One of fourteen models named Mimecast Email Security first on the direct prompt; two named Abnormal AI. Both were named by all fourteen models and Mimecast Email Security carries 50 labels and Abnormal AI 42, so the shares are not directly comparable.
Named in one category this edition.
Named in three categories this edition.
Share is the count of first choices across the direct, paraphrase, budget and scale prompts over all fourteen models, for a mid-market B2B company; rank is within the category; every quote names the model and the prompt it came from. Both figures come from the email security page.
Across every category in the October 2026 Edition, Mimecast Email Security and Abnormal AI were named in the same answer ninety-seven times, of the 162 answers naming Mimecast Email Security and the 111 naming Abnormal AI. In those answers Abnormal AI took the first choice nineteen times and Mimecast Email Security nine.
| Model | Direct | Paraphrase | Comparative | Budget-constrained | Scale-constrained | Negative |
|---|---|---|---|---|---|---|
| Claude Haiku 4.5 | ||||||
| GPT-5.4 mini | ||||||
| Gemini 3.5 Flash | ||||||
| Perplexity Sonar | ||||||
| Grok 4.1 Fast | ||||||
| Mistral Small | ||||||
| DeepSeek V4 Flash | ||||||
| Llama 4 Maverick | ||||||
| Qwen 3.7 Flash | ||||||
| Kimi K2 | ||||||
| GLM 4.7 FlashX | ||||||
| MiniMax M2.5 | ||||||
| GPT-6 Luna | ||||||
| Muse Glimmer 30B |
Bold names in an answer are the products the judge labeled a first choice; a model naming several gives each of them that label. The full answer text for every row is in the record.
Every negative label with a quote, up to three, then the highest-weighted positives, up to three. Six of eight in this category shown.
“shifted heavily away from traditional, complex Secure Email Gateways (SEGs like traditional configurations of Proofpoint or Mimecast)” Gemini 3.5 Flash · paraphrase prompt · soft negative
“Traditional gateways (like classic Mimecast or Proofpoint setups) ... can be complex to set up, can disrupt mail flow if they fail” Gemini 3.5 Flash · scale prompt · soft negative
“moved away from legacy, complex Secure Email Gateways (SEGs) that require changing MX records (such as Proofpoint or Mimecast)” Gemini 3.5 Flash · direct prompt · soft negative
“Mimecast is the usual mid-market pick. The unified contract simplifies procurement and it's explicitly positioned for small- and mid-sized businesses.” Muse Glimmer 30B · paraphrase prompt · first choice
“Prioritize Gartner Leaders: Proofpoint, Abnormal Security, Mimecast, Trend Micro, Check Point, Egress/KnowBe4. They score highest” Grok 4.1 Fast · negative prompt · first choice
“Widely considered the market leader, Mimecast focuses on reliability and data resilience.” Qwen 3.7 Flash · comparative prompt · first choice
Every negative label with a quote, up to three, then the highest-weighted positives, up to three. Four of five in this category shown.
“Abnormal Security (caution, not avoid)” DeepSeek V4 Flash · negative prompt · soft negative
“I'd shortlist Abnormal AI as the best add-on for catching business-email-compromise (BEC), vendor impersonation, and other attacks that slip past standard filtering” GPT-6 Luna · direct prompt · first choice
“Abnormal Security is the top AI-native option for teams that need API-based detection of social-engineering attacks without gateway overhead.” Muse Glimmer 30B · comparative prompt · first choice
“These solutions (such as Abnormal Security, Avanan, or Sublime) connect directly to your email provider via native APIs.” Gemini 3.5 Flash · negative prompt · first choice
Comparisons are drawn for the top eight products in each category, each against each. The output is the models' output; nothing here is a recommendation by the index.