKIVO Backup & Replication (1), Palo Alto Networks (Prisma) in sase-platforms read as Palo Alto Networks Prisma SASE (1), Palo Alto Networks (Strata/Prisma) in sase-platforms read as Palo Alto Networks Prisma SASE (1), Pentaho in etl-and-elt read as Pentaho Data Integration (1), Proton in business-password-managers read as Proton Pass (1), Securden in business-password-managers read as Securden Password Vault (1), ServiceNow in compliance-automation read as ServiceNow Integrated Risk Management (1), ServiceNow (GRC Module) in compliance-automation read as ServiceNow Integrated Risk Management (1), SolarWinds in application-performance-monitoring read as SolarWinds Observability (1), Spot by Flexera (formerly NetApp) in cloud-cost-management read as Spot by NetApp (1), Spot by NetApp (formerly Spotinst) in cloud-cost-management read as Spot by NetApp (1), Supabase in customer-identity-and-access-management read as Supabase Auth (1), Tencent in content-delivery-networks read as Tencent Cloud CDN (1), Teradata in data-warehouses read as Teradata Vantage (1), VMware (VeloCloud) in sase-platforms read as VMware SASE (1), Zscaler (Zero Trust SASE) in sase-platforms read as Zscaler Zero Trust Exchange (1)

Combined answers split into one label per product: AWS Backup + Amazon S3, Amazon CloudWatch / AWS Budgets (native tools), Amazon CodeWhisperer / Amazon Q Developer, Apptio/IBM, Azure AD B2C / Entra External ID, Carbonite / Quorum onQ, ChatGPT/ChatGPT Pro, Cisco Umbrella + Viptela, Claude Code / Claude Enterprise, Cloudflare Zero Trust / Cloudflare One, DoiT/CloudKeeper, Elastic Observability / Elastic APM, Firebase Authentication / Google Identity Platform, Flexera One / Spot by NetApp, Flexera One FinOps / Flexera, Google Cloud Dataflow/BigQuery, Grafana Cloud / Prometheus, Grafana Cloud / Tempo, Grafana Loki + Prometheus + OpenTelemetry, Groundcover / Last9, IBM Cloudability / Apptio Cloudability, JetBrains AI Assistant / Junie, KeePass / KeePassXC, Kettle/Pentaho, Kong Enterprise/Kong Gateway, Lightstep/Chronosphere, LoginRadius / Strivacity, Make/Zapier Enterprise, Microsoft Defender for Endpoint + Entra ID (formerly Azure AD), Microsoft Fabric & Azure Synapse, Microsoft Fabric / Azure Synapse Analytics, Norton Password Manager / Norton LifeLock, Okta Customer Identity Cloud / Auth0, Palo Alto Networks Prisma Access / Prisma SASE, ProsperOps/nOps, Qlik Talend Cloud / Talend, SigNoz / Grafana (LGTM stack), Symantec/Veritas, Talend / Qlik Talend Cloud, Talend Data Fabric / Talend Cloud, VMware CloudHealth / CloudHealth by Broadcom / VMware Aria Cost, Windsurf / Devin Desktop, Zscaler Zero Trust Exchange / Zscaler Private Access, nOps/CAST AI

## Appendix: loose paraphrase stability

- Claude Haiku 4.5: a direct first choice kept as first choice or alternative in 8 of 11 categories (73%); differing under the strict rule: ai-coding-assistants, api-management, backup-and-disaster-recovery, business-password-managers, customer-identity-and-access-management, data-warehouses, etl-and-elt
- GPT-5.4 mini: a direct first choice kept as first choice or alternative in 8 of 12 categories (67%); differing under the strict rule: ai-coding-assistants, application-performance-monitoring, backup-and-disaster-recovery, cloud-cost-management, compliance-automation, customer-identity-and-access-management, etl-and-elt, sase-platforms
- Gemini 3.5 Flash: a direct first choice kept as first choice or alternative in 12 of 12 categories (100%); differing under the strict rule: ai-coding-assistants, api-management, backup-and-disaster-recovery, cloud-cost-management, compliance-automation, customer-identity-and-access-management, data-warehouses, etl-and-elt
- Perplexity Sonar: a direct first choice kept as first choice or alternative in 9 of 12 categories (75%); differing under the strict rule: api-management, application-performance-monitoring, backup-and-disaster-recovery, cloud-cost-management, customer-identity-and-access-management, sase-platforms
- Grok 4.1 Fast: a direct first choice kept as first choice or alternative in 9 of 12 categories (75%); differing under the strict rule: application-performance-monitoring, backup-and-disaster-recovery, business-password-managers, cloud-cost-management, compliance-automation, customer-identity-and-access-management, etl-and-elt
- Mistral Small: a direct first choice kept as first choice or alternative in 8 of 12 categories (67%); differing under the strict rule: ai-coding-assistants, api-management, application-performance-monitoring, backup-and-disaster-recovery, cloud-cost-management, compliance-automation, customer-identity-and-access-management, etl-and-elt, sase-platforms
- DeepSeek V4 Flash: a direct first choice kept as first choice or alternative in 9 of 12 categories (75%); differing under the strict rule: api-management, compliance-automation, customer-identity-and-access-management, etl-and-elt, sase-platforms
- Llama 4 Maverick: a direct first choice kept as first choice or alternative in 1 of 7 categories (14%); differing under the strict rule: ai-coding-assistants, api-management, backup-and-disaster-recovery, compliance-automation, customer-identity-and-access-management, sase-platforms
- Qwen 3.7 Flash: a direct first choice kept as first choice or alternative in 10 of 12 categories (83%); differing under the strict rule: api-management, backup-and-disaster-recovery, cloud-cost-management, compliance-automation, content-delivery-networks, customer-identity-and-access-management, data-warehouses, sase-platforms
- Kimi K2: a direct first choice kept as first choice or alternative in 9 of 12 categories (75%); differing under the strict rule: api-management, application-performance-monitoring, backup-and-disaster-recovery, compliance-automation, customer-identity-and-access-management, data-warehouses, etl-and-elt, sase-platforms
- GLM 4.7 FlashX: a direct first choice kept as first choice or alternative in 7 of 12 categories (58%); differing under the strict rule: api-management, application-performance-monitoring, backup-and-disaster-recovery, business-password-managers, compliance-automation, content-delivery-networks, customer-identity-and-access-management, data-warehouses, etl-and-elt, sase-platforms
- MiniMax M2.5: a direct first choice kept as first choice or alternative in 7 of 12 categories (58%); differing under the strict rule: api-management, application-performance-monitoring, backup-and-disaster-recovery, business-password-managers, cloud-cost-management, compliance-automation, content-delivery-networks, customer-identity-and-access-management, etl-and-elt, sase-platforms
- GPT-6 Luna: a direct first choice kept as first choice or alternative in 11 of 12 categories (92%); differing under the strict rule: backup-and-disaster-recovery, cloud-cost-management, customer-identity-and-access-management
- Muse Glimmer 30B: a direct first choice kept as first choice or alternative in 11 of 12 categories (92%); differing under the strict rule: api-management, application-performance-monitoring, business-password-managers, cloud-cost-management, customer-identity-and-access-management, data-warehouses, etl-and-elt


# Segment: Enterprise

# IT AI Recommendation Index, run mai-20261004-1101-calibration_b

72 prompts, 14 models, 5,148 raw judge labels, 5,194 scored labels after normalization. Published weights: first choice +3, alternative +2, mention +1, soft negative -2, hard negative -3.

Scored under vendor alias table version 2026-10.8. Raw judge labels are the permanent record; the numbers below are derived from them and are regenerated for every run whenever the alias table changes, so the whole series is always scored under one table version. Resolution of raw names: 4,073 by alias or canonical name, 720 by category-scoped alias, 109 from combined answers split into their products, 47 from combined answers counted once for their first product, 0 excluded by rule, 213 unresolved and counted under the raw name.

## Paraphrase stability

Share of categories where a model's first choice set on the direct prompt equals its set on the paraphrase.

| Model | Same | Different | Stability |
|---|---|---|---|
| Claude Haiku 4.5 | 2 | 9 | 18% |
| GPT-5.4 mini | 3 | 9 | 25% |
| Gemini 3.5 Flash | 6 | 6 | 50% |
| Perplexity Sonar | 6 | 6 | 50% |
| Grok 4.1 Fast | 7 | 5 | 58% |
| Mistral Small | 2 | 10 | 17% |
| DeepSeek V4 Flash | 7 | 5 | 58% |
| Llama 4 Maverick | 0 | 8 | 0% |
| Qwen 3.7 Flash | 4 | 8 | 33% |
| Kimi K2 | 5 | 7 | 42% |
| GLM 4.7 FlashX | 4 | 8 | 33% |
| MiniMax M2.5 | 2 | 10 | 17% |
| GPT-6 Luna | 7 | 5 | 58% |
| Muse Glimmer 30B | 4 | 8 | 33% |

A looser measure, whether a direct first choice survives as a first choice or alternative on the paraphrase, is in the appendix.

## Standing by category

First choice share across the direct, paraphrase, budget and scale prompts and all 14 models. The top product's share is published alongside the label: contested means the top share is at or below 40%, and a category just above the line is not meaningfully different from one just below it. Consensus means every model's direct-prompt first choice is the same single product.

| Category | Top product | Top share | First choices | Status |
|---|---|---|---|---|
| ai-coding-assistants | GitHub Copilot | 80% | 46 | clear leader |
| api-management | Apigee | 33% | 51 | contested |
| application-performance-monitoring | Dynatrace | 47% | 53 | clear leader |
| backup-and-disaster-recovery | Veeam Data Platform | 36% | 50 | contested |
| business-password-managers | 1Password | 39% | 51 | contested |
| cloud-cost-management | IBM Apptio Cloudability | 47% | 55 | clear leader |
| compliance-automation | Vanta | 38% | 53 | contested |
| content-delivery-networks | Cloudflare | 46% | 50 | clear leader |
| customer-identity-and-access-management | Auth0 | 33% | 49 | contested |
| data-warehouses | Snowflake | 64% | 50 | clear leader |
| etl-and-elt | Fivetran | 40% | 52 | clear leader |
| sase-platforms | Palo Alto Networks Prisma SASE | 29% | 51 | contested |

**ai-coding-assistants**: GitHub Copilot 80%, Gemini Code Assist 7%, Tabnine 4%, Amazon Q Developer 2%, Augment Code 2%

**api-management**: Apigee 33%, MuleSoft Anypoint Platform 27%, Azure API Management 10%, Kong Gateway 10%, Gravitee 6%

**application-performance-monitoring**: Dynatrace 47%, Datadog APM 19%, New Relic 17%, CubeAPM 8%, Grafana LGTM Stack 2%

**backup-and-disaster-recovery**: Veeam Data Platform 36%, Rubrik Security Cloud 16%, Commvault 14%, Druva Data Security Cloud 8%, Cohesity DataProtect 6%

**business-password-managers**: 1Password 39%, Bitwarden 37%, Keeper Security 18%, 1Password Business or Enterprise 2%, LastPass 2%

**cloud-cost-management**: IBM Apptio Cloudability 47%, CloudZero 13%, Vantage 13%, Finout 7%, VMware Tanzu CloudHealth 7%

**compliance-automation**: Vanta 38%, Drata 19%, Hyperproof 8%, AuditBoard 6%, ServiceNow Integrated Risk Management 6%

**content-delivery-networks**: Cloudflare 46%, Akamai 38%, Akamai Connected Cloud 4%, BlazingCDN 4%, Fastly 4%

**customer-identity-and-access-management**: Auth0 33%, Ping Identity 14%, FusionAuth 8%, Microsoft Entra External ID 8%, Okta 6%

**data-warehouses**: Snowflake 64%, Google BigQuery 16%, Amazon Redshift 12%, Azure Synapse Analytics 2%, Databricks SQL 2%

**etl-and-elt**: Fivetran 40%, Integrate.io 21%, Airbyte 12%, Informatica Intelligent Data Management Cloud 10%, Informatica PowerCenter 4%

**sase-platforms**: Palo Alto Networks Prisma SASE 29%, Zscaler Zero Trust Exchange 20%, Cato SASE Cloud 12%, Cato Networks 10%, Cloudflare One 10%

## Anti-recommendations

Products most often labeled soft or hard negative, with the number of models that did so at least once in the category, and the share of that product's labels in the category that were negative. A high negative share on a product with few labels is a warning; a low share on a product with many labels is salience, not sentiment.

- **ai-coding-assistants**: Cursor (12 models, 6 hard; 21 of 43 labels negative), GitHub Copilot (11 models, 7 hard; 14 of 80 labels negative), Claude Code (8 models, 4 hard; 10 of 31 labels negative), Amazon Q Developer (7 models, 1 hard; 8 of 43 labels negative)
- **api-management**: Amazon API Gateway (13 models, 7 hard; 27 of 51 labels negative), Azure API Management (12 models, 6 hard; 16 of 57 labels negative), Apigee (12 models, 4 hard; 18 of 74 labels negative), MuleSoft Anypoint Platform (9 models, 2 hard; 10 of 64 labels negative)
- **application-performance-monitoring**: Datadog APM (14 models, 7 hard; 24 of 75 labels negative), New Relic (11 models, 2 hard; 12 of 68 labels negative), AppDynamics (10 models, 4 hard; 13 of 47 labels negative), Dynatrace (9 models, 2 hard; 11 of 68 labels negative)
- **backup-and-disaster-recovery**: Commvault (3 models, 1 hard; 4 of 52 labels negative), Veeam Data Platform (3 models, 1 hard; 3 of 50 labels negative), Rubrik Security Cloud (3 models; 4 of 46 labels negative), Backblaze Personal (2 models, 2 hard; 2 of 2 labels negative)
- **business-password-managers**: LastPass (14 models, 14 hard; 26 of 37 labels negative), 1Password (10 models; 12 of 67 labels negative), Dashlane (8 models; 13 of 44 labels negative), Norton Password Manager (4 models, 1 hard; 4 of 4 labels negative)
- **cloud-cost-management**: VMware Tanzu CloudHealth (10 models, 2 hard; 14 of 39 labels negative), AWS Cost Explorer (10 models; 11 of 14 labels negative), Microsoft Cost Management (10 models; 11 of 16 labels negative), Google Cloud Billing (9 models; 10 of 11 labels negative)
- **compliance-automation**: Vanta (13 models, 3 hard; 19 of 69 labels negative), Drata (12 models, 3 hard; 17 of 63 labels negative), Secureframe (10 models, 1 hard; 11 of 39 labels negative), Sprinto (7 models, 1 hard; 7 of 17 labels negative)
- **content-delivery-networks**: Cloudflare (8 models; 8 of 64 labels negative), Amazon CloudFront (6 models; 8 of 60 labels negative), Google Cloud CDN (4 models, 1 hard; 5 of 23 labels negative), Akamai (4 models; 4 of 65 labels negative)
- **customer-identity-and-access-management**: Ping Identity (10 models, 1 hard; 14 of 56 labels negative), Amazon Cognito (8 models, 2 hard; 10 of 25 labels negative), Auth0 (6 models, 1 hard; 11 of 53 labels negative), ForgeRock (5 models, 1 hard; 6 of 16 labels negative)
- **data-warehouses**: Amazon Redshift (11 models, 1 hard; 16 of 77 labels negative), Snowflake (11 models, 1 hard; 17 of 79 labels negative), Google BigQuery (10 models; 12 of 81 labels negative), Azure Synapse Analytics (7 models, 1 hard; 7 of 34 labels negative)
- **etl-and-elt**: Fivetran (12 models, 1 hard; 18 of 63 labels negative), Talend (11 models, 7 hard; 16 of 46 labels negative), Informatica PowerCenter (8 models, 5 hard; 8 of 18 labels negative), Azure Data Factory (8 models, 1 hard; 9 of 20 labels negative)
- **sase-platforms**: Zscaler Zero Trust Exchange (11 models, 2 hard; 15 of 64 labels negative), Cloudflare One (9 models, 1 hard; 11 of 37 labels negative), Palo Alto Networks Prisma SASE (8 models, 1 hard; 8 of 55 labels negative), Check Point Harmony SASE (7 models, 3 hard; 8 of 12 labels negative)

## Leadership and criticism

First-choice share and negative label rate are independent, so every product with at least 10 labels in a category is placed on both axes. Cutoffs: leader at 30% or more of first choices, criticized at 25% or more negative labels. An endorsed leader is recommended and not criticized; a criticized default is recommended while the models list its problems; a criticized challenger is named mostly to be warned against.

| Category | Product | First-choice share | Negative rate | Labels | Quadrant |
|---|---|---|---|---|---|
| ai-coding-assistants | GitHub Copilot | 80% | 18% | 80 | endorsed leader |
| ai-coding-assistants | Gemini Code Assist | 7% | 18% | 28 | accepted challenger |
| ai-coding-assistants | Tabnine | 4% | 2% | 47 | accepted challenger |
| ai-coding-assistants | Augment Code | 2% | 0% | 13 | accepted challenger |
| ai-coding-assistants | JetBrains AI Assistant | 2% | 9% | 11 | accepted challenger |
| ai-coding-assistants | Amazon Q Developer | 2% | 19% | 43 | accepted challenger |
| ai-coding-assistants | Cursor | 2% | 49% | 43 | criticized challenger |
| ai-coding-assistants | Sourcegraph Cody | 0% | 7% | 15 | accepted challenger |
| ai-coding-assistants | Windsurf | 0% | 32% | 22 | criticized challenger |
| ai-coding-assistants | Claude Code | 0% | 32% | 31 | criticized challenger |
| api-management | Apigee | 33% | 24% | 74 | endorsed leader |
| api-management | MuleSoft Anypoint Platform | 27% | 16% | 64 | accepted challenger |
| api-management | Kong Gateway | 10% | 10% | 63 | accepted challenger |
| api-management | Azure API Management | 10% | 28% | 57 | criticized challenger |
| api-management | Gravitee | 6% | 5% | 22 | accepted challenger |
| api-management | Tyk | 6% | 6% | 16 | accepted challenger |
| api-management | IBM API Connect | 2% | 18% | 38 | accepted challenger |
| api-management | Axway Amplify API Management | 2% | 21% | 14 | accepted challenger |
| api-management | WSO2 API Manager | 0% | 23% | 13 | accepted challenger |
| api-management | Amazon API Gateway | 0% | 53% | 51 | criticized challenger |
| application-performance-monitoring | Dynatrace | 47% | 16% | 68 | endorsed leader |
| application-performance-monitoring | Datadog APM | 19% | 32% | 75 | criticized challenger |
| application-performance-monitoring | New Relic | 17% | 18% | 68 | accepted challenger |
| application-performance-monitoring | Splunk Observability Cloud | 2% | 14% | 21 | accepted challenger |
| application-performance-monitoring | Grafana Cloud | 0% | 12% | 17 | accepted challenger |
| application-performance-monitoring | Elastic APM | 0% | 18% | 17 | accepted challenger |
| application-performance-monitoring | Splunk | 0% | 18% | 11 | accepted challenger |
| application-performance-monitoring | IBM Instana | 0% | 19% | 16 | accepted challenger |
| application-performance-monitoring | AppDynamics | 0% | 28% | 47 | criticized challenger |
| backup-and-disaster-recovery | Veeam Data Platform | 36% | 6% | 50 | endorsed leader |
| backup-and-disaster-recovery | Rubrik Security Cloud | 16% | 9% | 46 | accepted challenger |
| backup-and-disaster-recovery | Commvault | 14% | 8% | 52 | accepted challenger |
| backup-and-disaster-recovery | Druva Data Security Cloud | 8% | 0% | 39 | accepted challenger |
| backup-and-disaster-recovery | Cohesity DataProtect | 6% | 5% | 41 | accepted challenger |
| backup-and-disaster-recovery | Zerto | 0% | 0% | 12 | accepted challenger |
| backup-and-disaster-recovery | Acronis Cyber Protect | 0% | 7% | 15 | accepted challenger |
| business-password-managers | 1Password | 39% | 18% | 67 | endorsed leader |
| business-password-managers | Bitwarden | 37% | 7% | 71 | endorsed leader |
| business-password-managers | Keeper Security | 18% | 8% | 61 | accepted challenger |
| business-password-managers | LastPass | 2% | 70% | 37 | criticized challenger |
| business-password-managers | NordPass | 0% | 22% | 18 | accepted challenger |
| business-password-managers | Dashlane | 0% | 30% | 44 | criticized challenger |
| cloud-cost-management | IBM Apptio Cloudability | 47% | 7% | 68 | endorsed leader |
| cloud-cost-management | CloudZero | 13% | 2% | 44 | accepted challenger |
| cloud-cost-management | Vantage | 13% | 5% | 37 | accepted challenger |
| cloud-cost-management | Finout | 7% | 5% | 38 | accepted challenger |
| cloud-cost-management | VMware Tanzu CloudHealth | 7% | 36% | 39 | criticized challenger |
| cloud-cost-management | Flexera One | 4% | 7% | 46 | accepted challenger |
| cloud-cost-management | Microsoft Cost Management | 4% | 69% | 16 | criticized challenger |
| cloud-cost-management | Harness Cloud Cost Management | 0% | 7% | 15 | accepted challenger |
| cloud-cost-management | ProsperOps | 0% | 8% | 13 | accepted challenger |
| cloud-cost-management | CAST AI | 0% | 8% | 12 | accepted challenger |
| cloud-cost-management | nOps | 0% | 18% | 11 | accepted challenger |
| cloud-cost-management | Kubecost | 0% | 20% | 15 | accepted challenger |
| cloud-cost-management | AWS Cost Explorer | 0% | 79% | 14 | criticized challenger |
| cloud-cost-management | Google Cloud Billing | 0% | 91% | 11 | criticized challenger |
| compliance-automation | Vanta | 38% | 28% | 69 | criticized default |
| compliance-automation | Drata | 19% | 27% | 63 | criticized challenger |
| compliance-automation | Hyperproof | 8% | 12% | 34 | accepted challenger |
| compliance-automation | AuditBoard | 6% | 8% | 26 | accepted challenger |
| compliance-automation | ServiceNow Integrated Risk Management | 6% | 25% | 28 | criticized challenger |
| compliance-automation | OneTrust Tech Risk & Compliance | 4% | 17% | 29 | accepted challenger |
| compliance-automation | Secureframe | 4% | 28% | 39 | criticized challenger |
| compliance-automation | MetricStream | 0% | 29% | 17 | criticized challenger |
| compliance-automation | Sprinto | 0% | 41% | 17 | criticized challenger |
| compliance-automation | Archer | 0% | 43% | 14 | criticized challenger |
| content-delivery-networks | Cloudflare | 46% | 12% | 64 | endorsed leader |
| content-delivery-networks | Akamai | 38% | 6% | 65 | endorsed leader |
| content-delivery-networks | Fastly | 4% | 9% | 58 | accepted challenger |
| content-delivery-networks | Amazon CloudFront | 2% | 13% | 60 | accepted challenger |
| content-delivery-networks | Azure Front Door | 0% | 7% | 15 | accepted challenger |
| content-delivery-networks | Google Cloud CDN | 0% | 22% | 23 | accepted challenger |
| content-delivery-networks | Azure CDN | 0% | 27% | 15 | criticized challenger |
| customer-identity-and-access-management | Auth0 | 33% | 21% | 53 | endorsed leader |
| customer-identity-and-access-management | Ping Identity | 14% | 25% | 56 | criticized challenger |
| customer-identity-and-access-management | FusionAuth | 8% | 10% | 10 | accepted challenger |
| customer-identity-and-access-management | Microsoft Entra External ID | 8% | 10% | 48 | accepted challenger |
| customer-identity-and-access-management | Okta | 6% | 19% | 16 | accepted challenger |
| customer-identity-and-access-management | LoginRadius | 4% | 0% | 12 | accepted challenger |
| customer-identity-and-access-management | WorkOS | 4% | 4% | 26 | accepted challenger |
| customer-identity-and-access-management | IBM Verify | 2% | 15% | 20 | accepted challenger |
| customer-identity-and-access-management | Stytch | 2% | 42% | 12 | criticized challenger |
| customer-identity-and-access-management | Descope | 0% | 7% | 14 | accepted challenger |
| customer-identity-and-access-management | Frontegg | 0% | 17% | 18 | accepted challenger |
| customer-identity-and-access-management | Keycloak | 0% | 36% | 14 | criticized challenger |
| customer-identity-and-access-management | ForgeRock | 0% | 38% | 16 | criticized challenger |
| customer-identity-and-access-management | Amazon Cognito | 0% | 40% | 25 | criticized challenger |
| data-warehouses | Snowflake | 64% | 22% | 79 | endorsed leader |
| data-warehouses | Google BigQuery | 16% | 15% | 81 | accepted challenger |
| data-warehouses | Amazon Redshift | 12% | 21% | 77 | accepted challenger |
| data-warehouses | Databricks SQL | 2% | 10% | 49 | accepted challenger |
| data-warehouses | Azure Synapse Analytics | 2% | 21% | 34 | accepted challenger |
| data-warehouses | Microsoft Fabric Data Warehouse | 0% | 24% | 21 | accepted challenger |
| data-warehouses | Teradata Vantage | 0% | 36% | 11 | criticized challenger |
| etl-and-elt | Fivetran | 40% | 29% | 63 | criticized default |
| etl-and-elt | Integrate.io | 21% | 0% | 19 | accepted challenger |
| etl-and-elt | Airbyte | 12% | 8% | 36 | accepted challenger |
| etl-and-elt | Informatica Intelligent Data Management Cloud | 10% | 21% | 42 | accepted challenger |
| etl-and-elt | Informatica PowerCenter | 4% | 44% | 18 | criticized challenger |
| etl-and-elt | dbt | 2% | 7% | 28 | accepted challenger |
| etl-and-elt | Matillion | 2% | 13% | 31 | accepted challenger |
| etl-and-elt | Apache Airflow | 2% | 14% | 14 | accepted challenger |
| etl-and-elt | Azure Data Factory | 2% | 45% | 20 | criticized challenger |
| etl-and-elt | Hevo Data | 0% | 6% | 16 | accepted challenger |
| etl-and-elt | Oracle Data Integrator | 0% | 30% | 10 | criticized challenger |
| etl-and-elt | Talend | 0% | 35% | 46 | criticized challenger |
| etl-and-elt | IBM DataStage | 0% | 39% | 18 | criticized challenger |
| etl-and-elt | AWS Glue | 0% | 43% | 23 | criticized challenger |
| etl-and-elt | Stitch | 0% | 60% | 10 | criticized challenger |
| sase-platforms | Palo Alto Networks Prisma SASE | 29% | 15% | 55 | accepted challenger |
| sase-platforms | Zscaler Zero Trust Exchange | 20% | 23% | 64 | accepted challenger |
| sase-platforms | Cato SASE Cloud | 12% | 17% | 24 | accepted challenger |
| sase-platforms | Cato Networks | 10% | 19% | 32 | accepted challenger |
| sase-platforms | Cloudflare One | 10% | 30% | 37 | criticized challenger |
| sase-platforms | Cisco Secure Access | 2% | 0% | 17 | accepted challenger |
| sase-platforms | Netskope One | 2% | 15% | 48 | accepted challenger |
| sase-platforms | Fortinet FortiSASE | 2% | 15% | 41 | accepted challenger |
| sase-platforms | Cisco | 2% | 39% | 18 | criticized challenger |
| sase-platforms | Versa SASE | 0% | 17% | 18 | accepted challenger |
| sase-platforms | Check Point Harmony SASE | 0% | 67% | 12 | criticized challenger |

## Treatment of lab-affiliated products by model

Self-preference is only measurable with a control group: how the lab's own model treats its products compared with how every other model treats the same products. OpenAI have no products in the covered categories with enough labels to measure, so nothing is claimed about them.

**Anthropic products** (4 products, 40 labels). Cells are positive/negative/all labels.

| Product | Claude Haiku 4.5 | GPT-5.4 mini | Gemini 3.5 Flash | Perplexity Sonar | Grok 4.1 Fast | Mistral Small | DeepSeek V4 Flash | Llama 4 Maverick | Qwen 3.7 Flash | Kimi K2 | GLM 4.7 FlashX | MiniMax M2.5 | GPT-6 Luna | Muse Glimmer 30B |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Claude Code | 0/1/1 | 1/0/1 | 1/1/2 | 4/0/4 | 0/2/2 | 2/1/3 | 2/2/4 | 2/0/2 | 2/0/2 | 1/1/2 | 0/1/1 | 3/0/3 | 1/0/1 | 2/1/3 |
| Claude |  |  | 0/1/1 | 1/0/1 |  |  | 0/1/1 |  | 0/1/1 |  |  |  | 1/1/2 | 1/0/1 |
| Claude for Enterprise |  |  |  |  |  |  |  | 1/0/1 |  |  |  |  |  |  |
| Anthropic Claude Enterprise |  |  |  |  |  |  |  |  |  |  |  |  |  | 1/0/1 |

Mean label weight on Anthropic products: Claude Haiku 4.5 -2.00 over 1 labels; the other 13 models +0.28 over 39 labels. Weights run from +3 (first choice) to -3 (hard negative). A gap under about half a point on this few labels is not a finding.

**Google products** (15 products, 246 labels). Cells are positive/negative/all labels.

| Product | Claude Haiku 4.5 | GPT-5.4 mini | Gemini 3.5 Flash | Perplexity Sonar | Grok 4.1 Fast | Mistral Small | DeepSeek V4 Flash | Llama 4 Maverick | Qwen 3.7 Flash | Kimi K2 | GLM 4.7 FlashX | MiniMax M2.5 | GPT-6 Luna | Muse Glimmer 30B |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Google BigQuery | 4/1/5 | 6/1/7 | 6/0/6 | 5/2/7 | 4/2/6 | 7/0/7 | 6/1/7 | 4/0/4 | 5/1/6 | 5/1/6 | 5/1/6 | 5/1/6 | 5/1/6 | 7/0/7 |
| Apigee | 4/1/5 | 3/1/4 | 4/2/6 | 3/2/5 | 5/1/6 | 4/1/5 | 4/2/6 | 5/0/5 | 4/1/5 | 4/2/6 | 3/1/4 | 4/2/6 | 5/0/5 | 4/2/6 |
| Gemini Code Assist | 1/0/1 | 5/0/5 | 1/0/1 | 2/0/2 | 1/1/2 | 2/0/2 | 1/1/2 | 1/0/1 | 1/0/1 | 3/0/3 | 1/1/2 | 0/1/1 | 2/0/2 | 2/1/3 |
| Google Cloud CDN | 2/0/2 | 1/1/2 | 1/0/1 | 1/0/1 | 3/0/3 | 1/0/1 | 1/0/1 | 1/0/1 | 1/1/2 | 2/2/4 |  | 1/0/1 | 1/0/1 | 2/1/3 |
| Google Cloud Billing | 0/1/1 |  | 0/1/1 | 0/1/1 | 0/2/2 | 0/1/1 | 1/1/2 |  |  | 0/1/1 |  | 0/1/1 |  | 0/1/1 |
| Google Cloud Dataflow |  |  |  | 1/0/1 | 2/0/2 | 1/0/1 | 1/0/1 | 0/1/1 |  | 1/0/1 |  |  |  |  |
| Google Cloud Data Fusion |  |  | 0/1/1 | 1/0/1 |  | 1/0/1 |  |  |  |  |  |  | 1/0/1 |  |
| Google Cloud Identity |  |  |  |  |  | 1/0/1 |  |  |  |  | 1/0/1 |  | 1/0/1 |  |
| Google Cloud |  |  |  |  | 1/0/1 |  |  |  |  |  |  | 2/0/2 |  |  |
| Google Cloud Backup and DR Service |  | 2/0/2 |  |  |  |  |  |  |  |  |  |  |  |  |
| Firebase Authentication |  |  |  |  |  |  | 0/1/1 |  |  |  |  |  |  |  |
| Google Cloud Cost Management |  | 1/0/1 |  |  |  |  |  |  |  |  |  |  |  |  |
| GCP |  |  |  |  |  |  |  |  |  | 0/1/1 |  |  |  |  |
| Google BeyondCorp Enterprise |  |  |  |  |  |  |  |  | 0/1/1 |  |  |  |  |  |
| Google Gemini |  |  |  |  |  |  | 0/1/1 |  |  |  |  |  |  |  |

Mean label weight on Google products: Gemini 3.5 Flash +0.94 over 16 labels; the other 13 models +0.97 over 230 labels. Weights run from +3 (first choice) to -3 (hard negative). A gap under about half a point on this few labels is not a finding.

## Discontinued products recommended

None in this run.

## Normalization

Unresolved, 213 labels counted under the raw name, for human review:

Broadcom CloudHealth in cloud-cost-management (4), Chaos Genius in cloud-cost-management (2), Cloak AI in compliance-automation (2), Kion in cloud-cost-management (2), Tongyi Lingma in ai-coding-assistants (2), 1Password Business or Enterprise in business-password-managers (1), API Connect 2018.x in api-management (1), AWS Billing and Cost Management / Cost Explorer / Cost Optimization Hub in cloud-cost-management (1), AWS Zero Trust in sase-platforms (1), AWS, Azure or Google Cloud's own cost tools in cloud-cost-management (1), Airbyte Self-Managed Enterprise in etl-and-elt (1), Algebrix Identity in customer-identity-and-access-management (1), Amanda in backup-and-disaster-recovery (1), Amazon Redshift Spectrum / Native Glue in etl-and-elt (1), Apicurio in api-management (1), Apigee API hub in api-management (1), Apigee hybrid in api-management (1), Apptio TBM in cloud-cost-management (1), Auth0 Customer Identity for B2B in customer-identity-and-access-management (1), Auth0 Organizations in customer-identity-and-access-management (1), Auth0 – Okta Customer Identity Cloud in customer-identity-and-access-management (1), Auth0, now Okta Customer Identity Cloud in customer-identity-and-access-management (1), Azure AD Password Protection in business-password-managers (1), BMC Helix Operations Management with AIOps in application-performance-monitoring (1), Backup Exec in backup-and-disaster-recovery (1), Baidu CDN in content-delivery-networks (1), Barracuda Cloud Backup in backup-and-disaster-recovery (1), BigMIND in backup-and-disaster-recovery (1), BigQuery On-Demand in data-warehouses (1), Boomi Data Integration in etl-and-elt (1), Broadcom Aria Cost (formerly VMware CloudHealth) in cloud-cost-management (1), Built-In Browser Password Managers (Chrome, Edge, Safari) in business-password-managers (1), BytePlus CDN in content-delivery-networks (1), Carbonite Complete (CDM) in backup-and-disaster-recovery (1), Cato Networks — Cato SASE Cloud in sase-platforms (1), Cisco Splunk AppDynamics / Splunk Observability in application-performance-monitoring (1), Cisco Umbrella SASE in sase-platforms (1), Claude Free tier in ai-coding-assistants (1), ClawHub (OpenClaw/Claude Code skills marketplace) in ai-coding-assistants (1), Cloud Data Integration (CDI) in etl-and-elt (1), CloudAlly in backup-and-disaster-recovery (1), CloudEndure/AWS Elastic Disaster Recovery in backup-and-disaster-recovery (1), Cloudshot in cloud-cost-management (1), CodeTwo in backup-and-disaster-recovery (1), CodeWhisperer / Amazon Q Developer in ai-coding-assistants (1), Cohesity Immutable in backup-and-disaster-recovery (1), Cohesity Netbackup in backup-and-disaster-recovery (1), Commvault Metallic in backup-and-disaster-recovery (1), Cursor for Enterprise in ai-coding-assistants (1), Dashlane Omnix Enterprise in business-password-managers (1), Databricks Lakehouse Platform in etl-and-elt (1), Databricks SQL Serverless in data-warehouses (1), Datadog Cloud Cost in cloud-cost-management (1), Dataplex in etl-and-elt (1), Dell EMC Avamar / NetWorker in backup-and-disaster-recovery (1), Dell EMC Data Domain in backup-and-disaster-recovery (1), Driva in backup-and-disaster-recovery (1), Druva Phoenix in backup-and-disaster-recovery (1), Druva SaaS Universal License in backup-and-disaster-recovery (1), Druva inSync / Phoenix in backup-and-disaster-recovery (1), EasyMorph Hub in etl-and-elt (1), Elastic Managed Service in application-performance-monitoring (1), Elastic Observability APM in application-performance-monitoring (1), Enterprise ($39/user) in ai-coding-assistants (1), Envoy-based solutions in api-management (1), Exceeds AI in ai-coding-assistants (1), Exostar in customer-identity-and-access-management (1), Fabric Data Factory in etl-and-elt (1), Forcepoint SASE in sase-platforms (1), Fortinet — FortiSASE in sase-platforms (1), FusionAuth Community Edition in customer-identity-and-access-management (1), GCP Billing Export in cloud-cost-management (1), Germain APM in application-performance-monitoring (1), GitProtect.io in backup-and-disaster-recovery (1), Google Cloud Snapshots in backup-and-disaster-recovery (1), Google DR in backup-and-disaster-recovery (1), Google Gemini CLI in ai-coding-assistants (1), Google's Antigravity in ai-coding-assistants (1), Google's Gemini CLI in ai-coding-assistants (1), Greptile in ai-coding-assistants (1), HP in backup-and-disaster-recovery (1), Harness AI in cloud-cost-management (1), Harness AutoStopping in cloud-cost-management (1), Harness Cloud & AI Cost Management in cloud-cost-management (1), HiCompliance in compliance-automation (1), Hideez in customer-identity-and-access-management (1), Hive Streaming in content-delivery-networks (1), Holistic in compliance-automation (1), Hologram in cloud-cost-management (1), IBM Cloud Cost and Asset Management (ICCAM) in cloud-cost-management (1), IBM Cloud enterprise management + usage reporting in cloud-cost-management (1), IBM Netezza in data-warehouses (1), IBM Resiliency in backup-and-disaster-recovery (1), IBM Security Verify Access in customer-identity-and-access-management (1), IBM StreamSets in etl-and-elt (1), IBM StreamSets / IBM DataStage in etl-and-elt (1), IBM webMethods in etl-and-elt (1), Idira Privileged Access Manager in business-password-managers (1), Imperva CDN in content-delivery-networks (1), Informatica Data Integration and Engineering in etl-and-elt (1), Informatica PowerCenter 10.5.x in etl-and-elt (1), Inteca in customer-identity-and-access-management (1), Integromat/Make in etl-and-elt (1), Isora GRC in compliance-automation (1), Kafka Connect in etl-and-elt (1), Klaviyo in customer-identity-and-access-management (1), Kollective in content-delivery-networks (1), Kong open-source in api-management (1), Kong — Community / Solo editions in api-management (1), Konica Minolta in backup-and-disaster-recovery (1), Lakeflow Connect in etl-and-elt (1), Leaseweb CDN in content-delivery-networks (1), Level3 in content-delivery-networks (1), LifeLock in business-password-managers (1), Lucidity in cloud-cost-management (1), MainStreaming in content-delivery-networks (1), Microsoft Application Insights in application-performance-monitoring (1), Microsoft Azure Data Factory ADF in etl-and-elt (1), Microsoft Azure-based DR in backup-and-disaster-recovery (1), Microsoft Backup & Copilot Agent in backup-and-disaster-recovery (1), Microsoft Entra Secure Access (formerly Azure AD) in sase-platforms (1), Microsoft Fabric Data Factory / Azure Data Factory in etl-and-elt (1), Microsoft FinOps Hubs in cloud-cost-management (1), Microsoft SQL Server Integration Services, SSIS in etl-and-elt (1), Mozy (Home/Standard) in backup-and-disaster-recovery (1), MuleSoft Anypoint Platform API Management in api-management (1), Netskope One SSE in sase-platforms (1), Netskope — One Platform in sase-platforms (1), New Relic Cost Management in cloud-cost-management (1), Okta: Auth0 and Okta Customer Identity in customer-identity-and-access-management (1), OneLens in cloud-cost-management (1), Open-Source Stacks (Prometheus + Grafana + OpenTelemetry + Jaeger/Tempo) in application-performance-monitoring (1), OpenAI Codex for Business / Enterprise in ai-coding-assistants (1), OpenAI Codex for ChatGPT Enterprise in ai-coding-assistants (1), OpenAI Codex on ChatGPT Enterprise in ai-coding-assistants (1), OpenAI GPT models / Codex / ChatGPT Codex in ai-coding-assistants (1), Oracle CDN in content-delivery-networks (1), Oracle Exadata Cloud in data-warehouses (1), Oracle-style legacy stacks in etl-and-elt (1), Orb in cloud-cost-management (1), Palo Alto Networks — Prisma SASE in sase-platforms (1), Ping Identity incl. ForgeRock in customer-identity-and-access-management (1), Ping Identity: PingOne for Customers / PingOne Advanced Identity Cloud in customer-identity-and-access-management (1), PingOne Advanced Identity Cloud in customer-identity-and-access-management (1), PowerCenter in etl-and-elt (1), PowerProtect in backup-and-disaster-recovery (1), Qlik Replicate in etl-and-elt (1), Qlik Talend Data Fabric in etl-and-elt (1), Quest Foglight in application-performance-monitoring (1), ReachFive in customer-identity-and-access-management (1), Red Hat API Management in api-management (1), Rubrik Zero‑Trust in backup-and-disaster-recovery (1), SAP API Management in api-management (1), SAP BW/4HANA Cloud in data-warehouses (1), SAP CIAM in customer-identity-and-access-management (1), SAS Data Management in etl-and-elt (1), SOCLYio in compliance-automation (1), Salesforce Identity in customer-identity-and-access-management (1), Salesforce MuleSoft Anypoint Platform in api-management (1), Salesforce Platform in customer-identity-and-access-management (1), Secure Data in backup-and-disaster-recovery (1), Self-managed Elastic APM in application-performance-monitoring (1), Skycloak in customer-identity-and-access-management (1), Skyfalke Cloud in backup-and-disaster-recovery (1), Skylight in application-performance-monitoring (1), Skylight (by Coralogix) in application-performance-monitoring (1), SmartBear in api-management (1), SnapLogic Intelligent Integration Platform in etl-and-elt (1), Snowflake Data Cloud in data-warehouses (1), Software AG's webMethods in api-management (1), SpinBackup in backup-and-disaster-recovery (1), Striim in etl-and-elt (1), Sungard AS in backup-and-disaster-recovery (1), SureCloud Orchestrate in compliance-automation (1), SureCloud's Automate or Orchestrate in compliance-automation (1), Symantec NetBackup in backup-and-disaster-recovery (1), TIBCO API Exchange / Mashery in api-management (1), Thomson Reuters / Wolters Kluwer in compliance-automation (1), Timus in sase-platforms (1), Trae by ByteDance in ai-coding-assistants (1), Twilio Segment Unify in customer-identity-and-access-management (1), Tyk Enterprise Developer Portal in api-management (1), Tyk.io in api-management (1), Unitrends Enterprise Backup in backup-and-disaster-recovery (1), VDF Code in ai-coding-assistants (1), VDF Code / Augment Code in ai-coding-assistants (1), VMware Aria Cost, formerly CloudHealth by VMware, now Broadcom in cloud-cost-management (1), VMware vSphere Snapshots in backup-and-disaster-recovery (1), Vantage.sh in cloud-cost-management (1), Vast Edge in backup-and-disaster-recovery (1), Vbrick in content-delivery-networks (1), Veeam Availability Suite in backup-and-disaster-recovery (1), Veeam Recovery Orchestrator in backup-and-disaster-recovery (1), Veeam Software in backup-and-disaster-recovery (1), Versa Networks Versa SASE in sase-platforms (1), VersaONE Universal SASE Platform in sase-platforms (1), Webflow Enterprise in content-delivery-networks (1), Xplenty in etl-and-elt (1), Yellowbrick in data-warehouses (1), Yellowbrick (Cloud) in data-warehouses (1), Zscaler Internet Security (ZIA + ZPA) in sase-platforms (1), Zscaler Zero Trust Exchange Platform in sase-platforms (1), Zscaler — Zero Trust Exchange in sase-platforms (1), dbt Platform in etl-and-elt (1), g-Backup Infinite in backup-and-disaster-recovery (1), iTernal in ai-coding-assistants (1)

Category-scoped resolutions, 720 labels. A bare vendor name was read as that vendor's product for the asked category, which assigns specificity the model did not write; each one is listed so the assumption is visible:

Datadog in application-performance-monitoring read as Datadog APM (69), Databricks in data-warehouses read as Databricks SQL (35), Rubrik in backup-and-disaster-recovery read as Rubrik Security Cloud (35), Zscaler in sase-platforms read as Zscaler Zero Trust Exchange (35), Keeper in business-password-managers read as Keeper Security (33), Cohesity in backup-and-disaster-recovery read as Cohesity DataProtect (29), Netskope in sase-platforms read as Netskope One (29), Veeam in backup-and-disaster-recovery read as Veeam Data Platform (27), OneTrust in compliance-automation read as OneTrust Tech Risk & Compliance (26), Informatica in etl-and-elt read as Informatica Intelligent Data Management Cloud (25), Kong in api-management read as Kong Gateway (21), Druva in backup-and-disaster-recovery read as Druva Data Security Cloud (20), Fortinet in sase-platforms read as Fortinet FortiSASE (18), Microsoft Fabric in data-warehouses read as Microsoft Fabric Data Warehouse (13), Flexera in cloud-cost-management read as Flexera One (12), Keeper Enterprise in business-password-managers read as Keeper Security (12), Cato Networks SASE Cloud in sase-platforms read as Cato SASE Cloud (11), Harness in cloud-cost-management read as Harness Cloud Cost Management (11), MuleSoft in api-management read as MuleSoft Anypoint Platform (11), Cloudflare in sase-platforms read as Cloudflare One (10), Palo Alto Networks in sase-platforms read as Palo Alto Networks Prisma SASE (9), Axway Amplify in api-management read as Axway Amplify API Management (8), Azure Synapse in data-warehouses read as Azure Synapse Analytics (7), Kong Enterprise in api-management read as Kong Gateway (7), Acronis in backup-and-disaster-recovery read as Acronis Cyber Protect (6), Check Point in sase-platforms read as Check Point Harmony SASE (6), Elastic in application-performance-monitoring read as Elastic APM (6), Hevo in etl-and-elt read as Hevo Data (6), IBM in api-management read as IBM API Connect (6), Teradata in data-warehouses read as Teradata Vantage (6), Versa in sase-platforms read as Versa SASE (6), Databricks in etl-and-elt read as Databricks Lakeflow (5), Flexera One FinOps in cloud-cost-management read as Flexera One (5), Grafana in application-performance-monitoring read as Grafana Cloud (5), Palo Alto Networks (Prisma SASE) in sase-platforms read as Palo Alto Networks Prisma SASE (5), Splunk APM in application-performance-monitoring read as Splunk Observability Cloud (5), WSO2 in api-management read as WSO2 API Manager (5), Axway in api-management read as Axway Amplify API Management (4), Cato in sase-platforms read as Cato SASE Cloud (4), Datadog in cloud-cost-management read as Datadog Cloud Cost Management (4), Fortinet (FortiSASE) in sase-platforms read as Fortinet FortiSASE (4), Palo Alto in sase-platforms read as Palo Alto Networks Prisma SASE (4), Spot by NetApp in cloud-cost-management read as Spot by NetApp (4), Veritas in backup-and-disaster-recovery read as Veritas Alta Data Protection (4), Zscaler (Zero Trust Exchange) in sase-platforms read as Zscaler Zero Trust Exchange (4), Azure in api-management read as Azure API Management (3), Databricks (Delta Lake) in data-warehouses read as Databricks SQL (3), Datto in backup-and-disaster-recovery read as Datto SIRIS (3), MuleSoft (Salesforce) in api-management read as MuleSoft Anypoint Platform (3), WSO2 in customer-identity-and-access-management read as WSO2 Identity Server (3), AWS in api-management read as Amazon API Gateway (2), Cisco AppDynamics in application-performance-monitoring read as AppDynamics (2), Cohesity Data Cloud in backup-and-disaster-recovery read as Cohesity DataProtect (2), Copilot in ai-coding-assistants read as GitHub Copilot (2), DoiT in cloud-cost-management read as DoiT Cloud Intelligence (2), Druva Resilience Cloud in backup-and-disaster-recovery read as Druva Data Security Cloud (2), Estuary in etl-and-elt read as Estuary Flow (2), Fabric in data-warehouses read as Microsoft Fabric Data Warehouse (2), Forcepoint in sase-platforms read as Forcepoint ONE (2), HPE in sase-platforms read as HPE Aruba (2), MSP360 in backup-and-disaster-recovery read as MSP360 Managed Backup (2), Microsoft Fabric Warehouse in data-warehouses read as Microsoft Fabric Data Warehouse (2), MuleSoft (Anypoint Platform) in api-management read as MuleSoft Anypoint Platform (2), Oracle in api-management read as Oracle API Management (2), Palo Alto Networks (Prisma Access) in sase-platforms read as Palo Alto Networks Prisma SASE (2), Ping Identity / PingOne for Customers in customer-identity-and-access-management read as Ping Identity (2), Scrut in compliance-automation read as Scrut Automation (2), ServiceNow in compliance-automation read as ServiceNow Integrated Risk Management (2), Thycotic in business-password-managers read as Delinea Secret Server (2), Acronis Cyber Backup in backup-and-disaster-recovery read as Acronis Cyber Protect (1), Amazon Q in ai-coding-assistants read as Amazon Q Developer (1), Arcserve in backup-and-disaster-recovery read as Arcserve UDP (1), Axcient in backup-and-disaster-recovery read as Axcient x360Recover (1), Azure Blob in backup-and-disaster-recovery read as Azure Blob Storage (1), Carbonite in backup-and-disaster-recovery read as Carbonite Safe (1), Carbonite (Home/Business) in backup-and-disaster-recovery read as Carbonite Safe (1), Cohesity (including Veritas NetBackup/Alta) in backup-and-disaster-recovery read as Cohesity DataProtect (1), Databricks Lakehouse in data-warehouses read as Databricks SQL (1), Dell EMC PowerProtect in backup-and-disaster-recovery read as Dell PowerProtect (1), Druva (Druva Data Security Cloud) in backup-and-disaster-recovery read as Druva Data Security Cloud (1), Flexera (Flexera One Cloud Cost Optimization) in cloud-cost-management read as Flexera One (1), Fortinet (FortiSASE / Unified SASE) in sase-platforms read as Fortinet FortiSASE (1), GitHub in ai-coding-assistants read as GitHub Copilot (1), HYCU in backup-and-disaster-recovery read as HYCU R-Cloud (1), IBM Cloud in api-management read as IBM API Connect (1), IBM Cloudability, formerly Apptio Cloudability in cloud-cost-management read as IBM Apptio Cloudability (1), Informatica (PowerCenter & Intelligent Data Management Cloud) in etl-and-elt read as Informatica Intelligent Data Management Cloud (1), Informatica (for governance) in etl-and-elt read as Informatica Intelligent Data Management Cloud (1), Informatica PowerCenter / IDMC in etl-and-elt read as Informatica Intelligent Data Management Cloud (1), JetBrains AI in ai-coding-assistants read as JetBrains AI Assistant (1), JetBrains AI Enterprise in ai-coding-assistants read as JetBrains AI Assistant (1), Keeper Business in business-password-managers read as Keeper Security (1), Kong (Konnect / Gateway) in api-management read as Kong Gateway (1), Kong Enterprise (Konnect) in api-management read as Kong Gateway (1), Netskope (Netskope One) in sase-platforms read as Netskope One (1), OneTrust (Tech Risk & GRC Module) in compliance-automation read as OneTrust Tech Risk & Compliance (1), OneTrust (Tugboat Logic) in compliance-automation read as OneTrust Tech Risk & Compliance (1), Onetrust in compliance-automation read as OneTrust Tech Risk & Compliance (1), Palo Alto Networks (Prisma) in sase-platforms read as Palo Alto Networks Prisma SASE (1), Pentaho in etl-and-elt read as Pentaho Data Integration (1), Proton in business-password-managers read as Proton Pass (1), Replit in ai-coding-assistants read as Replit AI (1), Replit (with enterprise plans) in ai-coding-assistants read as Replit AI (1), Rubrik (Rubrik Security Cloud) in backup-and-disaster-recovery read as Rubrik Security Cloud (1), Securden in business-password-managers read as Securden Password Vault (1), ServiceNow (ITSM + GRC) in compliance-automation read as ServiceNow Integrated Risk Management (1), SolarWinds in application-performance-monitoring read as SolarWinds Observability (1), Splunk Observability Cloud APM in application-performance-monitoring read as Splunk Observability Cloud (1), Spot in cloud-cost-management read as Spot by NetApp (1), Spot by Flexera in cloud-cost-management read as Spot by NetApp (1), VMware (Broadcom) in sase-platforms read as VMware SASE (1), VMware Aria Cost in cloud-cost-management read as VMware Tanzu CloudHealth (1), VMware Aria Cost (formerly CloudHealth by VMware) in cloud-cost-management read as VMware Tanzu CloudHealth (1), VMware Aria Cost (formerly CloudHealth) in cloud-cost-management read as VMware Tanzu CloudHealth (1), Veeam (Veeam Data Platform) in backup-and-disaster-recovery read as Veeam Data Platform (1), Veritas (NetBackup) in backup-and-disaster-recovery read as Veritas Alta Data Protection (1), Zscaler (Zero Trust SASE) in sase-platforms read as Zscaler Zero Trust Exchange (1), Zscaler (specifically Zscaler Internet Access & ZIA) in sase-platforms read as Zscaler Zero Trust Exchange (1), Zscaler (with Zscaler Z-Flex) in sase-platforms read as Zscaler Zero Trust Exchange (1)

Combined answers split into one label per product: AWS CloudFront / Google Cloud CDN, AWS Glue/Azure Data Factory, Amazon CodeWhisperer / Amazon Q Developer, Anthropic Claude Code / Claude Enterprise, AuditBoard / Diligent, AuditBoard/Optro, Azure Backup + Azure Site Recovery, Azure Data Factory (ADF) / Microsoft Fabric, Azure Front Door / Azure CDN, Azure Synapse / Microsoft Fabric, Azure Synapse Analytics / Microsoft Fabric, Broadcom/CA APM, Broadcom/CloudHealth, Cisco Secure Access / Cisco SASE, Cisco Umbrella + Duo, Cisco/AppDynamics, Claude Code / Claude Enterprise, Claude Code/Claude Enterprise, CloudHealth by Broadcom / VMware Tanzu CloudHealth, Databricks SQL / Databricks Lakehouse, Elastic APM/ELK Stack, Fivetran / Stitch, ForgeRock / Ping Identity, Fortinet Secure SD-WAN + FortiSASE, Google Apigee / Apigee X, Google Cloud Data Fusion / Dataflow / BigQuery, IBM / Software AG webMethods, IBM Apptio/Cloudability, Informatica PowerCenter / Informatica Cloud, Keeper Enterprise / Keeper Security, KeyCDN/StackPath, Kong Enterprise/Kong Konnect, Kubecost / IBM Kubecost, Micro Focus/OpenText, Microsoft Azure Data Factory (ADF) + SSIS, Microsoft Azure Front Door / Azure CDN, Microsoft Fabric / Azure Data Factory (ADF), Microsoft Fabric / Azure Synapse Analytics, Microsoft SSIS / Azure Data Factory, Netskope One / Netskope SASE, Okta Customer Identity Cloud / Auth0, Okta Customer Identity Cloud/Auth0, Oracle Data Integrator / SAP Data Services, Oracle Identity Governance & Fusion, Orbiq/Secureframe, Palo Alto Networks Prisma Access / Prisma SASE, Palo Alto Networks Prisma SASE / Prisma Access, Pentaho Data Integration/Kettle, Pentaho/Kettle, Perimeter 81/Check Point, Ping Identity/ForgeRock, Qlik / Talend (Talend Data Fabric), Splunk / Cisco AppDynamics, Splunk / Splunk Observability Cloud, Splunk APM / Splunk Observability Cloud, Splunk Observability / AppDynamics, Stytch/Frontegg, Talend/Qlik Talend Cloud Enterprise, Unitrends/Microsoft, dbt Core + dbt Cloud, dbt/Stitch

## Appendix: loose paraphrase stability

- Claude Haiku 4.5: a direct first choice kept as first choice or alternative in 6 of 11 categories (55%); differing under the strict rule: ai-coding-assistants, api-management, application-performance-monitoring, backup-and-disaster-recovery, business-password-managers, cloud-cost-management, compliance-automation, etl-and-elt, sase-platforms
- GPT-5.4 mini: a direct first choice kept as first choice or alternative in 9 of 12 categories (75%); differing under the strict rule: api-management, application-performance-monitoring, backup-and-disaster-recovery, business-password-managers, cloud-cost-management, compliance-automation, customer-identity-and-access-management, etl-and-elt, sase-platforms
- Gemini 3.5 Flash: a direct first choice kept as first choice or alternative in 12 of 12 categories (100%); differing under the strict rule: api-management, backup-and-disaster-recovery, cloud-cost-management, compliance-automation, customer-identity-and-access-management, etl-and-elt
- Perplexity Sonar: a direct first choice kept as first choice or alternative in 7 of 12 categories (58%); differing under the strict rule: backup-and-disaster-recovery, business-password-managers, compliance-automation, customer-identity-and-access-management, etl-and-elt, sase-platforms
- Grok 4.1 Fast: a direct first choice kept as first choice or alternative in 10 of 12 categories (83%); differing under the strict rule: api-management, business-password-managers, cloud-cost-management, customer-identity-and-access-management, etl-and-elt
- Mistral Small: a direct first choice kept as first choice or alternative in 5 of 12 categories (42%); differing under the strict rule: ai-coding-assistants, api-management, backup-and-disaster-recovery, business-password-managers, compliance-automation, content-delivery-networks, customer-identity-and-access-management, data-warehouses, etl-and-elt, sase-platforms
- DeepSeek V4 Flash: a direct first choice kept as first choice or alternative in 11 of 12 categories (92%); differing under the strict rule: application-performance-monitoring, business-password-managers, cloud-cost-management, content-delivery-networks, sase-platforms
- Llama 4 Maverick: a direct first choice kept as first choice or alternative in 1 of 8 categories (12%); differing under the strict rule: ai-coding-assistants, application-performance-monitoring, business-password-managers, cloud-cost-management, compliance-automation, content-delivery-networks, data-warehouses, etl-and-elt
- Qwen 3.7 Flash: a direct first choice kept as first choice or alternative in 9 of 12 categories (75%); differing under the strict rule: application-performance-monitoring, backup-and-disaster-recovery, business-password-managers, compliance-automation, content-delivery-networks, customer-identity-and-access-management, etl-and-elt, sase-platforms
- Kimi K2: a direct first choice kept as first choice or alternative in 11 of 12 categories (92%); differing under the strict rule: application-performance-monitoring, backup-and-disaster-recovery, compliance-automation, content-delivery-networks, customer-identity-and-access-management, etl-and-elt, sase-platforms
- GLM 4.7 FlashX: a direct first choice kept as first choice or alternative in 10 of 12 categories (83%); differing under the strict rule: application-performance-monitoring, backup-and-disaster-recovery, business-password-managers, cloud-cost-management, compliance-automation, content-delivery-networks, customer-identity-and-access-management, etl-and-elt
- MiniMax M2.5: a direct first choice kept as first choice or alternative in 10 of 12 categories (83%); differing under the strict rule: api-management, application-performance-monitoring, backup-and-disaster-recovery, business-password-managers, cloud-cost-management, compliance-automation, content-delivery-networks, customer-identity-and-access-management, etl-and-elt, sase-platforms
- GPT-6 Luna: a direct first choice kept as first choice or alternative in 9 of 12 categories (75%); differing under the strict rule: application-performance-monitoring, backup-and-disaster-recovery, cloud-cost-management, customer-identity-and-access-management, sase-platforms
- Muse Glimmer 30B: a direct first choice kept as first choice or alternative in 10 of 12 categories (83%); differing under the strict rule: api-management, application-performance-monitoring, backup-and-disaster-recovery, business-password-managers, content-delivery-networks, customer-identity-and-access-management, etl-and-elt, sase-platforms


# Segment: Small business

# IT AI Recommendation Index, run mai-20261004-1101-calibration_b

72 prompts, 14 models, 5,161 raw judge labels, 5,199 scored labels after normalization. Published weights: first choice +3, alternative +2, mention +1, soft negative -2, hard negative -3.

Scored under vendor alias table version 2026-10.8. Raw judge labels are the permanent record; the numbers below are derived from them and are regenerated for every run whenever the alias table changes, so the whole series is always scored under one table version. Resolution of raw names: 4,357 by alias or canonical name, 469 by category-scoped alias, 86 from combined answers split into their products, 28 from combined answers counted once for their first product, 0 excluded by rule, 220 unresolved and counted under the raw name.

## Paraphrase stability

Share of categories where a model's first choice set on the direct prompt equals its set on the paraphrase.

| Model | Same | Different | Stability |
|---|---|---|---|
| Claude Haiku 4.5 | 1 | 11 | 8% |
| GPT-5.4 mini | 6 | 6 | 50% |
| Gemini 3.5 Flash | 7 | 5 | 58% |
| Perplexity Sonar | 2 | 10 | 17% |
| Grok 4.1 Fast | 9 | 3 | 75% |
| Mistral Small | 2 | 10 | 17% |
| DeepSeek V4 Flash | 5 | 7 | 42% |
| Llama 4 Maverick | 1 | 7 | 12% |
| Qwen 3.7 Flash | 3 | 9 | 25% |
| Kimi K2 | 6 | 6 | 50% |
| GLM 4.7 FlashX | 3 | 9 | 25% |
| MiniMax M2.5 | 5 | 7 | 42% |
| GPT-6 Luna | 7 | 5 | 58% |
| Muse Glimmer 30B | 3 | 9 | 25% |

A looser measure, whether a direct first choice survives as a first choice or alternative on the paraphrase, is in the appendix.

## Standing by category

First choice share across the direct, paraphrase, budget and scale prompts and all 14 models. The top product's share is published alongside the label: contested means the top share is at or below 40%, and a category just above the line is not meaningfully different from one just below it. Consensus means every model's direct-prompt first choice is the same single product.

| Category | Top product | Top share | First choices | Status |
|---|---|---|---|---|
| ai-coding-assistants | GitHub Copilot | 67% | 55 | clear leader |
| api-management | Kong Gateway | 31% | 55 | contested |
| application-performance-monitoring | New Relic | 50% | 50 | clear leader |
| backup-and-disaster-recovery | IDrive Business | 18% | 56 | contested |
| business-password-managers | Bitwarden | 46% | 50 | clear leader |
| cloud-cost-management | Vantage | 57% | 60 | clear leader |
| compliance-automation | Vanta | 38% | 55 | contested |
| content-delivery-networks | Cloudflare | 77% | 52 | clear leader |
| customer-identity-and-access-management | Clerk | 25% | 60 | contested |
| data-warehouses | Google BigQuery | 69% | 55 | clear leader |
| etl-and-elt | Airbyte | 34% | 59 | contested |
| sase-platforms | Cloudflare One | 67% | 49 | clear leader |

**ai-coding-assistants**: GitHub Copilot 67%, Cursor 13%, Windsurf 9%, Cline 4%, Amazon Q Developer 2%

**api-management**: Kong Gateway 31%, Zuplo 20%, Postman 16%, Amazon API Gateway 9%, Tyk 7%

**application-performance-monitoring**: New Relic 50%, Sentry 12%, SigNoz 10%, Datadog APM 8%, AppSignal 6%

**backup-and-disaster-recovery**: IDrive Business 18%, Acronis Cyber Protect 16%, Datto SIRIS 12%, Veeam Data Platform 12%, Backblaze 5%

**business-password-managers**: Bitwarden 46%, 1Password 40%, RoboForm 6%, NordPass 4%, Keeper Security 2%

**cloud-cost-management**: Vantage 57%, CloudZero 8%, AWS Cost Explorer 7%, Microsoft Cost Management 5%, ManageEngine CloudSpend 3%

**compliance-automation**: Vanta 38%, Sprinto 29%, Drata 11%, ComplyJet 5%, Scrut Automation 4%

**content-delivery-networks**: Cloudflare 77%, Bunny.net 19%, Cloudflare Application Services 4%

**customer-identity-and-access-management**: Clerk 25%, Auth0 13%, Frontegg 12%, Amazon Cognito 8%, Descope 8%

**data-warehouses**: Google BigQuery 69%, Snowflake 20%, MotherDuck 4%, Amazon Redshift 2%, Azure Synapse Analytics 2%

**etl-and-elt**: Airbyte 34%, Hevo Data 24%, Skyvia 15%, Fivetran 7%, Stitch 7%

**sase-platforms**: Cloudflare One 67%, Cato Networks 10%, Fortinet FortiSASE 4%, NordLayer 4%, Cato Networks SMB SASE 2%

## Anti-recommendations

Products most often labeled soft or hard negative, with the number of models that did so at least once in the category, and the share of that product's labels in the category that were negative. A high negative share on a product with few labels is a warning; a low share on a product with many labels is salience, not sentiment.

- **ai-coding-assistants**: GitHub Copilot (8 models, 4 hard; 8 of 79 labels negative), Cursor (8 models, 1 hard; 13 of 63 labels negative), Claude Code (6 models, 1 hard; 6 of 24 labels negative), Windsurf (6 models; 7 of 40 labels negative)
- **api-management**: Apigee (14 models, 19 hard; 37 of 55 labels negative), MuleSoft Anypoint Platform (12 models, 19 hard; 23 of 24 labels negative), IBM API Connect (9 models, 9 hard; 11 of 12 labels negative), Kong Gateway (9 models, 3 hard; 16 of 76 labels negative)
- **application-performance-monitoring**: Dynatrace (14 models, 13 hard; 26 of 35 labels negative), Datadog APM (14 models, 10 hard; 38 of 67 labels negative), AppDynamics (12 models, 9 hard; 14 of 19 labels negative), New Relic (10 models, 2 hard; 12 of 72 labels negative)
- **backup-and-disaster-recovery**: Dropbox (8 models, 8 hard; 8 of 8 labels negative), Google Drive (8 models, 8 hard; 8 of 8 labels negative), Microsoft OneDrive (7 models, 7 hard; 7 of 7 labels negative), Google Workspace (5 models, 1 hard; 5 of 5 labels negative)
- **business-password-managers**: LastPass (13 models, 10 hard; 19 of 35 labels negative), Dashlane (5 models, 1 hard; 7 of 38 labels negative), Google Password Manager (3 models, 3 hard; 3 of 3 labels negative), NordPass (3 models, 1 hard; 3 of 43 labels negative)
- **cloud-cost-management**: IBM Apptio Cloudability (14 models, 16 hard; 31 of 32 labels negative), VMware Tanzu CloudHealth (14 models, 11 hard; 24 of 27 labels negative), CloudZero (10 models, 5 hard; 14 of 48 labels negative), Flexera One (8 models, 6 hard; 13 of 14 labels negative)
- **compliance-automation**: Drata (12 models, 1 hard; 19 of 70 labels negative), Vanta (10 models, 1 hard; 19 of 69 labels negative), Hyperproof (7 models; 8 of 12 labels negative), Secureframe (6 models; 7 of 52 labels negative)
- **content-delivery-networks**: Akamai (13 models, 11 hard; 24 of 29 labels negative), Fastly (12 models, 8 hard; 18 of 41 labels negative), Amazon CloudFront (11 models, 5 hard; 20 of 51 labels negative), Google Cloud CDN (10 models, 6 hard; 11 of 15 labels negative)
- **customer-identity-and-access-management**: Auth0 (13 models, 5 hard; 36 of 71 labels negative), Amazon Cognito (11 models, 5 hard; 17 of 37 labels negative), Okta (8 models, 6 hard; 9 of 11 labels negative), Keycloak (8 models, 1 hard; 9 of 15 labels negative)
- **data-warehouses**: Snowflake (13 models, 6 hard; 22 of 73 labels negative), Amazon Redshift (12 models, 7 hard; 16 of 72 labels negative), Databricks SQL (10 models, 6 hard; 15 of 30 labels negative), Google BigQuery (10 models, 2 hard; 10 of 79 labels negative)
- **etl-and-elt**: Fivetran (12 models, 4 hard; 18 of 57 labels negative), Talend (10 models, 9 hard; 13 of 23 labels negative), Informatica Intelligent Data Management Cloud (8 models, 7 hard; 9 of 10 labels negative), Stitch (7 models, 1 hard; 10 of 47 labels negative)
- **sase-platforms**: Zscaler Zero Trust Exchange (14 models, 12 hard; 33 of 47 labels negative), Netskope One (12 models, 7 hard; 16 of 33 labels negative), Palo Alto Networks Prisma SASE (8 models, 5 hard; 15 of 20 labels negative), Check Point Harmony SASE (7 models, 4 hard; 8 of 30 labels negative)

## Leadership and criticism

First-choice share and negative label rate are independent, so every product with at least 10 labels in a category is placed on both axes. Cutoffs: leader at 30% or more of first choices, criticized at 25% or more negative labels. An endorsed leader is recommended and not criticized; a criticized default is recommended while the models list its problems; a criticized challenger is named mostly to be warned against.

| Category | Product | First-choice share | Negative rate | Labels | Quadrant |
|---|---|---|---|---|---|
| ai-coding-assistants | GitHub Copilot | 67% | 10% | 79 | endorsed leader |
| ai-coding-assistants | Cursor | 13% | 21% | 63 | accepted challenger |
| ai-coding-assistants | Windsurf | 9% | 18% | 40 | accepted challenger |
| ai-coding-assistants | Tabnine | 2% | 0% | 26 | accepted challenger |
| ai-coding-assistants | Amazon Q Developer | 2% | 13% | 31 | accepted challenger |
| ai-coding-assistants | Continue | 0% | 0% | 13 | accepted challenger |
| ai-coding-assistants | Claude Code | 0% | 25% | 24 | criticized challenger |
| api-management | Kong Gateway | 31% | 21% | 76 | endorsed leader |
| api-management | Zuplo | 20% | 0% | 34 | accepted challenger |
| api-management | Postman | 16% | 10% | 48 | accepted challenger |
| api-management | Amazon API Gateway | 9% | 15% | 52 | accepted challenger |
| api-management | Tyk | 7% | 2% | 41 | accepted challenger |
| api-management | Gravitee | 4% | 0% | 25 | accepted challenger |
| api-management | Stoplight | 2% | 0% | 11 | accepted challenger |
| api-management | Azure API Management | 2% | 22% | 32 | accepted challenger |
| api-management | Apigee | 0% | 67% | 55 | criticized challenger |
| api-management | IBM API Connect | 0% | 92% | 12 | criticized challenger |
| api-management | MuleSoft Anypoint Platform | 0% | 96% | 24 | criticized challenger |
| application-performance-monitoring | New Relic | 50% | 17% | 72 | endorsed leader |
| application-performance-monitoring | Sentry | 12% | 12% | 42 | accepted challenger |
| application-performance-monitoring | SigNoz | 10% | 4% | 24 | accepted challenger |
| application-performance-monitoring | Datadog APM | 8% | 57% | 67 | criticized challenger |
| application-performance-monitoring | AppSignal | 6% | 0% | 15 | accepted challenger |
| application-performance-monitoring | Scout APM | 4% | 0% | 12 | accepted challenger |
| application-performance-monitoring | Grafana Cloud | 2% | 8% | 25 | accepted challenger |
| application-performance-monitoring | Site24x7 | 0% | 0% | 10 | accepted challenger |
| application-performance-monitoring | Elastic APM | 0% | 5% | 21 | accepted challenger |
| application-performance-monitoring | AppDynamics | 0% | 74% | 19 | criticized challenger |
| application-performance-monitoring | Dynatrace | 0% | 74% | 35 | criticized challenger |
| application-performance-monitoring | IBM Instana | 0% | 75% | 12 | criticized challenger |
| backup-and-disaster-recovery | IDrive Business | 18% | 0% | 25 | accepted challenger |
| backup-and-disaster-recovery | Acronis Cyber Protect | 16% | 8% | 49 | accepted challenger |
| backup-and-disaster-recovery | Datto SIRIS | 12% | 9% | 32 | accepted challenger |
| backup-and-disaster-recovery | Veeam Data Platform | 12% | 14% | 37 | accepted challenger |
| backup-and-disaster-recovery | Backblaze | 5% | 11% | 18 | accepted challenger |
| backup-and-disaster-recovery | Veeam Backup & Replication | 4% | 0% | 11 | accepted challenger |
| backup-and-disaster-recovery | Backblaze Business Backup | 4% | 13% | 15 | accepted challenger |
| backup-and-disaster-recovery | Carbonite Safe | 2% | 15% | 13 | accepted challenger |
| backup-and-disaster-recovery | Axcient x360Recover | 0% | 0% | 11 | accepted challenger |
| business-password-managers | Bitwarden | 46% | 1% | 73 | endorsed leader |
| business-password-managers | 1Password | 40% | 4% | 68 | endorsed leader |
| business-password-managers | RoboForm | 6% | 6% | 18 | accepted challenger |
| business-password-managers | NordPass | 4% | 7% | 43 | accepted challenger |
| business-password-managers | Keeper Security | 2% | 6% | 48 | accepted challenger |
| business-password-managers | Dashlane | 0% | 18% | 38 | accepted challenger |
| business-password-managers | LastPass | 0% | 54% | 35 | criticized challenger |
| cloud-cost-management | Vantage | 57% | 0% | 57 | endorsed leader |
| cloud-cost-management | CloudZero | 8% | 29% | 48 | criticized challenger |
| cloud-cost-management | AWS Cost Explorer | 7% | 7% | 44 | accepted challenger |
| cloud-cost-management | Microsoft Cost Management | 5% | 3% | 31 | accepted challenger |
| cloud-cost-management | Economize | 2% | 9% | 11 | accepted challenger |
| cloud-cost-management | Finout | 2% | 50% | 18 | criticized challenger |
| cloud-cost-management | OpenCost | 0% | 0% | 10 | accepted challenger |
| cloud-cost-management | Google Cloud Billing | 0% | 0% | 18 | accepted challenger |
| cloud-cost-management | Infracost | 0% | 0% | 16 | accepted challenger |
| cloud-cost-management | Kubecost | 0% | 7% | 27 | accepted challenger |
| cloud-cost-management | nOps | 0% | 9% | 11 | accepted challenger |
| cloud-cost-management | Cloudaware | 0% | 50% | 14 | criticized challenger |
| cloud-cost-management | VMware Tanzu CloudHealth | 0% | 89% | 27 | criticized challenger |
| cloud-cost-management | Flexera One | 0% | 93% | 14 | criticized challenger |
| cloud-cost-management | IBM Apptio Cloudability | 0% | 97% | 32 | criticized challenger |
| compliance-automation | Vanta | 38% | 28% | 69 | criticized default |
| compliance-automation | Sprinto | 29% | 6% | 52 | accepted challenger |
| compliance-automation | Drata | 11% | 27% | 70 | criticized challenger |
| compliance-automation | Scrut Automation | 4% | 11% | 19 | accepted challenger |
| compliance-automation | Secureframe | 2% | 13% | 52 | accepted challenger |
| compliance-automation | Thoropass | 2% | 24% | 17 | accepted challenger |
| compliance-automation | Hyperproof | 0% | 67% | 12 | criticized challenger |
| content-delivery-networks | Cloudflare | 77% | 4% | 69 | endorsed leader |
| content-delivery-networks | Bunny.net | 19% | 0% | 59 | accepted challenger |
| content-delivery-networks | KeyCDN | 0% | 2% | 40 | accepted challenger |
| content-delivery-networks | Amazon CloudFront | 0% | 39% | 51 | criticized challenger |
| content-delivery-networks | Fastly | 0% | 44% | 41 | criticized challenger |
| content-delivery-networks | Azure CDN | 0% | 55% | 11 | criticized challenger |
| content-delivery-networks | Google Cloud CDN | 0% | 73% | 15 | criticized challenger |
| content-delivery-networks | Akamai | 0% | 83% | 29 | criticized challenger |
| customer-identity-and-access-management | Clerk | 25% | 2% | 54 | accepted challenger |
| customer-identity-and-access-management | Auth0 | 13% | 51% | 71 | criticized challenger |
| customer-identity-and-access-management | Frontegg | 12% | 0% | 22 | accepted challenger |
| customer-identity-and-access-management | WorkOS | 8% | 0% | 25 | accepted challenger |
| customer-identity-and-access-management | Descope | 8% | 4% | 24 | accepted challenger |
| customer-identity-and-access-management | Amazon Cognito | 8% | 46% | 37 | criticized challenger |
| customer-identity-and-access-management | Supabase Auth | 5% | 0% | 21 | accepted challenger |
| customer-identity-and-access-management | Firebase Authentication | 3% | 12% | 24 | accepted challenger |
| customer-identity-and-access-management | Stytch | 2% | 0% | 22 | accepted challenger |
| customer-identity-and-access-management | LoginRadius | 2% | 0% | 13 | accepted challenger |
| customer-identity-and-access-management | FusionAuth | 0% | 8% | 24 | accepted challenger |
| customer-identity-and-access-management | Keycloak | 0% | 60% | 15 | criticized challenger |
| customer-identity-and-access-management | Okta | 0% | 82% | 11 | criticized challenger |
| data-warehouses | Google BigQuery | 69% | 13% | 79 | endorsed leader |
| data-warehouses | Snowflake | 20% | 30% | 73 | criticized challenger |
| data-warehouses | MotherDuck | 4% | 0% | 26 | accepted challenger |
| data-warehouses | Azure Synapse Analytics | 2% | 21% | 14 | accepted challenger |
| data-warehouses | Amazon Redshift | 2% | 22% | 72 | accepted challenger |
| data-warehouses | PostgreSQL | 0% | 10% | 10 | accepted challenger |
| data-warehouses | Firebolt | 0% | 10% | 10 | accepted challenger |
| data-warehouses | ClickHouse Cloud | 0% | 11% | 27 | accepted challenger |
| data-warehouses | Databricks SQL | 0% | 50% | 30 | criticized challenger |
| etl-and-elt | Airbyte | 34% | 15% | 68 | endorsed leader |
| etl-and-elt | Hevo Data | 24% | 2% | 54 | accepted challenger |
| etl-and-elt | Skyvia | 15% | 6% | 36 | accepted challenger |
| etl-and-elt | Stitch | 7% | 21% | 47 | accepted challenger |
| etl-and-elt | Fivetran | 7% | 32% | 57 | criticized challenger |
| etl-and-elt | Coupler.io | 3% | 5% | 19 | accepted challenger |
| etl-and-elt | Integrate.io | 2% | 0% | 10 | accepted challenger |
| etl-and-elt | Estuary Flow | 2% | 0% | 13 | accepted challenger |
| etl-and-elt | Matillion | 2% | 38% | 16 | criticized challenger |
| etl-and-elt | Talend | 2% | 57% | 23 | criticized challenger |
| etl-and-elt | dbt | 0% | 3% | 33 | accepted challenger |
| etl-and-elt | Apache Airflow | 0% | 50% | 14 | criticized challenger |
| etl-and-elt | Informatica Intelligent Data Management Cloud | 0% | 90% | 10 | criticized challenger |
| sase-platforms | Cloudflare One | 67% | 2% | 66 | endorsed leader |
| sase-platforms | Cato Networks | 10% | 24% | 37 | accepted challenger |
| sase-platforms | NordLayer | 4% | 5% | 19 | accepted challenger |
| sase-platforms | Fortinet FortiSASE | 4% | 12% | 40 | accepted challenger |
| sase-platforms | Cato SASE Cloud | 2% | 13% | 15 | accepted challenger |
| sase-platforms | Check Point Harmony SASE | 2% | 27% | 30 | criticized challenger |
| sase-platforms | Zscaler Zero Trust Exchange | 2% | 70% | 47 | criticized challenger |
| sase-platforms | Netskope One | 0% | 48% | 33 | criticized challenger |
| sase-platforms | Palo Alto Networks Prisma SASE | 0% | 75% | 20 | criticized challenger |
| sase-platforms | Palo Alto Networks Prisma Access | 0% | 80% | 10 | criticized challenger |

## Treatment of lab-affiliated products by model

Self-preference is only measurable with a control group: how the lab's own model treats its products compared with how every other model treats the same products.  have no products in the covered categories with enough labels to measure, so nothing is claimed about them.

**Anthropic products** (3 products, 29 labels). Cells are positive/negative/all labels.

| Product | Claude Haiku 4.5 | GPT-5.4 mini | Gemini 3.5 Flash | Perplexity Sonar | Grok 4.1 Fast | Mistral Small | DeepSeek V4 Flash | Llama 4 Maverick | Qwen 3.7 Flash | Kimi K2 | GLM 4.7 FlashX | MiniMax M2.5 | GPT-6 Luna | Muse Glimmer 30B |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Claude Code | 2/0/2 |  | 3/1/4 | 1/0/1 | 1/0/1 |  | 4/1/5 | 1/0/1 | 2/1/3 | 1/1/2 | 0/1/1 |  | 1/0/1 | 2/1/3 |
| Claude | 1/0/1 |  | 0/1/1 |  | 0/1/1 |  |  |  |  | 1/0/1 |  |  |  |  |
| Anthropic Claude Enterprise |  |  |  |  |  |  |  |  |  |  |  |  |  | 1/0/1 |

Mean label weight on Anthropic products: Claude Haiku 4.5 +1.67 over 3 labels; the other 13 models +0.54 over 26 labels. Weights run from +3 (first choice) to -3 (hard negative). A gap under about half a point on this few labels is not a finding.

**OpenAI products** (2 products, 12 labels). Cells are positive/negative/all labels.

| Product | Claude Haiku 4.5 | GPT-5.4 mini | Gemini 3.5 Flash | Perplexity Sonar | Grok 4.1 Fast | Mistral Small | DeepSeek V4 Flash | Llama 4 Maverick | Qwen 3.7 Flash | Kimi K2 | GLM 4.7 FlashX | MiniMax M2.5 | GPT-6 Luna | Muse Glimmer 30B |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| OpenAI Codex |  | 1/0/1 |  |  |  |  | 0/1/1 | 1/0/1 |  | 0/1/1 |  |  | 1/0/1 | 0/1/1 |
| ChatGPT | 1/0/1 |  | 0/1/1 |  | 0/1/1 |  |  |  |  | 1/0/1 |  | 0/1/1 | 0/1/1 |  |

Mean label weight on OpenAI products: GPT-5.4 mini, GPT-6 Luna +0.33 over 3 labels; the other 12 models -1.11 over 9 labels. Weights run from +3 (first choice) to -3 (hard negative). A gap under about half a point on this few labels is not a finding.

**Google products** (15 products, 229 labels). Cells are positive/negative/all labels.

| Product | Claude Haiku 4.5 | GPT-5.4 mini | Gemini 3.5 Flash | Perplexity Sonar | Grok 4.1 Fast | Mistral Small | DeepSeek V4 Flash | Llama 4 Maverick | Qwen 3.7 Flash | Kimi K2 | GLM 4.7 FlashX | MiniMax M2.5 | GPT-6 Luna | Muse Glimmer 30B |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Google BigQuery | 5/1/6 | 5/1/6 | 6/0/6 | 5/1/6 | 6/0/6 | 5/0/5 | 6/1/7 | 2/1/3 | 5/1/6 | 6/0/6 | 5/1/6 | 5/1/6 | 6/1/7 | 4/1/5 |
| Apigee | 2/1/3 | 2/1/3 | 0/4/4 | 1/3/4 | 2/3/5 | 2/3/5 | 0/4/4 | 1/2/3 | 1/5/6 | 1/4/5 | 1/3/4 | 2/1/3 | 1/2/3 | 2/1/3 |
| Firebase Authentication | 1/0/1 | 1/0/1 | 0/1/1 | 0/1/1 | 1/0/1 | 2/0/2 | 1/0/1 |  | 6/0/6 | 3/0/3 | 2/0/2 | 1/0/1 | 2/1/3 | 1/0/1 |
| Google Cloud Billing | 1/0/1 |  | 3/0/3 | 1/0/1 | 2/0/2 | 1/0/1 | 2/0/2 |  | 1/0/1 | 2/0/2 | 2/0/2 | 2/0/2 |  | 1/0/1 |
| Google Cloud CDN |  |  | 0/2/2 | 1/1/2 | 0/1/1 | 0/1/1 |  | 0/1/1 | 1/1/2 | 1/1/2 | 1/1/2 | 0/1/1 |  | 0/1/1 |
| Google Drive |  |  | 0/1/1 | 0/1/1 | 0/1/1 |  | 0/1/1 |  |  | 0/1/1 | 0/1/1 | 0/1/1 |  | 0/1/1 |
| Google Cloud Cost Management |  |  |  |  |  | 1/0/1 | 1/0/1 |  |  | 1/0/1 | 1/0/1 |  |  | 3/0/3 |
| Google Workspace |  |  |  | 0/1/1 |  |  | 0/1/1 |  |  |  |  | 0/1/1 | 0/1/1 | 0/1/1 |
| Google Cloud |  |  |  |  |  | 1/0/1 |  |  |  |  |  |  | 3/0/3 |  |
| Gemini Code Assist |  | 1/0/1 |  |  |  |  | 1/0/1 | 1/0/1 |  |  |  |  |  | 1/0/1 |
| Google Password Manager |  |  | 0/1/1 | 0/1/1 | 0/1/1 |  |  |  |  |  |  |  |  |  |
| Google Gemini |  |  | 0/1/1 |  |  |  |  |  |  |  |  |  |  | 1/0/1 |
| Google Cloud API Gateway |  |  |  |  |  |  |  |  |  |  |  |  | 1/0/1 |  |
| Google Cloud Data Fusion |  | 1/0/1 |  |  |  |  |  |  |  |  |  |  |  |  |
| Google Cloud Dataflow | 1/0/1 |  |  |  |  |  |  |  |  |  |  |  |  |  |

Mean label weight on Google products: Gemini 3.5 Flash -0.32 over 19 labels; the other 13 models +0.68 over 210 labels. Weights run from +3 (first choice) to -3 (hard negative). A gap under about half a point on this few labels is not a finding.

## Discontinued products recommended

None in this run.

## Normalization

Unresolved, 220 labels counted under the raw name, for human review:

Equally.ai in compliance-automation (3), Meltano Open in etl-and-elt (3), AT&T Managed SASE in sase-platforms (2), AWS Amplify in customer-identity-and-access-management (2), AWS Cost Anomaly Detection in cloud-cost-management (2), AWS Elastic DR in backup-and-disaster-recovery (2), Actian Avalanche in data-warehouses (2), Amazon Q Free tier in ai-coding-assistants (2), Cloudflare Application Services in content-delivery-networks (2), Cursor agent mode in ai-coding-assistants (2), Datto Secure Edge in sase-platforms (2), Deck in api-management (2), Gemini CLI in ai-coding-assistants (2), Jotform Workflows in compliance-automation (2), MaxCDN in content-delivery-networks (2), McAfee True Key in business-password-managers (2), Okta's Auth0 in customer-identity-and-access-management (2), Oracle Identity Cloud in customer-identity-and-access-management (2), Rockset in data-warehouses (2), Vantage.sh in cloud-cost-management (2), A Synology NAS (Network Attached Storage) in backup-and-disaster-recovery (1), API Gateway in api-management (1), AT&T Business SASE in sase-platforms (1), AWS CodeWhisperer in ai-coding-assistants (1), AWS Cost Management stack in cloud-cost-management (1), AWS HTTP APIs in api-management (1), AWS: Cost Explorer / Budgets in cloud-cost-management (1), Acronis Backup and Recovery in backup-and-disaster-recovery (1), Acronis Cyber Protect Home Office in backup-and-disaster-recovery (1), ActionIQ in customer-identity-and-access-management (1), Afi.ai in backup-and-disaster-recovery (1), Amazon Q Agent in ai-coding-assistants (1), Amazon Redshift Provisioned in data-warehouses (1), Antigravity (Google) in ai-coding-assistants (1), Apache Sqoop / Oozie in etl-and-elt (1), Apache StreamSets in etl-and-elt (1), Apigee Edge Micro in api-management (1), Apple's Passwords in business-password-managers (1), Astera in api-management (1), Azure: Cost Management in cloud-cost-management (1), BDRShield in backup-and-disaster-recovery (1), Backblaze Business Edition in backup-and-disaster-recovery (1), BackupPC in backup-and-disaster-recovery (1), Better Auth in customer-identity-and-access-management (1), Boomi iPaaS in etl-and-elt (1), Browser-Based Managers (Chrome, Safari, Edge) in business-password-managers (1), Browser-Built-In Managers (Chrome, Edge, Safari) in business-password-managers (1), Built-in browser password managers in business-password-managers (1), Carbonite Cloud Backup in backup-and-disaster-recovery (1), Carbonite Home/Small Business in backup-and-disaster-recovery (1), Carbonite Safe Backup Pro in backup-and-disaster-recovery (1), Carbonite Small Business in backup-and-disaster-recovery (1), Carbonite for Business in backup-and-disaster-recovery (1), Cato Networks SMB SASE in sase-platforms (1), Cato SASE Platform in sase-platforms (1), Cisco Secure Access Service Edge / Cisco Secure Connect in sase-platforms (1), Cisco Secure Access Services Edge in sase-platforms (1), Cloud Toggle in cloud-cost-management (1), Cloudflare Application Services (CDN) in content-delivery-networks (1), Correla in application-performance-monitoring (1), CrashPlan for Business in backup-and-disaster-recovery (1), Databricks Serverless in data-warehouses (1), Datto ALTO in backup-and-disaster-recovery (1), Datto Autotask/Backupify in backup-and-disaster-recovery (1), Datto BDR in backup-and-disaster-recovery (1), Datto Cloud Continuity in backup-and-disaster-recovery (1), DeepSeek V4 Flash in ai-coding-assistants (1), DeepSeek-based in ai-coding-assistants (1), Definite in data-warehouses (1), DuckDB Cloud in data-warehouses (1), EaseUS Todo Backup in backup-and-disaster-recovery (1), Fueler in compliance-automation (1), FullContact in customer-identity-and-access-management (1), GCP Billing with BigQuery export in cloud-cost-management (1), GCP Budgets in cloud-cost-management (1), GCP: Billing reports / budgets in cloud-cost-management (1), Gcore CDN in content-delivery-networks (1), Gemini 3.7 Flash in ai-coding-assistants (1), Generic OpenAI GPT models used as coding assistants in ai-coding-assistants (1), Gilt Group in cloud-cost-management (1), GoodSync in backup-and-disaster-recovery (1), Google Cloud Archive in backup-and-disaster-recovery (1), Google Cloud Trace in application-performance-monitoring (1), Google Cloud: Billing Reports in cloud-cost-management (1), Google's native cost tools in cloud-cost-management (1), Grafana with Prometheus/OpenTelemetry in application-performance-monitoring (1), Granica.ai in cloud-cost-management (1), Handy Backup in backup-and-disaster-recovery (1), Hideez in customer-identity-and-access-management (1), Highwinds in content-delivery-networks (1), HubSpot Operations Hub in etl-and-elt (1), HyperComply in compliance-automation (1), IBM Cloud Identity in customer-identity-and-access-management (1), IBM's Apptio Cloudability in cloud-cost-management (1), IDrive Online Backup and Object Storage e2 in backup-and-disaster-recovery (1), INAP DRaaS in backup-and-disaster-recovery (1), ISMS Copilot in compliance-automation (1), Ideagen Q-Pulse in compliance-automation (1), Infisign in customer-identity-and-access-management (1), Instaloop in cloud-cost-management (1), Jetpack Site Accelerator in content-delivery-networks (1), Jitterbit Harmony in etl-and-elt (1), Jotform in compliance-automation (1), Kafka Connect in etl-and-elt (1), Keeper Password Manager and Digital Vault in business-password-managers (1), Kilo in ai-coding-assistants (1), Kimi Code in ai-coding-assistants (1), Kion in cloud-cost-management (1), Kiro.dev in ai-coding-assistants (1), Klaviyo in customer-identity-and-access-management (1), Kong Ingress Controller in api-management (1), Kong Konnect Developer Portal in api-management (1), LLM7.io in ai-coding-assistants (1), LightCDN in content-delivery-networks (1), Llama-based in ai-coding-assistants (1), LoginRadius for SMBs in customer-identity-and-access-management (1), Lucia in customer-identity-and-access-management (1), Managed Keycloak in customer-identity-and-access-management (1), Medcurity in compliance-automation (1), Microsoft Azure: Cost Management + Billing in cloud-cost-management (1), Microsoft Copilot consumer + M365 in ai-coding-assistants (1), Microsoft Integration Services (SSIS) in etl-and-elt (1), Microsoft Power Query in etl-and-elt (1), Microsoft Secure Access (Entra ID) in sase-platforms (1), Microsoft's paid commercial Copilot plans in ai-coding-assistants (1), Moesip in api-management (1), MyComplianceOffice in compliance-automation (1), NAVEX Global in compliance-automation (1), Nakivo Site Recovery in backup-and-disaster-recovery (1), Native Cloud Cost Explorer in cloud-cost-management (1), Native Tools (AWS Cost Explorer, Azure Cost Management) in cloud-cost-management (1), Native cloud provider tools (AWS Cost Explorer, GCP Billing, Azure Cost Management) in cloud-cost-management (1), New Relic" free tier in application-performance-monitoring (1), NextAuth in customer-identity-and-access-management (1), NextAuth/Auth.js in customer-identity-and-access-management (1), Noros in cloud-cost-management (1), Nuabee DRaaS in backup-and-disaster-recovery (1), OpenAI Codex via ChatGPT Free / Go / Plus / Pro sign-in in ai-coding-assistants (1), OpenCode Zen in ai-coding-assistants (1), OpenVPN Cloud / CloudConnexa in sase-platforms (1), Oracle Exalytics in data-warehouses (1), ParkMyCloud in cloud-cost-management (1), Passport in customer-identity-and-access-management (1), Pentaho Community Edition in etl-and-elt (1), Pinpoint in application-performance-monitoring (1), PortalGuard in customer-identity-and-access-management (1), PostgreSQL Replica in data-warehouses (1), Prometheus with Grafana in application-performance-monitoring (1), QNAP NAS in backup-and-disaster-recovery (1), Raw Python Scripts (without orchestration) in etl-and-elt (1), SAP API Management in api-management (1), SAP CIAM in customer-identity-and-access-management (1), SOC2Start in compliance-automation (1), Salesforce Identity in customer-identity-and-access-management (1), Salesforce Identity / Customer 360 in customer-identity-and-access-management (1), Salesforce Platform / Salesforce Headless 360 in customer-identity-and-access-management (1), Salesforce-related like Headless 360 in customer-identity-and-access-management (1), Secure Data in backup-and-disaster-recovery (1), Self-hosted (e.g., Ollama + CodeLlama) in ai-coding-assistants (1), ShadowProtect in backup-and-disaster-recovery (1), Shopify-native CDN in content-delivery-networks (1), Skyhigh in sase-platforms (1), Snowflake Standard Edition in data-warehouses (1), SolarWinds APM in application-performance-monitoring (1), Supermaven in ai-coding-assistants (1), Swagger Portal in api-management (1), SyncBackPro in backup-and-disaster-recovery (1), Synology Active Backup in backup-and-disaster-recovery (1), Synology C2 Storage in backup-and-disaster-recovery (1), Synology NAS with Active Backup for Business in backup-and-disaster-recovery (1), Synology’s Active Backup for Business in backup-and-disaster-recovery (1), Tabnine self-hosted in ai-coding-assistants (1), Talend Community Edition in etl-and-elt (1), Timus in sase-platforms (1), Tovin in cloud-cost-management (1), Traefik Hub API Management in api-management (1), Turbonomics in cloud-cost-management (1), UrBackup in backup-and-disaster-recovery (1), VMware Secure Access in sase-platforms (1), Veeam Availability Suite in backup-and-disaster-recovery (1), Vembu in backup-and-disaster-recovery (1), Vercel CDN in content-delivery-networks (1), Windsorf in ai-coding-assistants (1), Xopero in backup-and-disaster-recovery (1), Xplenty in etl-and-elt (1), Y42 in data-warehouses (1), Your cloud provider's built-in tools in cloud-cost-management (1), ZCode (by Z.ai) in ai-coding-assistants (1), ZenGRC Free Edition in compliance-automation (1), Zing Data / Causal in data-warehouses (1), Zscaler Essentials Platform in sase-platforms (1), dope.security in sase-platforms (1), iDrive Personal in backup-and-disaster-recovery (1), iboss Zero Trust SASE in sase-platforms (1), pi.dev in ai-coding-assistants (1), rclone in backup-and-disaster-recovery (1), x360Recover in backup-and-disaster-recovery (1), your cloud provider's built-in cost tool in cloud-cost-management (1)

Category-scoped resolutions, 469 labels. A bare vendor name was read as that vendor's product for the asked category, which assigns specificity the model did not write; each one is listed so the assumption is visible:

Datadog in application-performance-monitoring read as Datadog APM (64), Keeper in business-password-managers read as Keeper Security (37), Kong in api-management read as Kong Gateway (33), Zscaler in sase-platforms read as Zscaler Zero Trust Exchange (33), Netskope in sase-platforms read as Netskope One (23), Veeam in backup-and-disaster-recovery read as Veeam Data Platform (22), Databricks in data-warehouses read as Databricks SQL (20), Hevo in etl-and-elt read as Hevo Data (17), Acronis in backup-and-disaster-recovery read as Acronis Cyber Protect (12), Datto in backup-and-disaster-recovery read as Datto SIRIS (11), Flexera in cloud-cost-management read as Flexera One (10), Carbonite in backup-and-disaster-recovery read as Carbonite Safe (8), Cato Networks SASE Cloud in sase-platforms read as Cato SASE Cloud (8), Estuary in etl-and-elt read as Estuary Flow (8), MuleSoft in api-management read as MuleSoft Anypoint Platform (8), Azure Synapse in data-warehouses read as Azure Synapse Analytics (7), Harness in cloud-cost-management read as Harness Cloud Cost Management (7), Informatica in etl-and-elt read as Informatica Intelligent Data Management Cloud (7), Scrut in compliance-automation read as Scrut Automation (7), Keeper Business in business-password-managers read as Keeper Security (6), Palo Alto in sase-platforms read as Palo Alto Networks Prisma SASE (5), Palo Alto Networks in sase-platforms read as Palo Alto Networks Prisma SASE (5), WSO2 in api-management read as WSO2 API Manager (5), Fortinet in sase-platforms read as Fortinet FortiSASE (4), Kong Enterprise in api-management read as Kong Gateway (4), Microsoft Fabric in data-warehouses read as Microsoft Fabric Data Warehouse (4), Supabase in customer-identity-and-access-management read as Supabase Auth (4), AWS Budgets in cloud-cost-management read as AWS Cost Explorer (3), Axcient in backup-and-disaster-recovery read as Axcient x360Recover (3), Firebase in customer-identity-and-access-management read as Firebase Authentication (3), Rubrik in backup-and-disaster-recovery read as Rubrik Security Cloud (3), Spot by NetApp in cloud-cost-management read as Spot by NetApp (3), Amazon Q in ai-coding-assistants read as Amazon Q Developer (2), Arcserve in backup-and-disaster-recovery read as Arcserve UDP (2), Check Point in sase-platforms read as Check Point Harmony SASE (2), Druva in backup-and-disaster-recovery read as Druva Data Security Cloud (2), Grafana in application-performance-monitoring read as Grafana Cloud (2), Kong (Kong Konnect) in api-management read as Kong Gateway (2), MSP360 in backup-and-disaster-recovery read as MSP360 Managed Backup (2), OneTrust in compliance-automation read as OneTrust Tech Risk & Compliance (2), Onetrust in compliance-automation read as OneTrust Tech Risk & Compliance (2), Palo Alto Networks (Prisma SASE) in sase-platforms read as Palo Alto Networks Prisma SASE (2), Scout in application-performance-monitoring read as Scout APM (2), Scout Monitoring in application-performance-monitoring read as Scout APM (2), Teradata in data-warehouses read as Teradata Vantage (2), AWS Cost Explorer + AWS Budgets in cloud-cost-management read as AWS Cost Explorer (1), AWS Cost Explorer + Budgets in cloud-cost-management read as AWS Cost Explorer (1), AWS Cost Explorer/Budgets in cloud-cost-management read as AWS Cost Explorer (1), Augment in ai-coding-assistants read as Augment Code (1), Axway Amplify in api-management read as Axway Amplify API Management (1), Azure in api-management read as Azure API Management (1), Azure Blob in backup-and-disaster-recovery read as Azure Blob Storage (1), Backblaze Business Computer Backup in backup-and-disaster-recovery read as Backblaze Business Backup (1), Barracuda Cloud-to-Cloud in backup-and-disaster-recovery read as Barracuda Cloud-to-Cloud Backup (1), Cisco AppDynamics in application-performance-monitoring read as AppDynamics (1), Cloudflare in sase-platforms read as Cloudflare One (1), Cohesity in backup-and-disaster-recovery read as Cohesity DataProtect (1), Copilot Free in ai-coding-assistants read as GitHub Copilot (1), Databricks (Lakehouse) in data-warehouses read as Databricks SQL (1), Databricks Lakehouse in data-warehouses read as Databricks SQL (1), Datadog in cloud-cost-management read as Datadog Cloud Cost Management (1), Datto (Barracuda) in backup-and-disaster-recovery read as Datto SIRIS (1), DoiT in cloud-cost-management read as DoiT Cloud Intelligence (1), Elastic in application-performance-monitoring read as Elastic APM (1), Fortinet (FortiGate) in sase-platforms read as Fortinet FortiSASE (1), Fortinet (FortiGuard / FortiNAC) in sase-platforms read as Fortinet FortiSASE (1), Fortinet (FortiSASE) in sase-platforms read as Fortinet FortiSASE (1), Informatica (Intelligent Data Management Cloud) in etl-and-elt read as Informatica Intelligent Data Management Cloud (1), Informatica (especially PowerCenter) in etl-and-elt read as Informatica Intelligent Data Management Cloud (1), JetBrains AI in ai-coding-assistants read as JetBrains AI Assistant (1), Keeper (Business Starter) in business-password-managers read as Keeper Security (1), Keeper (Business) in business-password-managers read as Keeper Security (1), Kong (Enterprise/Konnect) in api-management read as Kong Gateway (1), Kong (Gateway/Konnect) in api-management read as Kong Gateway (1), Kong (Kong Konnect / Kong Express) in api-management read as Kong Gateway (1), Kong (Konnect Plus) in api-management read as Kong Gateway (1), Kong (Open Source) in api-management read as Kong Gateway (1), Kong (including Konnect) in api-management read as Kong Gateway (1), MSP360 (formerly CloudBerry) in backup-and-disaster-recovery read as MSP360 Managed Backup (1), Microsoft Edge in business-password-managers read as Microsoft Edge Password Manager (1), Microsoft Fabric (Synapse) in data-warehouses read as Microsoft Fabric Data Warehouse (1), MuleSoft (Salesforce) in api-management read as MuleSoft Anypoint Platform (1), Nakivo in backup-and-disaster-recovery read as NAKIVO Backup & Replication (1), Palo Alto Networks (Prisma SASE / Prisma Access) in sase-platforms read as Palo Alto Networks Prisma SASE (1), Palo Alto Networks (Prisma) in sase-platforms read as Palo Alto Networks Prisma SASE (1), Replit in ai-coding-assistants read as Replit AI (1), Replit (Agent) in ai-coding-assistants read as Replit AI (1), ServiceNow in compliance-automation read as ServiceNow Integrated Risk Management (1), Splunk APM in application-performance-monitoring read as Splunk Observability Cloud (1), Spot in cloud-cost-management read as Spot by NetApp (1), WSO2 in customer-identity-and-access-management read as WSO2 Identity Server (1), Zscaler (Zero Trust Exchange / ZIA & ZPA) in sase-platforms read as Zscaler Zero Trust Exchange (1), Zscaler (Zero Trust Exchange / ZIA/ZPA) in sase-platforms read as Zscaler Zero Trust Exchange (1), Zscaler (Zero Trust Exchange) in sase-platforms read as Zscaler Zero Trust Exchange (1)

Combined answers split into one label per product: Acronis Cyber Protect / Acronis Cyber Protect Cloud, Acronis Cyber Protect Cloud / Acronis Cyber Backup, Aider/Cline, Amazon Redshift Serverless / Redshift, Apache Airflow / NiFi / Talend / Pentaho, Apache Spark / Databricks, Auth0 / Okta, Auth0 / Okta Customer Identity, Azure Synapse Analytics / Microsoft Fabric, BunnyCDN / Bunny.net, ChatGPT/Claude (via chat for code gen, e.g., GPT-4o), Cloudflare One / Cloudflare Zero Trust, Cloudflare Zero Trust / Cloudflare One, Codeium Teams / Windsurf, Continue + Ollama, Datto/Kaseya, DuckDB/MotherDuck, Fabric / Synapse, Flexera/Flexera One, GitLab Duo/Copilot Business, Google Apigee / Apigee X, Google Cloud/AWS, Grafana Cloud / Grafana + Prometheus, Grafana Cloud/Prometheus, IBM InfoSphere / IBM DataStage, Informatica PowerCenter / Informatica Cloud, Jaeger/Zipkin, Kong Konnect/Kong OSS, Kong/Kong Konnect, MSP360 + Backblaze B2 (Combo), Microsoft Fabric / Azure Synapse Analytics, Middleware / SigNoz, MotherDuck / DuckDB, Notion/Airtable, Palo Alto Networks Prisma Access / Prisma SASE, Perimeter 81 / NordLayer, ProsperOps / Archera / CAST AI, SAP BTP API Management / SAP Integration Suite, SQLite/PostgreSQL, StackPath/CDN77, Supabase/Clerk, Veeam Backup for Microsoft 365/AWS/Azure, Windsurf/Devin Desktop, Zscaler Zero Trust Exchange / Zscaler SASE, nOps / Usage.ai

## Appendix: loose paraphrase stability

- Claude Haiku 4.5: a direct first choice kept as first choice or alternative in 6 of 12 categories (50%); differing under the strict rule: api-management, application-performance-monitoring, backup-and-disaster-recovery, business-password-managers, cloud-cost-management, compliance-automation, content-delivery-networks, customer-identity-and-access-management, data-warehouses, etl-and-elt, sase-platforms
- GPT-5.4 mini: a direct first choice kept as first choice or alternative in 10 of 12 categories (83%); differing under the strict rule: api-management, backup-and-disaster-recovery, business-password-managers, cloud-cost-management, customer-identity-and-access-management, sase-platforms
- Gemini 3.5 Flash: a direct first choice kept as first choice or alternative in 12 of 12 categories (100%); differing under the strict rule: ai-coding-assistants, backup-and-disaster-recovery, business-password-managers, content-delivery-networks, sase-platforms
- Perplexity Sonar: a direct first choice kept as first choice or alternative in 5 of 12 categories (42%); differing under the strict rule: api-management, application-performance-monitoring, backup-and-disaster-recovery, business-password-managers, cloud-cost-management, content-delivery-networks, customer-identity-and-access-management, data-warehouses, etl-and-elt, sase-platforms
- Grok 4.1 Fast: a direct first choice kept as first choice or alternative in 11 of 12 categories (92%); differing under the strict rule: application-performance-monitoring, compliance-automation, customer-identity-and-access-management
- Mistral Small: a direct first choice kept as first choice or alternative in 5 of 12 categories (42%); differing under the strict rule: api-management, application-performance-monitoring, backup-and-disaster-recovery, business-password-managers, compliance-automation, content-delivery-networks, customer-identity-and-access-management, data-warehouses, etl-and-elt, sase-platforms
- DeepSeek V4 Flash: a direct first choice kept as first choice or alternative in 11 of 12 categories (92%); differing under the strict rule: ai-coding-assistants, api-management, application-performance-monitoring, backup-and-disaster-recovery, cloud-cost-management, content-delivery-networks, customer-identity-and-access-management
- Llama 4 Maverick: a direct first choice kept as first choice or alternative in 3 of 8 categories (38%); differing under the strict rule: business-password-managers, cloud-cost-management, compliance-automation, content-delivery-networks, customer-identity-and-access-management, data-warehouses, etl-and-elt
- Qwen 3.7 Flash: a direct first choice kept as first choice or alternative in 6 of 12 categories (50%); differing under the strict rule: ai-coding-assistants, api-management, application-performance-monitoring, backup-and-disaster-recovery, cloud-cost-management, compliance-automation, data-warehouses, etl-and-elt, sase-platforms
- Kimi K2: a direct first choice kept as first choice or alternative in 10 of 12 categories (83%); differing under the strict rule: api-management, application-performance-monitoring, cloud-cost-management, compliance-automation, customer-identity-and-access-management, etl-and-elt
- GLM 4.7 FlashX: a direct first choice kept as first choice or alternative in 8 of 12 categories (67%); differing under the strict rule: api-management, application-performance-monitoring, backup-and-disaster-recovery, business-password-managers, cloud-cost-management, compliance-automation, customer-identity-and-access-management, data-warehouses, sase-platforms
- MiniMax M2.5: a direct first choice kept as first choice or alternative in 10 of 12 categories (83%); differing under the strict rule: ai-coding-assistants, api-management, backup-and-disaster-recovery, compliance-automation, customer-identity-and-access-management, data-warehouses, etl-and-elt
- GPT-6 Luna: a direct first choice kept as first choice or alternative in 9 of 12 categories (75%); differing under the strict rule: api-management, backup-and-disaster-recovery, cloud-cost-management, customer-identity-and-access-management, sase-platforms
- Muse Glimmer 30B: a direct first choice kept as first choice or alternative in 9 of 12 categories (75%); differing under the strict rule: ai-coding-assistants, api-management, application-performance-monitoring, backup-and-disaster-recovery, business-password-managers, compliance-automation, customer-identity-and-access-management, data-warehouses, etl-and-elt