Seven of fourteen models named Cloudflare One first on the direct prompt; one named Check Point Harmony SASE. Cloudflare One was named by fourteen of the fourteen models and Check Point Harmony SASE by twelve and Cloudflare One carries 56 labels and Check Point Harmony SASE 30, so the shares are not directly comparable.
Named in six categories this edition.
Named in five categories this edition.
Share is the count of first choices across the direct, paraphrase, budget and scale prompts over all fourteen models, for a mid-market B2B company; rank is within the category; every quote names the model and the prompt it came from. Both figures come from the zero trust network access page.
Across every category in the October 2026 Edition, Cloudflare One and Check Point Harmony SASE were named in the same answer 106 times, of the 397 answers naming Cloudflare One and the 142 naming Check Point Harmony SASE. In those answers Check Point Harmony SASE took the first choice five times and Cloudflare One fifty-four.
| Model | Direct | Paraphrase | Comparative | Budget-constrained | Scale-constrained | Negative |
|---|---|---|---|---|---|---|
| Claude Haiku 4.5 | ||||||
| GPT-5.4 mini | ||||||
| Gemini 3.5 Flash | ||||||
| Perplexity Sonar | ||||||
| Grok 4.1 Fast | ||||||
| Mistral Small | ||||||
| DeepSeek V4 Flash | ||||||
| Llama 4 Maverick | ||||||
| Qwen 3.7 Flash | ||||||
| Kimi K2 | ||||||
| GLM 4.7 FlashX | ||||||
| MiniMax M2.5 | ||||||
| GPT-6 Luna | ||||||
| Muse Glimmer 30B |
Bold names in an answer are the products the judge labeled a first choice; a model naming several gives each of them that label. The full answer text for every row is in the record.
Every negative label with a quote, up to three, then the highest-weighted positives, up to three. Two of two in this category shown.
“Pure ZTNA (e.g., Twingate, Tailscale, Cloudflare Zero Trust): Great if you just want to kill the VPN and grant app-level access. Low overhead, easy to implement.” Qwen 3.7 Flash · scale prompt · first choice
“Cloudflare Zero Trust (specifically Cloudflare Access for ZTNA) stands out as the best option for a company with a limited budget.” Grok 4.1 Fast · budget prompt · first choice
Every negative label with a quote, up to three, then the highest-weighted positives, up to three. Five of five in this category shown.
“Avoid or delay: Any vendor from the DEF CON research until you verify their remediation is architectural, not just patched” Kimi K2 · negative prompt · hard negative
“Hard-coded encryption keys (CVE-2025-3831) that exposed customer data through diagnostic logs” DeepSeek V4 Flash · negative prompt · hard negative
“When to avoid: If log security or crypto hygiene is critical.” Grok 4.1 Fast · negative prompt · hard negative
“Check Point Harmony SASE (formerly Perimeter 81) and Netskope ZTNA are the top recommendations” Mistral Small · direct prompt · first choice
“"Check Point Harmony SASE (formerly Perimeter 81) is a cloud-based zero-trust platform combining ZTNA with a Secure Web Gateway."” Muse Glimmer 30B · comparative prompt · alternative
Comparisons are drawn for the top eight products in each category, each against each. The output is the models' output; nothing here is a recommendation by the index.