Three of fourteen models named Microsoft Defender for Office 365 first on the direct prompt; one named IRONSCALES. Microsoft Defender for Office 365 was named by fourteen of the fourteen models and IRONSCALES by twelve and Microsoft Defender for Office 365 carries 51 labels and IRONSCALES 26, so the shares are not directly comparable.
Named in three categories this edition.
Named in three categories this edition.
Share is the count of first choices across the direct, paraphrase, budget and scale prompts over all fourteen models, for a mid-market B2B company; rank is within the category; every quote names the model and the prompt it came from. Both figures come from the email security page.
Across every category in the October 2026 Edition, Microsoft Defender for Office 365 and IRONSCALES were named in the same answer forty-six times, of the 176 answers naming Microsoft Defender for Office 365 and the 75 naming IRONSCALES. In those answers IRONSCALES took the first choice nine times and Microsoft Defender for Office 365 nine.
| Model | Direct | Paraphrase | Comparative | Budget-constrained | Scale-constrained | Negative |
|---|---|---|---|---|---|---|
| Claude Haiku 4.5 | ||||||
| GPT-5.4 mini | ||||||
| Gemini 3.5 Flash | ||||||
| Perplexity Sonar | ||||||
| Grok 4.1 Fast | ||||||
| Mistral Small | ||||||
| DeepSeek V4 Flash | ||||||
| Llama 4 Maverick | ||||||
| Qwen 3.7 Flash | ||||||
| Kimi K2 | ||||||
| GLM 4.7 FlashX | ||||||
| MiniMax M2.5 | ||||||
| GPT-6 Luna | ||||||
| Muse Glimmer 30B |
Bold names in an answer are the products the judge labeled a first choice; a model naming several gives each of them that label. The full answer text for every row is in the record.
Every negative label with a quote, up to three, then the highest-weighted positives, up to three. Six of seven in this category shown.
“Microsoft's published comparison, for example, uses different "missed threat" criteria for Defender than for competing gateways, so it shouldn't be treated as a neutral head-to-head ranking.” GPT-6 Luna · negative prompt · soft negative
“strong execution but limited vision for evolving threats. Complaints include high false positives, poor internal email scanning” Grok 4.1 Fast · negative prompt · soft negative
“relying *solely* on native cloud email security is a risk for organizations with high threat profiles” Gemini 3.5 Flash · negative prompt · soft negative
“Microsoft Defender for Office 365 is the default choice for most Microsoft-365 shops—it's deeply integrated, cost-effective, and provides a solid baseline.” GLM 4.7 FlashX · comparative prompt · first choice
“Start with what you already have — if you're on Microsoft 365 E5, check if Defender for O365 Plan 2 is already included before paying for a new platform.” DeepSeek V4 Flash · scale prompt · first choice
“Microsoft Defender for Office 365 is the most pragmatic starting point—low cost, deep integration, and solid baseline protection.” GLM 4.7 FlashX · direct prompt · first choice
Every negative label with a quote, up to three, then the highest-weighted positives, up to three. Three of four in this category shown.
“prioritize Behavioral AI (like Abnormal AI or IRONSCALES) over signature-based gateways” GLM 4.7 FlashX · negative prompt · first choice
“For most mid-market B2B companies, I'd recommend IRONSCALES as the top choice” Kimi K2 · direct prompt · first choice
“Modern solutions (like Abnormal Security, Check Point/Avanan, Ironscales, or Sublime Security) connect directly to Microsoft or Google via API.” Gemini 3.5 Flash · scale prompt · alternative
Comparisons are drawn for the top eight products in each category, each against each. The output is the models' output; nothing here is a recommendation by the index.