Identity threat detection and response
Asked as “ITDR solution”, and as “identity threat detection tool”, on behalf of a mid-market B2B company. 49 first choices recorded across the direct, paraphrase, budget and scale prompts, twelve models each. Added to the September 2026 Edition; its answers are read by the distilled judge (ai-indexes-judge-qwen3-14b-run3), not the claude-opus-5 judge of the earlier categories: how the two compare.
Standing · first-choice share
51%
Clear leader
51Huntress Managed ITDR14Microsoft Defender for Identity04Huntress ITDR31others
51% of first choices, clear leader.
By buyer segment
The same question asked on behalf of a different buyer. Each standing is computed within its segment; they sit side by side and are never added together.
The standing
Share is the count of first choices across the direct, paraphrase, budget and scale prompts, over all twelve models, for a mid-market B2B company. Ordered by share.
ProductFirst-choice shareNegative rateLabelsQuadrant
Show the four products at 0%, ordered by negative rate
Bars are the share of first choices, 0 to 100Every product with at least 10 labels here. Every product name links to its product page.
Recommended versus criticized
Every product with at least 10 labels here, on both axes. The 30% line names a quadrant, not the verdict above: that one needs more than 40%.
Criticized challengerCriticized default
Negative label rate →
01M02
03
04
05
06
07
08
09Accepted challengerEndorsed leader
0%First-choice share → · lines at 30% share and 25% negative70%
Key
01Huntress Managed ITDR51%
Huntress Managed ITDR51%02Microsoft Defender for Identity14%
03Silverfort ITDR4%
Silverfort ITDR4%04Sophos ITDR4%
Sophos ITDR4%05Okta Identity Threat Protection2%
Okta Identity Threat Protection2%06CrowdStrike Falcon Identity Protection0%
CrowdStrike Falcon Identity Protection0%07Semperis Directory Services Protector0%
Semperis Directory Services Protector0%08SentinelOne Singularity Identity0%
SentinelOne Singularity Identity0%09CrowdStrike0%
CrowdStrike0%What they warned about
Four of twelve models held their first choice under the paraphrase. Claude Haiku 4.5, GPT-5.4 mini, Mistral Small, Llama 4 Maverick, Qwen 3.7 Flash, Kimi K2, GLM 4.7 FlashX and MiniMax M2.5 changed. A high negative share on a product with few labels is a warning. A low share on a product with many labels is salience, not sentiment.
CrowdStrike36%
5 of 14 labels negative · 4 of 12 models · 1 hard negative
“Avoid enterprise-heavy tools like CrowdStrike (~$5-10/identity but often bundled/quoted higher)” Grok 4.1 Fast, budget prompt
CrowdStrike Falcon Identity Protection19%
5 of 27 labels negative · 4 of 12 models · 1 hard negative
“What to Avoid - Enterprise solutions like CrowdStrike Falcon Identity ... typically require negotiation and higher minimums” Kimi K2, budget prompt
Microsoft Defender for Identity
8%
3 of 38 labels negative · 3 of 12 models
“Reviewers report heavy alert noise during onboarding that requires real tuning time and limited value outside Microsoft-centric environments, with rigid customization.” Claude Haiku 4.5, negative prompt
SentinelOne33%
3 of 9 labels negative · 2 of 12 models · 1 hard negative
“Avoid enterprise-heavy tools like CrowdStrike ... or SentinelOne unless you have existing stacks.” Grok 4.1 Fast, budget prompt
What they cite
Citations exist only for the models that return a source list: fourteen of the twelve in this edition, and all six flagship models on the expanded tier.
Sites the answers cite
79 of 84 answers in this category came back with a source list, from 14 of 12 models: citations where the model returns them, or the search results it consulted. 1020 links across 173 sites, every framing counted. Ranked by the number of answers carrying the site or page.
vendor site · Huntress55 answers · 82 citations · 14 models
43 answers · 43 citations · 12 models
38 answers · 51 citations · 12 models
vendor site · Cynet35 answers · 37 citations · 9 models
30 answers · 30 citations · 12 models
vendor site · Stellar Cyber26 answers · 27 citations · 11 models
vendor site · G222 answers · 42 citations · 11 models
22 answers · 22 citations · 10 models
21 answers · 29 citations · 8 models
21 answers · 21 citations · 11 models
vendor site · Microsoft19 answers · 26 citations · 11 models
vendor site · Netwrix19 answers · 21 citations · 8 models
Pages the answers cite
The ten pages named in the most answers, by full address. A page here is one the models returned with a recommendation, not one the index endorses.
47 answers · 12 models
42 answers · 12 models
34 answers · 9 models
30 answers · 12 models
30 answers · 12 models
26 answers · 11 models
22 answers · 10 models
21 answers · 11 models
18 answers · 8 models
16 answers · 9 models
Search against answers
Each company's standing in the answers beside its site's footprint in Google search, one row a site: the products the models named on it with their shares, and the share they add up to; monthly searches on Google, and DataForSEO's estimate of AI search demand (modeled from search signals, directional, not a count of queries to any assistant), for the most-searched of the company's and its products' names (the name is in each row's hover text); estimated monthly organic visits to the site; and its best position in Google's top ten for “best itdr solution”, “itdr solution”, “itdr solutions”. US estimates from DataForSEO and Google's Ads Transparency Center. A small company's site, or a mid-sized company's site for its flagship, is marked company; a product on a large parent's site (Google, Microsoft) has no site figures. A column with no figures for this category is left out, and an empty cell means none were seen, not none exist. Two measurements side by side: neither is read as the cause of the other.
| Company and products | Share | Own site cited | Name searches, Google | AI search demand, est. | Organic visits | Paid search a month, est. | Google ads, last 30 days | Best Google position |
|---|---|---|---|---|---|---|---|---|
| Huntress huntress.com Huntress Managed ITDR 51%, Huntress ITDR 4% | 55% | 126 | 33,100 | 4,338 | 352,368 company | $15,522 | 120 | 2 |
| Microsoft parent site Microsoft Defender for Identity 14%, Microsoft Entra ID Protection 4%, Microsoft Defender for Identity / Entra ID Protection 2%, Microsoft Defender for Cloud Apps 2% and 1 more | 22% | 480 | 2,240,000 | 403,136 | ||||
| Silverfort ITDR silverfort.com | 4% | 77 | 10 | 0 | 15,992 | 49 | 7 | |
| Sophos parent site Sophos ITDR 4% | 4% | 36 | 18,100 | 2,046 | ||||
| Okta okta.com Okta Identity Threat Protection 2% | 2% | 45 | 368,000 | 8,418 | 1,959,740 company | 118 | ||
| Cayosoft Guardian 8.0 | 2% | |||||||
| Centraleyes centraleyes.com | 2% | 8 | ||||||
| Microsoft Defender parent site Microsoft Defender XDR 2% | 2% | 191 | 18,100 | 3,525 | ||||
| Microsoft Defender's identity-security stack | 2% | |||||||
| Netwrix netwrix.com Netwrix PingCastle 2% | 2% | 2 | 104,208 company | $3,789 | 120 |
Google's top ten for the three searches hold 15 sites; 3 of them are among the sites the models cited here (gartner.com, huntress.com, microsoft.com). The first result for “best itdr solution” is gartner.com.
How they answered
Six framings of the same buying question, each sent to every model in a fresh session with search on. One row per model, so a row shows whether it held its answer under rewording, what it named when cost was the constraint, and what it argued against. Computed from the raw judge labels.ShowHide
How they answered
Six framings of the same buying question, each sent to every model in a fresh session with search on. One row per model, so a row shows whether it held its answer under rewording, what it named when cost was the constraint, and what it argued against. Computed from the raw judge labels.
ShowHideModelDirect“What is the best ITDR solution for a mid-market B2B company?”Paraphrase“Which identity threat detection tool would you recommend to a mid-sized B2B company?”Comparative“What are the top ITDR solutions and how do they differ?”Budget-constrained“What is the best ITDR solution for a company with a limited budget?”Scale-constrained“We are a 500 person company evaluating an ITDR solution. What should we look at?”Negative“Which ITDR solutions should I avoid or be cautious about?”
Claude Haiku 4.5Huntress Managed ITDRMicrosoft Defender for IdentityChangedCrowdStrike Falcon Identity ProtectionHuntress Managed ITDRno first choiceagainst: CrowdStrike Falcon Identity Protection, Microsoft Defender for Identity, SentinelOne Singularity Identity, Sweet Security
Two alternatives
CrowdStrike Falcon, Microsoft Defender for IdentityTwo alternatives
CrowdStrike, Huntress Managed ITDRFive alternatives
Huntress Managed ITDR, Microsoft Defender for Identity, Permiso, SentinelOne, Silverfort ITDRThree alternatives
Microsoft Defender for Identity, Netwrix ITDR, Vectra AI ITDRGPT-5.4 miniHuntress Managed ITDRMicrosoft Defender for IdentityChangedno first choiceMicrosoft Defender for Identityno first choicenothing named
Two alternatives
CrowdStrike Falcon Identity Protection, Microsoft Defender for IdentityTwo alternatives
CrowdStrike Falcon Identity Protection, Huntress Managed ITDRFour alternatives
CrowdStrike Falcon Identity Protection, Delinea Identity Threat Protection, Microsoft Defender for Identity / Entra ID Protection, Silverfort Identity Threat Detection & ResponseThree alternatives
CrowdStrike Falcon Identity Protection, Entra ID Protection, Nebula/ThreatDown ITDRGemini 3.5 FlashHuntress Managed ITDRHuntress Managed ITDRHeldCrowdStrike Falcon Identity Protection, Microsoft Defender for IdentityHuntress Managed ITDRagainst: CrowdStrike, SentinelOne, Silverfort ITDRno first choiceagainst: Microsoft Defender for Identity, Okta Identity Threat Protection
Four alternatives
CrowdStrike Falcon Identity Protection, Microsoft Defender for Identity, SentinelOne Singularity Identity, Silverfort ITDRSix alternatives
CrowdStrike Falcon Identity Protection, Defender for Identity, Microsoft Entra ID Protection, Okta Identity Threat Protection, SentinelOne Singularity Identity, Silverfort ITDRFive alternatives
Guardz, Huntress Managed ITDR, Okta Identity Threat Protection, Semperis Directory Services Protector, Silverfort ITDRFive alternatives
Cynet, Microsoft Defender for Identity, Purple Knight, Push Security, Sophos ITDRFive alternatives
Guardz, Microsoft Defender for Identity, Semperis Directory Services Protector, Silverfort ITDR, Vectra AIPerplexity SonarHuntress Managed ITDRHuntress Managed ITDRHeldDefender for Identity, Microsoft Entra ID ProtectionHuntress Managed ITDRagainst: Push Securityno first choicenothing named
Four alternatives
Delinea ITP, Microsoft Defender for Identity plus Entra ID Protection, Semperis Directory Services Protector, Vectra AI ITDRFour alternatives
Cynet, Microsoft Defender for Identity, Microsoft Entra ID Protection, Stellar CyberSeven alternatives
BeyondTrust, CrowdStrike Falcon Identity Protection, CyberArk Identity Security Platform, Delinea, Huntress Managed ITDR, Semperis Directory Services Protector, SentinelOne Singularity IdentityOne alternative
Microsoft DefenderGrok 4.1 FastHuntress Managed ITDRagainst: CrowdStrike Falcon Identity ProtectionHuntress Managed ITDRHeldagainst: CrowdStrike, SentinelOneCrowdStrike Falcon Identity Protection, Microsoft Defender for IdentityHuntress Managed ITDRagainst: CrowdStrike, SentinelOneno first choiceagainst: Blackpoint, CrowdStrike Falcon Identity Protection, Grip, Huntress Managed ITDR, Petra
Two alternatives
Microsoft Defender for Identity, Sophos ITDRThree alternatives
Microsoft Defender for Identity, Okta Identity Threat Protection, Sophos ITDRFour alternatives
Arctic Wolf, Huntress Managed ITDR, Semperis Directory Services Protector, Silverfort ITDRFour alternatives
Cayosoft Guardian, Microsoft Defender for Identity, Microsoft Entra ID, Netwrix Threat ManagerMistral SmallMicrosoft Defender XDR, Microsoft Entra ID ProtectionOkta Identity Threat ProtectionChangedCrowdStrikeHuntress Managed ITDRno first choicenothing named
Two alternatives
ClearVector, Sophos ITDRTwo alternatives
CrowdStrike Falcon Identity Protection, Ping IdentityThree alternatives
Delinea, Microsoft Entra ID, Silverfort ITDROne alternative
CrowdStrike Falcon Identity ProtectionDeepSeek V4 FlashHuntress Managed ITDRHuntress Managed ITDRHeldno first choiceHuntress Managed ITDRno first choicenothing named
Four alternatives
CrowdStrike Falcon Identity Protection, Microsoft Defender for Identity / Entra ID Protection, Silverfort ITDR, Sophos ITDRThree alternatives
Microsoft Defender for Identity, Silverfort ITDR, Sophos ITDRThree alternatives
Microsoft Defender for Identity, Push Security, Semperis Purple KnightLlama 4 MaverickSophos ITDRno first choiceChangedno first choiceno first choiceno first choicenothing named
Four alternatives
Delinea ITP, Netwrix's identity portfolio, Okta Identity Threat Protection, Vectra AI ITDRQwen 3.7 FlashMicrosoft Defender for Cloud AppsOkta Identity DefenseChangedagainst: Exabeam, SplunkVaronisMicrosoft Defender for Identityagainst: Exabeam, SplunkCentraleyes, Silverfort ITDRagainst: CrowdStrike
Five alternatives
Cyb3r, Defender for Identity, Tenable One, Varonis, WizTwo alternatives
CrowdStrike Falcon Identity Security, Microsoft Defender for Identity + Entra IDFour alternatives
CyberArk Identity Security Platform, Exabeam, Microsoft Defender for Identity, TessianThree alternatives
Huntress Managed ITDR, Tenable Vulnerability Management, WazuhSeven alternatives
CrowdStrike, CyberArk Identity Security Platform, Delinea, Microsoft Entra ID, Okta Identity Threat Protection, Ping Identity, SentinelOneKimi K2Huntress Managed ITDRHuntress ITDR, Microsoft Defender for IdentityChangedMicrosoft Defender for IdentityHuntress Managed ITDRagainst: CrowdStrike Falcon Identity Protection, SentinelOne Singularity Identityno first choicenothing named
Three alternatives
Microsoft Defender for Identity / Entra ID Protection, Okta Identity Threat Protection, SentinelOne Singularity IdentityTwo alternatives
Okta Identity Threat Protection, Sophos ITDRFive alternatives
CrowdStrike Falcon Identity Protection, Okta Identity Threat Protection, Semperis Directory Services Protector, SentinelOne Singularity Identity, Silverfort ITDRFive alternatives
Microsoft Defender for Identity, Netwrix ITDR, Obsidian Ridge, PingCastle, Stoic MDRGLM 4.7 FlashXMicrosoft Defender for Identity / Entra ID ProtectionHuntress Managed ITDRChangedagainst: CrowdStrike Falcon Identity ProtectionSilverfort Unified Identity ProtectionHuntress ITDRno first choiceagainst: CrowdStrike, Huntress Managed ITDR, Microsoft Defender for Identity
Three alternatives
CrowdStrike Falcon Identity Protection, Huntress Managed ITDR, Vectra AI PlatformTwo alternatives
Delinea, Microsoft Defender for IdentityFour alternatives
Akamai Identity Protection, CyberArk Identity Security Platform, Microsoft Defender for Identity, Reveal SecurityFour alternatives
Microsoft Defender for Identity, Sophos ITDR, SourceForge Listed Solutions, Stoic MDRMiniMax M2.5Huntress Managed ITDR, Silverfort ITDRMicrosoft Entra ID ProtectionChangedCrowdStrike, Microsoft Entra IDHuntress Managed ITDRno first choicenothing named
Two alternatives
Adlumin, VerosintTwo alternatives
CrowdStrike Falcon Identity Protection, Okta Identity Threat ProtectionFour alternatives
BeyondTrust, CyberArk Identity Security Platform, Okta Identity Threat Protection, SaviyntTwo alternatives
Microsoft Entra ID, Push SecurityBold is the first choiceAlternatives are counted; the count opens them.What the answer argued against
The record
One row per call: the version string exactly as returned, whether the model searched, sources cited, and latency. Full answer text is in the free responses file. Download the record
Seventy-two rows: every prompt, every model, every answer.
| Prompt | Model | Version string | Time (UTC) | Searched | Sources | Latency |
|---|---|---|---|---|---|---|
| Direct recommendation | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-10-04 23:40 | yes | 9 | 8 s |
| Direct recommendation | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-10-05 00:55 | yes | 3 | 9 s |
| Direct recommendation | Gemini 3.5 Flash | gemini-3.5-flash | 2026-10-05 01:21 | yes | 21 | 29 s |
| Direct recommendation | Perplexity Sonar | sonar | 2026-10-05 00:18 | yes | 18 | 4 s |
| Direct recommendation | Grok 4.1 Fast | spacexai/grok-4.1-fast-non-reasoning via vertex | 2026-10-05 00:18 | yes | 19 | 10 s |
| Direct recommendation | Mistral Small | mistral/mistral-small via mistral | 2026-10-05 01:12 | yes | 14 | 7 s |
| Direct recommendation | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-10-05 01:27 | yes | 20 | 79 s |
| Direct recommendation | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-10-05 00:06 | yes | 5 | 3 s |
| Direct recommendation | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-10-04 23:04 | no | 0 | 25 s |
| Direct recommendation | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-10-05 01:13 | yes | 13 | 20 s |
| Direct recommendation | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-10-05 01:39 | yes | 13 | 46 s |
| Direct recommendation | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-10-05 01:15 | yes | 15 | 45 s |
| Paraphrase | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-10-05 01:24 | yes | 16 | 10 s |
| Paraphrase | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-10-04 22:23 | yes | 2 | 4 s |
| Paraphrase | Gemini 3.5 Flash | gemini-3.5-flash | 2026-10-05 01:02 | yes | 8 | 22 s |
| Paraphrase | Perplexity Sonar | sonar | 2026-10-05 00:18 | yes | 23 | 3 s |
| Paraphrase | Grok 4.1 Fast | spacexai/grok-4.1-fast-non-reasoning via vertex | 2026-10-05 01:44 | yes | 23 | 9 s |
| Paraphrase | Mistral Small | mistral/mistral-small via mistral | 2026-10-05 01:01 | yes | 20 | 12 s |
| Paraphrase | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-10-05 01:21 | yes | 10 | 57 s |
| Paraphrase | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-10-05 00:18 | yes | 5 | 2 s |
| Paraphrase | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-10-05 00:13 | no | 0 | 27 s |
| Paraphrase | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-10-05 00:13 | yes | 15 | 17 s |
| Paraphrase | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-10-05 01:40 | yes | 19 | 24 s |
| Paraphrase | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-10-04 22:53 | yes | 10 | 35 s |
| Comparative | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-10-05 01:06 | yes | 12 | 12 s |
| Comparative | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-10-05 00:31 | yes | 5 | 7 s |
| Comparative | Gemini 3.5 Flash | gemini-3.5-flash | 2026-10-05 01:10 | yes | 19 | 30 s |
| Comparative | Perplexity Sonar | sonar | 2026-10-04 23:18 | yes | 21 | 8 s |
| Comparative | Grok 4.1 Fast | spacexai/grok-4.1-fast-non-reasoning via vertex | 2026-10-05 01:16 | yes | 17 | 11 s |
| Comparative | Mistral Small | mistral/mistral-small via mistral | 2026-10-05 01:04 | yes | 8 | 9 s |
| Comparative | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-10-05 01:05 | yes | 18 | 73 s |
| Comparative | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-10-05 00:39 | yes | 5 | 3 s |
| Comparative | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-10-04 23:36 | no | 0 | 29 s |
| Comparative | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-10-04 23:19 | yes | 19 | 24 s |
| Comparative | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-10-04 23:15 | yes | 18 | 64 s |
| Comparative | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-10-05 00:53 | yes | 24 | 41 s |
| Budget constrained | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-10-04 23:38 | yes | 9 | 7 s |
| Budget constrained | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-10-04 22:34 | yes | 4 | 6 s |
| Budget constrained | Gemini 3.5 Flash | gemini-3.5-flash | 2026-10-04 22:09 | yes | 11 | 27 s |
| Budget constrained | Perplexity Sonar | sonar | 2026-10-05 00:29 | yes | 18 | 2 s |
| Budget constrained | Grok 4.1 Fast | spacexai/grok-4.1-fast-non-reasoning via vertex | 2026-10-05 01:25 | yes | 21 | 9 s |
| Budget constrained | Mistral Small | mistral/mistral-small via mistral | 2026-10-05 00:46 | yes | 5 | 4 s |
| Budget constrained | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-10-05 00:05 | yes | 23 | 91 s |
| Budget constrained | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-10-05 00:21 | yes | 5 | 2 s |
| Budget constrained | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-10-05 01:17 | no | 0 | 37 s |
| Budget constrained | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-10-05 00:53 | yes | 19 | 26 s |
| Budget constrained | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-10-04 22:48 | yes | 11 | 21 s |
| Budget constrained | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-10-05 00:01 | yes | 5 | 17 s |
| Scale constrained | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-10-05 00:20 | yes | 18 | 12 s |
| Scale constrained | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-10-04 23:52 | yes | 5 | 8 s |
| Scale constrained | Gemini 3.5 Flash | gemini-3.5-flash | 2026-10-04 23:27 | yes | 12 | 23 s |
| Scale constrained | Perplexity Sonar | sonar | 2026-10-05 00:23 | yes | 17 | 4 s |
| Scale constrained | Grok 4.1 Fast | spacexai/grok-4.1-fast-non-reasoning via vertex | 2026-10-05 00:27 | yes | 17 | 13 s |
| Scale constrained | Mistral Small | mistral/mistral-small via mistral | 2026-10-04 23:52 | no | 0 | 9 s |
| Scale constrained | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-10-04 23:19 | yes | 15 | 98 s |
| Scale constrained | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-10-05 01:10 | yes | 5 | 2 s |
| Scale constrained | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-10-05 01:16 | yes | 10 | 39 s |
| Scale constrained | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-10-04 22:51 | yes | 14 | 29 s |
| Scale constrained | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-10-04 22:57 | yes | 13 | 54 s |
| Scale constrained | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-10-05 01:32 | yes | 5 | 18 s |
| Negative framing | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-10-05 00:25 | yes | 16 | 11 s |
| Negative framing | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-10-05 01:55 | yes | 3 | 5 s |
| Negative framing | Gemini 3.5 Flash | gemini-3.5-flash | 2026-10-05 01:57 | yes | 18 | 27 s |
| Negative framing | Perplexity Sonar | sonar | 2026-10-05 01:32 | yes | 20 | 5 s |
| Negative framing | Grok 4.1 Fast | spacexai/grok-4.1-fast-non-reasoning via vertex | 2026-10-05 01:38 | yes | 20 | 10 s |
| Negative framing | Mistral Small | mistral/mistral-small via mistral | 2026-10-05 00:36 | yes | 5 | 6 s |
| Negative framing | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-10-04 23:59 | yes | 23 | 52 s |
| Negative framing | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-10-04 23:05 | yes | 5 | 2 s |
| Negative framing | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-10-05 01:08 | yes | 14 | 31 s |
| Negative framing | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-10-05 01:07 | yes | 19 | 26 s |
| Negative framing | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-10-05 01:33 | yes | 23 | 56 s |
| Negative framing | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-10-05 00:56 | yes | 5 | 14 s |
Normalization in this category
Every judgment call made between the raw labels and the numbers above, listed so it is visible and reversible.
ShowHide
Category-scoped readings
CrowdStrike Falcon Identity read as CrowdStrike Falcon Identity Protection
CrowdStrike Falcon Identity Threat Protection read as CrowdStrike Falcon Identity Protection
CrowdStrike Identity Protection read as CrowdStrike Falcon Identity Protection
CyberArk read as CyberArk Identity Security Platform
Huntress read as Huntress Managed ITDR
Microsoft read as Microsoft Entra ID
Microsoft (Entra + Defender XDR) read as Microsoft Entra ID
Microsoft (Entra ID Protection + Defender) read as Microsoft Entra ID
Netwrix read as Netwrix ITDR
Okta read as Okta Identity Threat Protection
Okta (Identity Security Platform) read as Okta Identity Threat Protection
Okta Identity Threat Protection with Okta AI read as Okta Identity Threat Protection
Palo Alto Networks (Cortex / broader platform) read as Palo Alto Networks Cortex XSIAM
Semperis read as Semperis Directory Services Protector
SentinelOne Identity read as SentinelOne Singularity Identity
Silverfort read as Silverfort ITDR
Sophos read as Sophos ITDR
Vectra read as Vectra AI
Unresolved, counted raw
Adlumin
Akamai Identity Protection
BloodHound (Community Edition)
Cayosoft Guardian
Cayosoft Guardian 8.0
Cisco Duo ITDR
ClearVector
CrowdStrike Falcon Identity Security
Cyb3r
Microsoft Defender for Identity plus Entra ID Protection
Microsoft Defender's identity-security stack
Nebula/ThreatDown ITDR
Netwrix Identity Threat Detection & Response
Netwrix's identity portfolio
Obsidian Ridge
Okta Identity Defense
Okta ThreatInsight
OpenITDR Framework
Petra
Reveal Security
SentinelOne Singularity Identity Security
Sharelock
Silverfort Identity Threat Detection & Response
Silverfort Unified Identity Protection
SourceForge Listed Solutions
Swiftly
Vectra AI Identity Coverage
Vectra AI Platform
Discontinued, still offered
No shut-down product was recommended here.