Extended detection and response
Asked as “XDR platform”, and as “extended detection and response solution”, on behalf of a mid-market B2B company. 52 first choices recorded across the direct, paraphrase, budget and scale prompts, twelve models each.
Standing · first-choice share
40%
Clear leader
40Microsoft Defender XDR19Sophos Intercept X12CrowdStrike Falcon Insight XDR29others
40% of first choices, clear leader.
By buyer segment
The same question asked on behalf of a different buyer. Each standing is computed within its segment; they sit side by side and are never added together.
The standing
Share is the count of first choices across the direct, paraphrase, budget and scale prompts, over all twelve models, for a mid-market B2B company. Ordered by share.
ProductFirst-choice shareNegative rateLabelsQuadrant
Show the five products at 0%, ordered by negative rate
Bars are the share of first choices, 0 to 100Every product with at least 10 labels here. Every product name links to its product page.
Head to head
All fifteen head-to-head pages: the top six products, each against each
Microsoft Defender XDR vs Bitdefender GravityZone XDRMicrosoft Defender XDR vs Sophos Intercept XCoro vs SentinelOne SingularityCoro vs CrowdStrike Falcon Insight XDRCoro vs Bitdefender GravityZone XDRCoro vs Sophos Intercept XSentinelOne Singularity vs CrowdStrike Falcon Insight XDRSentinelOne Singularity vs Bitdefender GravityZone XDRSentinelOne Singularity vs Sophos Intercept XCrowdStrike Falcon Insight XDR vs Bitdefender GravityZone XDRCrowdStrike Falcon Insight XDR vs Sophos Intercept XBitdefender GravityZone XDR vs Sophos Intercept X
Recommended versus criticized
Every product with at least 10 labels here, on both axes. The 30% line names a quadrant, not the verdict above: that one needs more than 40%.
Criticized challengerCriticized default
Negative label rate →
01
02
03
04
05
06
07
08
09
10Accepted challengerEndorsed leader
0%First-choice share → · lines at 30% share and 25% negative60%
Key
01Microsoft Defender XDR40%
Microsoft Defender XDR40%02Sophos Intercept X19%
Sophos Intercept X19%03CrowdStrike Falcon Insight XDR12%
CrowdStrike Falcon Insight XDR12%04SentinelOne Singularity8%
SentinelOne Singularity8%05Stellar Cyber Open XDR4%
Stellar Cyber Open XDR4%06Palo Alto Networks Cortex XDR0%
Palo Alto Networks Cortex XDR0%07Trend Vision One0%
Trend Vision One0%08Bitdefender GravityZone XDR0%
Bitdefender GravityZone XDR0%09Cisco XDR0%
Cisco XDR0%10Trellix XDR0%
Trellix XDR0%What they warned about
Three of twelve models held their first choice under the paraphrase. Claude Haiku 4.5, GPT-5.4 mini, Gemini 3.5 Flash, Perplexity Sonar, Mistral Small, Llama 4 Maverick, Qwen 3.7 Flash, Kimi K2 and MiniMax M2.5 changed. A high negative share on a product with few labels is a warning. A low share on a product with many labels is salience, not sentiment.
CrowdStrike Falcon Insight XDR27%
17 of 62 labels negative · 12 of 12 models
“Avoid / be cautious if you have low tolerance for kernel-level risk, need predictable per-endpoint pricing, or have a junior SOC that can’t absorb a steep UI.” Muse Glimmer 30B, negative prompt
Microsoft Defender XDR15%
9 of 61 labels negative · 9 of 12 models · 1 hard negative
“it is recommended to avoid buying into the full enterprise-grade Microsoft Defender XDR” Llama 4 Maverick, negative prompt
Palo Alto Networks Cortex XDR34%
12 of 35 labels negative · 9 of 12 models
“Do not buy a "DIY" XDR platform (like raw CrowdStrike Falcon or Palo Alto Cortex XDR) unless you have at least 2–3 dedicated, certified security analysts” Gemini 3.5 Flash, direct prompt
Cisco XDR27%
6 of 22 labels negative · 6 of 12 models
“requires a separate paid license—a meaningful cost change for existing Cisco customers—and feature depth in some areas lags” Claude Haiku 4.5, negative prompt
What they cite
Citations exist only for the models that return a source list: fourteen of the twelve in this edition, and all six flagship models on the expanded tier.
Sites the answers cite
77 of 84 answers in this category came back with a source list, from 14 of 12 models: citations where the model returns them, or the search results it consulted. 1124 links across 241 sites, every framing counted. Ranked by the number of answers carrying the site or page.
vendor site · Palo Alto Networks43 answers · 54 citations · 14 models
38 answers · 41 citations · 11 models
vendor site · SentinelOne30 answers · 41 citations · 11 models
27 answers · 30 citations · 11 models
27 answers · 27 citations · 12 models
23 answers · 23 citations · 9 models
20 answers · 22 citations · 10 models
vendor site · Guideflow20 answers · 20 citations · 9 models
vendor site · G219 answers · 35 citations · 11 models
vendor site · Microsoft18 answers · 35 citations · 11 models
17 answers · 23 citations · 9 models
17 answers · 18 citations · 10 models
Pages the answers cite
The ten pages named in the most answers, by full address. A page here is one the models returned with a recommendation, not one the index endorses.
36 answers · 11 models
30 answers · 13 models
27 answers · 12 models
23 answers · 9 models
19 answers · 9 models
18 answers · 10 models
16 answers · 9 models
15 answers · 10 models
14 answers · 6 models
13 answers · 6 models
Search against answers
Each company's standing in the answers beside its site's footprint in Google search, one row a site: the products the models named on it with their shares, and the share they add up to; monthly searches on Google, and DataForSEO's estimate of AI search demand (modeled from search signals, directional, not a count of queries to any assistant), for the most-searched of the company's and its products' names (the name is in each row's hover text); estimated monthly organic visits to the site; and its best position in Google's top ten for “best xdr platform”, “xdr platform”, “xdr platforms”. US estimates from DataForSEO and Google's Ads Transparency Center. A small company's site, or a mid-sized company's site for its flagship, is marked company; a product on a large parent's site (Google, Microsoft) has no site figures. A column with no figures for this category is left out, and an empty cell means none were seen, not none exist. Two measurements side by side: neither is read as the cause of the other.
| Company and products | Share | Own site cited | Name searches, Google | AI search demand, est. | Organic visits | Paid search a month, est. | Google ads, last 30 days | Best Google position |
|---|---|---|---|---|---|---|---|---|
| Microsoft Defender parent site Microsoft Defender XDR 40%, Microsoft Defender for Endpoint 2% | 42% | 268 | 18,100 | 3,525 | ||||
| Sophos sophos.com Sophos Intercept X 19%, Sophos 2% | 21% | 252 | 18,100 | 2,046 | 186,716 company | $1,427 | 65 | |
| CrowdStrike parent site CrowdStrike Falcon Insight XDR 12% | 12% | 169 | 74,000 | 5,130 | ||||
| SentinelOne sentinelone.com SentinelOne Singularity 8% | 8% | 534 | 33,100 | 1,675 | 446,702 company | $780 | 22 | 1 |
| Stellar Cyber Open XDR stellarcyber.ai | 4% | 66 | 0 | 3,048 | 31 | 6 | ||
| Cynet 360 AutoXDR cynet.com Cynet 360 AutoXDR 4%, Cynet 360 Auto XDR 0% | 4% | 21 | 10 | 0 | 13,782 | 43 | 7 | |
| Sophos parent site Sophos Intercept X + Sophos MDR 2%, Sophos MDR 2% | 4% | 131 | 18,100 | 2,046 | ||||
| Coro coro.net | 2% | 111 | 49,500 | 4,833 | 3,791 | 3 | ||
| Blumira blumira.com | 2% | 110 | 1,300 | 12 | 8,060 | 10 | ||
| Microsoft Defender Suite for Business | 2% |
Google's top ten for the three searches hold 22 sites; 2 of them are among the sites the models cited here (paloaltonetworks.com, sentinelone.com). The first result for “best xdr platform” is gartner.com.
How they answered
Six framings of the same buying question, each sent to every model in a fresh session with search on. One row per model, so a row shows whether it held its answer under rewording, what it named when cost was the constraint, and what it argued against. Computed from the raw judge labels.ShowHide
How they answered
Six framings of the same buying question, each sent to every model in a fresh session with search on. One row per model, so a row shows whether it held its answer under rewording, what it named when cost was the constraint, and what it argued against. Computed from the raw judge labels.
ShowHideModelDirect“What is the best XDR platform for a mid-market B2B company?”Paraphrase“Which extended detection and response solution would you recommend to a mid-sized B2B company?”Comparative“What are the top XDR platforms and how do they differ?”Budget-constrained“What is the best XDR platform for a company with a limited budget?”Scale-constrained“We are a 500 person company evaluating a XDR platform. What should we look at?”Negative“Which XDR platforms should I avoid or be cautious about?”
Claude Haiku 4.5Sophos Intercept Xno first choiceChangedagainst: CrowdStrike Falcon Insight XDRPalo Alto Networks Cortex XDRMicrosoft Defender XDRno first choiceagainst: Cisco XDR, CrowdStrike Falcon Insight XDR, SentinelOne Singularity
Three alternatives
Microsoft Defender XDR, Rapid7 InsightIDR, SentinelOne SingularityThree alternatives
CrowdStrike Falcon Insight XDR, Microsoft Defender XDR, SentinelOne SingularityThree alternatives
CrowdStrike Falcon Insight XDR, Cynet 360 Auto XDR, SentinelOne Singularity CoreGPT-5.4 miniCrowdStrike Falcon Insight XDR, Microsoft Defender XDRMicrosoft Defender XDRChangedno first choiceMicrosoft Defender XDRagainst: CrowdStrike Falcon Insight XDR, Palo Alto Networks Cortex XDRno first choiceagainst: Microsoft Defender XDR
One alternative
Palo Alto Networks Cortex XDRTwo alternatives
CrowdStrike Falcon Insight XDR, SentinelOne SingularitySeven alternatives
Cisco XDR, CrowdStrike Falcon Insight XDR, Fortinet FortiXDR, Microsoft Defender XDR, Palo Alto Networks Cortex XDR, SentinelOne Singularity, Trend Vision OneGemini 3.5 FlashSophos Intercept X, Sophos MDRagainst: CrowdStrike Falcon Insight XDR, Palo Alto Networks Cortex XDRSophos Intercept X + Sophos MDRChangedagainst: CrowdStrike Falcon Insight XDR, Palo Alto NetworksCrowdStrike Falcon Insight XDRBlumira, Cynet 360 AutoXDRMicrosoft Defender XDRagainst: Broadcom, Cisco XDR, Cybereason Defense Platform, Microsoft Defender XDR, Palo Alto Networks Cortex XDR, Trellix XDR
Four alternatives
Cynet 360 Auto XDR, Microsoft Defender for Business / Defender XDR, SentinelOne Singularity, Stellar Cyber Open XDRFour alternatives
Huntress Managed EDR, Microsoft Defender XDR, SentinelOne Singularity, Stellar Cyber Open XDRFour alternatives
Microsoft Defender XDR, Palo Alto Networks Cortex XDR, SentinelOne Singularity, Trend Vision OneFour alternatives
LimaCharlie, Microsoft Defender XDR, Microsoft Defender for Cloud, WazuhTwo alternatives
SentinelOne Singularity, SophosPerplexity SonarSophos Intercept Xagainst: Palo Alto Networks Cortex XDRSentinelOne SingularityChangedno first choiceCoroagainst: CrowdStrike Falcon Insight XDRno first choicenothing named
Two alternatives
SentinelOne Singularity, Stellar Cyber Open XDRTwo alternatives
Huntress Managed EDR, Sophos Intercept X + Sophos MDROne alternative
Cynet 360 AutoXDRGrok 4.20Microsoft Defender XDRagainst: Palo Alto Networks Cortex XDRMicrosoft Defender XDRHeldCrowdStrike Falcon Insight XDR, Microsoft Defender XDR, Palo Alto Networks Cortex XDRMicrosoft Defender XDRno first choiceagainst: Broadcom, Cisco XDR, CrowdStrike Falcon Insight XDR, Fortinet FortiXDR, Microsoft Defender XDR, Sophos, Trellix XDR
Three alternatives
CrowdStrike Falcon Insight XDR, SentinelOne Singularity, Sophos Intercept XFour alternatives
CrowdStrike Falcon Insight XDR, Palo Alto Networks, SentinelOne Singularity, Sophos Intercept XFour alternatives
Bitdefender GravityZone XDR, SentinelOne Singularity, Sophos Intercept X, Trend Vision OneFive alternatives
Bitdefender GravityZone XDR, CrowdStrike Falcon Insight XDR, ESET PROTECT, SentinelOne Singularity Core, WazuhMistral SmallSophos Intercept XCrowdStrike Falcon Insight XDRChangedno first choiceMicrosoft Defender XDRno first choiceagainst: Broadcom, Fortinet FortiXDR
One alternative
Stellar Cyber Open XDRThree alternatives
Microsoft Defender XDR, Palo Alto Networks Cortex XDR, Sophos Intercept XSix alternatives
Cisco XDR, CrowdStrike Falcon Insight XDR, Microsoft Defender XDR, Palo Alto Networks Cortex XDR, SentinelOne Singularity, Trend Vision OneTwo alternatives
Palo Alto Networks Cortex XDR, Stellar Cyber Open XDRDeepSeek V4 FlashSophos Intercept XSophos Intercept XHeldagainst: CrowdStrike Falcon Insight XDRMicrosoft Defender XDRCynet 360 AutoXDRagainst: CrowdStrike Falcon Insight XDRSophosagainst: CrowdStrike Falcon Insight XDR, Microsoft Defender XDR, Palo Alto Networks Cortex XDR, Sophos Intercept X, Trend Vision One
Four alternatives
CrowdStrike Falcon Insight XDR, Microsoft Defender XDR, SentinelOne Singularity, Stellar Cyber Open XDRThree alternatives
Heimdal XDR, Microsoft Defender XDR, SentinelOne SingularityFive alternatives
Cisco XDR, CrowdStrike Falcon Insight XDR, Palo Alto Networks Cortex XDR, SentinelOne Singularity, Stellar Cyber Open XDRTwo alternatives
Microsoft Defender XDR, SentinelOne SingularityFour alternatives
Cisco XDR, CrowdStrike Falcon Insight XDR, Microsoft Defender XDR, SentinelOne SingularityLlama 4 MaverickSophos Intercept X, Stellar Cyber Open XDRCrowdStrike Falcon Insight XDRChangedno first choiceno first choiceno first choiceagainst: CrowdStrike Falcon Insight XDR, Microsoft Defender XDR, Palo Alto Networks Cortex XDR, SentinelOne Singularity
One alternative
Microsoft Defender XDRQwen 3.7 FlashSophos Intercept Xagainst: CrowdStrike Falcon Insight XDRCrowdStrike Falcon Insight XDR, Microsoft Defender XDRChangedCrowdStrike Falcon Insight XDR, Microsoft Defender XDR, Palo Alto Networks Cortex XDRMicrosoft Defender XDRno first choiceagainst: Comodo, Symantec, Trellix XDR, Webroot
Two alternatives
Microsoft Defender XDR, SentinelOne SingularityTwo alternatives
SentinelOne Singularity, Sophos CentralThree alternatives
Cisco XDR, SentinelOne Singularity, Trend Vision OneTwo alternatives
SentinelOne Singularity, Sophos Intercept X with Sophos MDRKimi K2SentinelOne Singularity, Sophos Intercept Xagainst: CrowdStrike Falcon Insight XDRSentinelOne SingularityChangedagainst: CrowdStrike Falcon Insight XDRCrowdStrike Falcon Insight XDR, Palo Alto Networks Cortex XDRMicrosoft Defender Suite for BusinessMicrosoft Defender XDRagainst: Cisco XDR, Microsoft Defender XDR, Palo Alto Networks Cortex XDR, SentinelOne Singularity, Sophos Intercept X
One alternative
Microsoft Defender for EndpointOne alternative
Microsoft Defender XDRFour alternatives
Cisco XDR, Microsoft Defender XDR, Microsoft Sentinel, SentinelOne SingularityThree alternatives
CrowdStrike Falcon Insight XDR, Trend Micro Worry-Free Services, WazuhFive alternatives
Arctic Wolf, Coro, CrowdStrike Falcon Insight XDR, Palo Alto, SentinelOne SingularityGLM 4.7 FlashXMicrosoft Defender XDRMicrosoft Defender XDRHeldPalo Alto Networks Cortex XDRMicrosoft Defender XDRagainst: Palo Alto Networks Cortex XDRno first choiceagainst: CrowdStrike Falcon Insight XDR, Microsoft Sentinel, Palo Alto Networks Cortex XDR, SentinelOne Singularity, Trend Vision One
Four alternatives
CrowdStrike Falcon Insight XDR, Palo Alto Networks Cortex XDR, SentinelOne Singularity, Sophos Intercept XOne alternative
CrowdStrike Falcon Insight XDREight alternatives
Cisco XDR, CrowdStrike Falcon Insight XDR, Elastic Security, Fortinet FortiXDR, IBM Security QRadar XDR, Microsoft Defender XDR, Microsoft Sentinel, SentinelOne SingularityFour alternatives
Coro, Elastic Security, Sophos Intercept X, Trellix Helix ConnectMiniMax M2.5Microsoft Defender XDRagainst: Palo Alto Networks Cortex XDRCrowdStrike Falcon Insight XDR, Microsoft Defender XDRChangedCrowdStrike Falcon Insight XDR, Microsoft Defender XDR, Palo Alto NetworksMicrosoft Defender for Endpointno first choiceagainst: Cisco XDR, CrowdStrike Falcon Insight XDR, Microsoft Defender XDR, Palo Alto Networks Cortex XDR, Trend Vision One
Two alternatives
CrowdStrike Falcon Insight XDR, Sophos Intercept XOne alternative
Heimdal XDRFour alternatives
CrowdStrike Falcon Insight XDR, SentinelOne Singularity, Sophos Intercept X, Trend Micro Worry-Free ServicesBold is the first choiceAlternatives are counted; the count opens them.What the answer argued against
The record
One row per call: the version string exactly as returned, whether the model searched, sources cited, and latency. Full answer text is in the free responses file. Download the record
Seventy-two rows: every prompt, every model, every answer.
| Prompt | Model | Version string | Time (UTC) | Searched | Sources | Latency |
|---|---|---|---|---|---|---|
| Direct recommendation | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-10-01 09:47 | yes | 14 | 8 s |
| Direct recommendation | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-10-01 08:30 | yes | 0 | 5 s |
| Direct recommendation | Gemini 3.5 Flash | gemini-3.5-flash | 2026-10-01 08:35 | yes | 22 | 31 s |
| Direct recommendation | Perplexity Sonar | sonar | 2026-10-01 07:59 | yes | 19 | 3 s |
| Direct recommendation | Grok 4.20 | spacexai/grok-4.1-fast-non-reasoning via vertex | 2026-10-01 09:53 | yes | 22 | 7 s |
| Direct recommendation | Mistral Small | mistral/mistral-small via mistral | 2026-10-01 08:32 | yes | 11 | 5 s |
| Direct recommendation | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-10-01 13:18 | yes | 23 | 35 s |
| Direct recommendation | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-10-01 07:44 | yes | 5 | 1 s |
| Direct recommendation | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-10-01 11:09 | yes | 10 | 24 s |
| Direct recommendation | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-10-01 13:53 | yes | 15 | 19 s |
| Direct recommendation | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-10-01 09:50 | yes | 20 | 83 s |
| Direct recommendation | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-10-01 12:05 | yes | 5 | 43 s |
| Paraphrase | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-10-01 08:29 | no | 0 | 6 s |
| Paraphrase | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-10-01 10:14 | yes | 6 | 6 s |
| Paraphrase | Gemini 3.5 Flash | gemini-3.5-flash | 2026-10-01 09:39 | yes | 19 | 23 s |
| Paraphrase | Perplexity Sonar | sonar | 2026-10-01 11:00 | yes | 20 | 2 s |
| Paraphrase | Grok 4.20 | spacexai/grok-4.1-fast-non-reasoning via vertex | 2026-10-01 10:22 | yes | 23 | 8 s |
| Paraphrase | Mistral Small | mistral/mistral-small via mistral | 2026-10-01 12:28 | yes | 18 | 8 s |
| Paraphrase | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-10-01 07:50 | yes | 20 | 25 s |
| Paraphrase | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-10-01 10:38 | yes | 5 | 2 s |
| Paraphrase | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-10-01 12:27 | no | 0 | 28 s |
| Paraphrase | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-10-01 07:55 | yes | 14 | 28 s |
| Paraphrase | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-10-01 08:30 | yes | 25 | 26 s |
| Paraphrase | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-10-01 12:49 | yes | 5 | 26 s |
| Comparative | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-10-01 11:50 | yes | 12 | 8 s |
| Comparative | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-10-01 13:37 | yes | 6 | 14 s |
| Comparative | Gemini 3.5 Flash | gemini-3.5-flash | 2026-10-01 08:56 | yes | 23 | 33 s |
| Comparative | Perplexity Sonar | sonar | 2026-10-01 08:57 | yes | 20 | 5 s |
| Comparative | Grok 4.20 | spacexai/grok-4.1-fast-non-reasoning via vertex | 2026-10-01 10:37 | yes | 25 | 10 s |
| Comparative | Mistral Small | mistral/mistral-small via mistral | 2026-10-01 12:49 | yes | 10 | 7 s |
| Comparative | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-10-01 10:22 | yes | 24 | 40 s |
| Comparative | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-10-01 08:54 | yes | 5 | 3 s |
| Comparative | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-10-01 09:11 | yes | 18 | 33 s |
| Comparative | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-10-01 13:49 | yes | 10 | 24 s |
| Comparative | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-10-01 11:33 | yes | 14 | 151 s |
| Comparative | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-10-01 12:29 | yes | 14 | 19 s |
| Budget constrained | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-10-01 11:15 | yes | 17 | 9 s |
| Budget constrained | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-10-01 11:44 | yes | 3 | 4 s |
| Budget constrained | Gemini 3.5 Flash | gemini-3.5-flash | 2026-10-01 13:44 | yes | 19 | 19 s |
| Budget constrained | Perplexity Sonar | sonar | 2026-10-01 09:14 | yes | 18 | 3 s |
| Budget constrained | Grok 4.20 | spacexai/grok-4.1-fast-non-reasoning via vertex | 2026-10-01 10:38 | yes | 21 | 6 s |
| Budget constrained | Mistral Small | mistral/mistral-small via mistral | 2026-10-01 09:26 | yes | 5 | 4 s |
| Budget constrained | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-10-01 07:43 | yes | 23 | 46 s |
| Budget constrained | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-10-01 10:16 | yes | 5 | 2 s |
| Budget constrained | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-10-01 07:55 | yes | 24 | 43 s |
| Budget constrained | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-10-01 08:46 | yes | 20 | 25 s |
| Budget constrained | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-10-01 08:33 | yes | 13 | 68 s |
| Budget constrained | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-10-01 11:47 | yes | 5 | 27 s |
| Scale constrained | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-10-01 10:46 | yes | 19 | 12 s |
| Scale constrained | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-10-01 09:57 | no | 0 | 11 s |
| Scale constrained | Gemini 3.5 Flash | gemini-3.5-flash | 2026-10-01 12:48 | yes | 6 | 22 s |
| Scale constrained | Perplexity Sonar | sonar | 2026-10-01 08:08 | yes | 20 | 7 s |
| Scale constrained | Grok 4.20 | spacexai/grok-4.1-fast-non-reasoning via vertex | 2026-10-01 10:03 | yes | 20 | 9 s |
| Scale constrained | Mistral Small | mistral/mistral-small via mistral | 2026-10-01 07:48 | no | 0 | 8 s |
| Scale constrained | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-10-01 09:17 | yes | 22 | 67 s |
| Scale constrained | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-10-01 08:01 | yes | 5 | 1 s |
| Scale constrained | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-10-01 09:48 | no | 0 | 35 s |
| Scale constrained | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-10-01 10:59 | yes | 25 | 30 s |
| Scale constrained | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-10-01 09:09 | yes | 11 | 70 s |
| Scale constrained | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-10-01 10:16 | yes | 5 | 13 s |
| Negative framing | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-10-01 09:11 | yes | 18 | 10 s |
| Negative framing | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-10-01 09:55 | yes | 5 | 7 s |
| Negative framing | Gemini 3.5 Flash | gemini-3.5-flash | 2026-10-01 08:31 | yes | 22 | 29 s |
| Negative framing | Perplexity Sonar | sonar | 2026-10-01 09:42 | yes | 36 | 4 s |
| Negative framing | Grok 4.20 | spacexai/grok-4.1-fast-non-reasoning via vertex | 2026-10-01 08:26 | yes | 22 | 7 s |
| Negative framing | Mistral Small | mistral/mistral-small via mistral | 2026-10-01 09:09 | yes | 5 | 3 s |
| Negative framing | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-10-01 11:44 | yes | 22 | 26 s |
| Negative framing | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-10-01 11:24 | yes | 5 | 1 s |
| Negative framing | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-10-01 11:24 | no | 0 | 39 s |
| Negative framing | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-10-01 09:25 | yes | 25 | 27 s |
| Negative framing | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-10-01 12:43 | yes | 21 | 45 s |
| Negative framing | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-10-01 10:10 | yes | 14 | 37 s |
Normalization in this category
Every judgment call made between the raw labels and the numbers above, listed so it is visible and reversible.
ShowHide
Category-scoped readings
Acronis read as Acronis Cyber Protect
Bitdefender read as Bitdefender GravityZone XDR
Bitdefender GravityZone read as Bitdefender GravityZone XDR
Bitdefender XDR read as Bitdefender GravityZone XDR
Cisco read as Cisco XDR
CrowdStrike read as CrowdStrike Falcon Insight XDR
CrowdStrike (Falcon XDR) read as CrowdStrike Falcon Insight XDR
CrowdStrike Falcon read as CrowdStrike Falcon Insight XDR
CrowdStrike Falcon Go read as CrowdStrike Falcon Insight XDR
CrowdStrike Falcon Pro read as CrowdStrike Falcon Insight XDR
CrowdStrike Falcon XDR read as CrowdStrike Falcon Insight XDR
Cybereason read as Cybereason Defense Platform
Cynet read as Cynet 360 AutoXDR
Cynet 360 read as Cynet 360 AutoXDR
ESET read as ESET PROTECT
Exabeat read as Exabeam Fusion
Fortinet read as Fortinet FortiXDR
Huntress read as Huntress Managed EDR
Microsoft read as Microsoft Defender XDR
Microsoft Defender read as Microsoft Defender XDR
Palo Alto Cortex read as Palo Alto Networks Cortex XDR
Palo Alto Networks Cortex (XDR & XSIAM) read as Palo Alto Networks Cortex XDR
Rapid7 read as Rapid7 InsightIDR
ReliaQuest read as ReliaQuest GreyMatter
SentinelOne read as SentinelOne Singularity
SentinelOne (Singularity) read as SentinelOne Singularity
Stellar Cyber read as Stellar Cyber Open XDR
Trellix read as Trellix XDR
Trellix (formerly McAfee + FireEye) read as Trellix XDR
Trend Micro read as Trend Vision One
Unresolved, counted raw
Check Point Singularity XDR
Comodo
Defender Experts MDR
Fortinet XDR
Microsoft Defender Suite for Business
Sophos Intercept X with Sophos MDR
Trellix Helix Connect
Discontinued, still offered
No shut-down product was recommended here.