Insider risk management for enterprise buyers
Asked as “insider risk management tool”, and as “insider threat platform”, on behalf of an enterprise B2B company. 50 first choices recorded across the direct, paraphrase, budget and scale prompts, fourteen models each. Added to the October 2026 Edition on October 4, 2026; its answers are read by the distilled judge (ai-indexes-judge-qwen3-14b-run3), not the claude-opus-5 judge of the earlier categories: how the two compare.
Standing · first-choice share
44%
Clear leader
44Microsoft Purview Insider Risk Management12DTEX Systems08DTEX InTERCEPT36others
44% of first choices, clear leader.
By buyer segment
The same question asked on behalf of a different buyer. Each standing is computed within its segment; they sit side by side and are never added together.
The standing
Share is the count of first choices across the direct, paraphrase, budget and scale prompts, over all fourteen models, for an enterprise B2B company. Ordered by share.
ProductFirst-choice shareNegative rateLabelsQuadrant
Show the two products at 0%, ordered by negative rate
Bars are the share of first choices, 0 to 100Every product with at least 10 labels here. Every product name links to its product page.
Head to head
All twenty-one head-to-head pages: the top seven products, each against each
Microsoft Purview Insider Risk Management vs Microsoft PurviewMicrosoft Purview Insider Risk Management vs TeramindMicrosoft Purview Insider Risk Management vs CyberhavenAbove Security vs Code42 IncydrAbove Security vs Proofpoint Insider Threat ManagementAbove Security vs Microsoft PurviewAbove Security vs TeramindAbove Security vs CyberhavenCode42 Incydr vs Proofpoint Insider Threat ManagementCode42 Incydr vs Microsoft PurviewCode42 Incydr vs TeramindCode42 Incydr vs CyberhavenProofpoint Insider Threat Management vs Microsoft PurviewProofpoint Insider Threat Management vs TeramindProofpoint Insider Threat Management vs CyberhavenMicrosoft Purview vs TeramindMicrosoft Purview vs CyberhavenTeramind vs Cyberhaven
Recommended versus criticized
Every product with at least 10 labels here, on both axes. The 30% line names a quadrant, not the verdict above: that one needs more than 40%.
Criticized challengerCriticized default
Negative label rate →
M01
02
03
04
05
06S07
08
09
10
11G12
13Accepted challengerEndorsed leader
0%First-choice share → · lines at 30% share and 25% negative60%
Key
01Microsoft Purview Insider Risk Management44%
02DTEX Systems12%
DTEX Systems12%03DTEX InTERCEPT8%
DTEX InTERCEPT8%04Varonis Data Security Platform6%
Varonis Data Security Platform6%05Proofpoint Insider Threat Management4%
Proofpoint Insider Threat Management4%06Above Security4%
Above Security4%07Securonix UEBA4%
08Cyberhaven4%
Cyberhaven4%09Code42 Incydr2%
Code42 Incydr2%10Exabeam2%
Exabeam2%11Teramind2%
Teramind2%12Gurucul0%
13Forcepoint DLP0%
Forcepoint DLP0%What they warned about
Two of fourteen models held their first choice under the paraphrase. Claude Haiku 4.5, Gemini 3.5 Flash, Perplexity Sonar, Grok 4.1 Fast, Mistral Small, DeepSeek V4 Flash, Qwen 3.7 Flash, Kimi K2, GLM 4.7 FlashX, MiniMax M2.5, GPT-6 Luna and Muse Glimmer 30B changed. A high negative share on a product with few labels is a warning. A low share on a product with many labels is salience, not sentiment.
Teramind48%
12 of 25 labels negative · 8 of 14 models · 3 hard negative
“Tools/Types to Approach with High Caution or Avoid: Overly Surveillance-Heavy Tools (e.g., Teramind, Veriato, some legacy user activity monitoring like Proofpoint ObserveIT)” Grok 4.1 Fast, negative prompt
Varonis Data Security Platform19%
7 of 37 labels negative · 6 of 14 models
“either quote-only, privacy-invasive (full recording), or mid-market focused—not ideal for predictable costs” Grok 4.1 Fast, budget prompt
Securonix UEBA
23%
6 of 26 labels negative · 5 of 14 models
“enterprise platforms like DTEX or Securonix use custom pricing that can vary significantly based on negotiated deals” MiniMax M2.5, budget prompt
Veriato80%
4 of 5 labels negative · 4 of 14 models · 3 hard negative
“Examples to be cautious of: Teramind (when configured for full keystroke capture), Veriato, and similar "full surveillance" platforms.” DeepSeek V4 Flash, negative prompt
What they cite
Citations exist only for the models that return a source list: fourteen of the fourteen in this edition, and all six flagship models on the expanded tier.
Sites the answers cite
79 of 84 answers in this category came back with a source list, from 14 of 14 models: citations where the model returns them, or the search results it consulted. 1140 links across 213 sites, every framing counted. Ranked by the number of answers carrying the site or page. None of the 252 answers across every segment cited this index's own page for the category.
42 answers · 95 citations · 12 models
vendor site · Microsoft40 answers · 61 citations · 12 models
40 answers · 59 citations · 13 models
vendor site · Breachsense39 answers · 39 citations · 12 models
vendor site · DTEX30 answers · 42 citations · 13 models
vendor site · Nightfall30 answers · 30 citations · 10 models
vendor site · Exabeam26 answers · 38 citations · 10 models
vendor site · Cyberhaven24 answers · 38 citations · 8 models
21 answers · 21 citations · 10 models
21 answers · 21 citations · 9 models
vendor site · Forcepoint20 answers · 25 citations · 10 models
20 answers · 24 citations · 10 models
Pages the answers cite
The ten pages named in the most answers, by full address. A page here is one the models returned with a recommendation, not one the index endorses.
39 answers · 12 models
36 answers · 13 models
30 answers · 10 models
24 answers · 12 models
22 answers · 9 models
21 answers · 10 models
21 answers · 9 models
21 answers · 10 models
21 answers · 9 models
20 answers · 10 models
Search against answers
Each company's standing in the answers beside its site's footprint in Google search, one row a site: the products the models named on it with their shares, and the share they add up to; monthly searches on Google, and DataForSEO's estimate of AI search demand (modeled from search signals, directional, not a count of queries to any assistant), for the most-searched of the company's and its products' names (the name is in each row's hover text); estimated monthly organic visits to the site; and its best position in Google's top ten for “best insider risk management tool”, “insider risk management tool”, “insider risk management tools”. US estimates from DataForSEO and Google's Ads Transparency Center. A small company's site, or a mid-sized company's site for its flagship, is marked company; a product on a large parent's site (Google, Microsoft) has no site figures. A column with no figures for this category is left out, and an empty cell means none were seen, not none exist. Two measurements side by side: neither is read as the cause of the other.
| Company and products | Share | Own site cited | Name searches, Google | AI search demand, est. | Organic visits | Paid search a month, est. | Google ads, last 30 days | Best Google position |
|---|---|---|---|---|---|---|---|---|
| Microsoft parent site Microsoft Purview Insider Risk Management 44%, Microsoft Purview 0% | 44% | 438 | 2,240,000 | 403,136 | ||||
| DTEX Systems dtex.ai DTEX Systems 12%, DTEX InTERCEPT 8% | 20% | 69 | 480 | 19 | 1,296 | 10 | ||
| Varonis Platform varonis.com Varonis Data Security Platform 6%, Varonis Platform 0% | 6% | 195 | 210 | 2 | 136,629 | 12 | ||
| Proofpoint parent site Proofpoint Insider Threat Management 4% | 4% | 61 | 27,100 | 1,488 | ||||
| Above Security above.security | 4% | 52 | 390 | 178 | 172 | 7 | ||
| Securonix securonix.com Securonix UEBA 4% | 4% | 47 | 1,300 | 46 | 3,571 company | $13 | 9 | |
| Cyberhaven cyberhaven.com | 4% | 68 | 2,900 | 54 | 13,999 | 22 | 6 | |
| Code42 Incydr mimecast.com | 2% | 68 | 110 | 6 | 148,929 | 21 | ||
| Exabeam exabeam.com | 2% | 90 | 1,900 | 82 | 66,723 | 0 | 4 | |
| Nightfall nightfall.ai Nightfall AI 2% | 2% | 108 | 1,000 | 38 | 43,377 company | $23,730 | 26 |
Google's top ten for the three searches hold 17 sites; 5 of them are among the sites the models cited here (cyberhaven.com, exabeam.com, forcepoint.com, gartner.com, learn.microsoft.com). The first result for “best insider risk management tool” is gartner.com.
How they answered
Six framings of the same buying question, each sent to every model in a fresh session with search on. One row per model, so a row shows whether it held its answer under rewording, what it named when cost was the constraint, and what it argued against. Computed from the raw judge labels.ShowHide
How they answered
Six framings of the same buying question, each sent to every model in a fresh session with search on. One row per model, so a row shows whether it held its answer under rewording, what it named when cost was the constraint, and what it argued against. Computed from the raw judge labels.
ShowHideModelDirect“What is the best insider risk management tool for an enterprise B2B company?”Paraphrase“Which insider threat platform would you recommend to a large B2B company with thousands of employees?”Comparative“What are the top enterprise-grade insider risk management tools and how do they differ?”Budget-constrained“What is the best insider risk management tool for a large company that needs predictable total cost across thousands of users?”Scale-constrained“We are a 5,000 person company with SSO, SOC 2 and procurement review requirements evaluating an insider risk management tool. What should we look at?”Negative“Which insider risk management tools should a large enterprise avoid or be cautious about?”
Claude Haiku 4.5no first choiceDTEX SystemsChangedno first choiceMicrosoft Purview Insider Risk Managementno first choiceagainst: CyberArk, Island.io, Microsoft Purview Insider Risk Management, Proofpoint, Trellix
Four alternatives
Microsoft Sentinel, Securonix UEBA, Splunk, Varonis Data Security PlatformOne alternative
Above SecurityGPT-5.4 miniMicrosoft Purview Insider Risk ManagementMicrosoft Purview Insider Risk ManagementHeldMicrosoft Purview Insider Risk ManagementMicrosoft Purview Insider Risk Managementno first choicenothing named
Two alternatives
Proofpoint Insider Threat Management, Varonis Data Security PlatformTwo alternatives
Forcepoint DLP, Proofpoint Insider Threat ManagementFive alternatives
Exabeam UEBA / security analytics, Proofpoint Insider Threat Management, Securonix UEBA, Teramind, Varonis Unified Data Security PlatformOne alternative
Proofpoint Insider Threat ManagementGemini 3.5 FlashCyberhaven, Microsoft Purview Insider Risk ManagementCyberhavenChangedMicrosoft PurviewDTEX Systems, Microsoft Purview Insider Risk Managementno first choiceagainst: Hubstaff, Time Doctor
Four alternatives
Code42 Incydr, DTEX Systems, Proofpoint Insider Threat Management, Varonis Data Security PlatformThree alternatives
DTEX Systems – DTEX InTERACT, Microsoft Purview Insider Risk Management, Proofpoint Insider Threat Management - ITMFour alternatives
Code42 Incydr, Cyberhaven, DTEX Systems, Proofpoint ITMOne alternative
Code42 IncydrPerplexity SonarMicrosoft Purview Insider Risk ManagementVaronis Data Security PlatformChangedMicrosoft Purview Insider Risk ManagementMicrosoft Purview Insider Risk Managementno first choiceagainst: Coro, Metomic, Teramind, Veriato
Three alternatives
DTEX InTERCEPT, Proofpoint, Varonis Data Security PlatformThree alternatives
DTEX InTERCEPT, Microsoft Purview Insider Risk Management, Proofpoint Insider Threat ManagementSix alternatives
Cyberhaven, DTEX InTERCEPT, Forcepoint DLP, Proofpoint Insider Threat Management, Teramind, Varonis Data Security PlatformTwo alternatives
DTEX Systems, Varonis Data Security PlatformGrok 4.1 FastMicrosoft Purview Insider Risk Managementagainst: TeramindDTEX SystemsChangedMicrosoft Purview Insider Risk ManagementMicrosoft Purview Insider Risk Managementagainst: Above Security, Proofpoint ITM, Securonix UEBA, Teramind, Varonis Data Security PlatformDTEX Systems, Teramindagainst: Coro, Forcepoint DLP, Gurucul, Proofpoint ITM, Proofpoint Insider Threat Management, Securonix UEBA, Teramind, Varonis Data Security Platform, Veriato
One alternative
Varonis Data Security PlatformFive alternatives
Exabeam, Microsoft Purview Insider Risk Management, Proofpoint Insider Threat Management, Securonix UEBA, Varonis PlatformFour alternatives
DTEX InTERCEPT, Exabeam, Proofpoint Insider Threat Management, Varonis PlatformOne alternative
DTEX InTERCEPTThree alternatives
Above Security, Microsoft Purview Insider Risk Management, Varonis Data Security PlatformMistral SmallNetwrix Auditor, Nightfall AIDarktrace, Securonix UEBAChangedDTEX InTERCEPT, Varonis PlatformDTEX Systemsagainst: Proofpoint Insider Threat Managementno first choicenothing named
Two alternatives
DTEX Systems, Microsoft Purview Insider Risk ManagementOne alternative
ExabeamThree alternatives
Code42 Incydr, Microsoft Purview Insider Risk Management, Proofpoint Insider Threat ManagementDeepSeek V4 FlashDTEX InTERCEPTDTEX SystemsChangedDTEX Systems, Microsoft Purview Insider Risk Management, Varonis PlatformMicrosoft Purview Insider Risk Managementagainst: Gurucul, Proofpoint Insider Threat Mgmt, Securonix UEBA, Varonis Data Security PlatformMicrosoft Purview Insider Risk Managementagainst: DTEX InTERCEPTagainst: ActivTrak, Hubstaff, Microsoft Purview IRM, Teramind, Time Doctor, Veriato
Three alternatives
Microsoft Purview Insider Risk Management, Proofpoint Insider Threat Management, Varonis Data Security PlatformThree alternatives
Microsoft Purview Insider Risk Management, Securonix UEBA, Varonis Data Security PlatformSix alternatives
Above Security, Code42 Incydr, Forcepoint Insider Threat, Proofpoint Insider Threat Management, Securonix UEBA, TeramindTwo alternatives
Code42 Incydr, DTEX InTERCEPTThree alternatives
Above Security, Securonix UEBA, TeramindLlama 4 Maverickno first choiceno first choiceHeldno first choiceMicrosoft Purview Insider Risk Managementno first choicenothing named
One alternative
Above SecurityQwen 3.7 FlashDTEX InTERCEPT, Varonis Data Security PlatformExabeamChangedCode42Microsoft 365 Insider Risk Managementagainst: Exabeam, Splunk, Tanium, Varonis Data Security PlatformDTEX InTERCEPT, Securonix UEBA, Varonis Data Security Platformagainst: Digital Guardian, Forcepoint DLP, IBM QRadar, Microsoft Purview, Proofpoint, Splunk
Three alternatives
Code42, Proofpoint Insider Threat Management, TeramindThree alternatives
Microsoft Purview, Tessian, Varonis Data Security PlatformFour alternatives
Forcepoint Insider Threat Solution, Microsoft Purview, Netskope, Varonis Data Security PlatformOne alternative
SafeticaTwo alternatives
CrowdStrike, Microsoft Defender XDRKimi K2Microsoft Purview Insider Risk Management, Proofpoint Insider Threat ManagementMicrosoft Purview Insider Risk ManagementChangedMicrosoft Purview Insider Risk ManagementMicrosoft Purview Insider Risk Managementagainst: Code42 Incydr, DTEX InTERCEPT, Forcepoint DLP, Teramind, Varonis Data Security Platformno first choicenothing named
Three alternatives
DTEX Systems, Forcepoint Data Security Cloud, Varonis Data Security PlatformTwo alternatives
DTEX Systems, Proofpoint Insider Threat ManagementSix alternatives
DTEX InTERCEPT, Forcepoint DLP, Gurucul, Proofpoint Insider Threat Management, Securonix UEBA, Splunk Enterprise SecurityTwo alternatives
Proofpoint ITM, UnderDefenseGLM 4.7 FlashXAbove SecurityDTEX InTERCEPTChangedno first choiceagainst: TeramindMicrosoft Purview Insider Risk Managementagainst: DTEX Systems, Forcepoint DLP, Securonix UEBA, Teramind, Varonis Data Security Platformno first choiceagainst: Cisco Secure Email, Mimecast Email Security, Symantec Data Loss Prevention, Teramind
Five alternatives
Code42 Incydr, DTEX Systems, Microsoft Purview Insider Risk Management, Proofpoint Insider Threat Management, Varonis Data Security PlatformFour alternatives
Cyberhaven, Microsoft Purview, Nightfall AI, Varonis Data Security PlatformMiniMax M2.5no first choiceCode42 IncydrChangedno first choiceMicrosoft Purview Insider Risk Managementagainst: DTEX InTERCEPT, Securonix UEBAno first choiceagainst: Teramind, Veriato
Two alternatives
Microsoft Purview Insider Risk Management, SolarWinds Security Event ManagerTwo alternatives
Code42 Incydr, SafeticaGPT-6 LunaProofpoint Insider Threat ManagementMicrosoft Purview Insider Risk ManagementChangedMicrosoft Purview Insider Risk Managementagainst: TeramindMicrosoft Purview Insider Risk Managementno first choiceagainst: Microsoft Purview Insider Risk Management
Three alternatives
DTEX InTERCEPT, Microsoft Purview Insider Risk Management, NetskopeTwo alternatives
DTEX InTERCEPT, Proofpoint Insider Threat ManagementFour alternatives
DTEX InTERCEPT, Forcepoint Risk-Adaptive Protection, Netskope One Insider Risk / Behavior Analytics, Proofpoint Insider Threat ManagementThree alternatives
DTEX InTERCEPT, Proofpoint, TeramindOne alternative
Purview Insider Risk ManagementMuse Glimmer 30BMicrosoft Purview Insider Risk ManagementAbove SecurityChangedno first choiceMicrosoft Purview Insider Risk Managementagainst: DTEX InTERCEPT, Proofpoint Insider Threat Management, Securonix UEBA, Varonis Data Security Platformno first choiceagainst: Code42 Incydr, Proofpoint Insider Threat Management, Teramind
Two alternatives
Code42 Incydr, Proofpoint Insider Threat ManagementFive alternatives
Cisco, Gurucul, Microsoft Purview Insider Risk Management, Proofpoint Insider Threat Management, SplunkOne alternative
Code42 IncydrBold is the first choiceAlternatives are counted; the count opens them.What the answer argued against
The record
One row per call: the version string exactly as returned, whether the model searched, sources cited, and latency. Full answer text is in the free responses file. Download the record
Eighty-four rows: every prompt, every model, every answer.
| Prompt | Model | Version string | Time (UTC) | Searched | Sources | Latency |
|---|---|---|---|---|---|---|
| Direct recommendation | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-10-05 00:29 | no | 0 | 4 s |
| Direct recommendation | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-10-05 00:47 | yes | 3 | 5 s |
| Direct recommendation | Gemini 3.5 Flash | gemini-3.5-flash | 2026-10-05 01:48 | yes | 23 | 35 s |
| Direct recommendation | Perplexity Sonar | sonar | 2026-10-05 00:05 | yes | 17 | 4 s |
| Direct recommendation | Grok 4.1 Fast | spacexai/grok-4.1-fast-non-reasoning via vertex | 2026-10-05 00:19 | yes | 22 | 11 s |
| Direct recommendation | Mistral Small | mistral/mistral-small via mistral | 2026-10-04 23:23 | yes | 6 | 5 s |
| Direct recommendation | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-10-05 00:06 | yes | 23 | 62 s |
| Direct recommendation | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-10-04 23:12 | yes | 5 | 4 s |
| Direct recommendation | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-10-05 01:47 | yes | 23 | 35 s |
| Direct recommendation | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-10-05 01:34 | yes | 14 | 21 s |
| Direct recommendation | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-10-05 00:01 | yes | 22 | 47 s |
| Direct recommendation | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-10-04 22:56 | yes | 9 | 17 s |
| Direct recommendation | GPT-6 Luna | gpt-6-luna | 2026-10-04 23:59 | yes | 4 | 16 s |
| Direct recommendation | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-10-04 22:26 | yes | 21 | 24 s |
| Paraphrase | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-10-05 00:44 | yes | 16 | 9 s |
| Paraphrase | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-10-05 00:15 | yes | 3 | 6 s |
| Paraphrase | Gemini 3.5 Flash | gemini-3.5-flash | 2026-10-05 00:15 | yes | 15 | 24 s |
| Paraphrase | Perplexity Sonar | sonar | 2026-10-05 00:44 | yes | 18 | 2 s |
| Paraphrase | Grok 4.1 Fast | spacexai/grok-4.1-fast-non-reasoning via vertex | 2026-10-04 23:57 | yes | 23 | 9 s |
| Paraphrase | Mistral Small | mistral/mistral-small via mistral | 2026-10-05 00:19 | yes | 12 | 8 s |
| Paraphrase | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-10-05 01:06 | yes | 24 | 51 s |
| Paraphrase | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-10-05 00:53 | yes | 5 | 3 s |
| Paraphrase | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-10-05 01:25 | no | 0 | 25 s |
| Paraphrase | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-10-04 23:58 | yes | 25 | 33 s |
| Paraphrase | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-10-05 00:03 | yes | 9 | 41 s |
| Paraphrase | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-10-04 22:24 | yes | 8 | 24 s |
| Paraphrase | GPT-6 Luna | gpt-6-luna | 2026-10-05 00:15 | yes | 2 | 14 s |
| Paraphrase | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-10-05 00:58 | yes | 19 | 29 s |
| Comparative | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-10-05 01:12 | yes | 9 | 8 s |
| Comparative | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-10-05 00:22 | yes | 4 | 9 s |
| Comparative | Gemini 3.5 Flash | gemini-3.5-flash | 2026-10-04 22:47 | yes | 27 | 33 s |
| Comparative | Perplexity Sonar | sonar | 2026-10-04 22:19 | yes | 19 | 5 s |
| Comparative | Grok 4.1 Fast | spacexai/grok-4.1-fast-non-reasoning via vertex | 2026-10-05 01:38 | yes | 21 | 11 s |
| Comparative | Mistral Small | mistral/mistral-small via mistral | 2026-10-05 00:26 | yes | 9 | 9 s |
| Comparative | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-10-05 01:11 | yes | 23 | 85 s |
| Comparative | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-10-04 22:59 | yes | 5 | 3 s |
| Comparative | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-10-05 01:47 | yes | 14 | 38 s |
| Comparative | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-10-05 00:51 | yes | 24 | 34 s |
| Comparative | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-10-04 23:03 | yes | 14 | 27 s |
| Comparative | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-10-05 00:36 | yes | 9 | 23 s |
| Comparative | GPT-6 Luna | gpt-6-luna | 2026-10-05 00:34 | yes | 7 | 24 s |
| Comparative | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-10-05 00:58 | yes | 13 | 28 s |
| Budget constrained | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-10-05 01:16 | yes | 9 | 7 s |
| Budget constrained | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-10-04 23:53 | yes | 4 | 5 s |
| Budget constrained | Gemini 3.5 Flash | gemini-3.5-flash | 2026-10-04 23:55 | yes | 10 | 26 s |
| Budget constrained | Perplexity Sonar | sonar | 2026-10-05 01:20 | yes | 18 | 4 s |
| Budget constrained | Grok 4.1 Fast | spacexai/grok-4.1-fast-non-reasoning via vertex | 2026-10-05 01:12 | yes | 18 | 11 s |
| Budget constrained | Mistral Small | mistral/mistral-small via mistral | 2026-10-04 22:57 | yes | 5 | 4 s |
| Budget constrained | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-10-05 00:19 | yes | 23 | 42 s |
| Budget constrained | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-10-05 01:40 | yes | 5 | 2 s |
| Budget constrained | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-10-04 23:51 | yes | 5 | 32 s |
| Budget constrained | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-10-05 01:06 | yes | 22 | 57 s |
| Budget constrained | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-10-05 00:45 | yes | 9 | 25 s |
| Budget constrained | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-10-05 01:09 | yes | 21 | 50 s |
| Budget constrained | GPT-6 Luna | gpt-6-luna | 2026-10-05 01:57 | yes | 4 | 16 s |
| Budget constrained | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-10-05 01:45 | yes | 14 | 25 s |
| Scale constrained | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-10-05 00:31 | yes | 18 | 15 s |
| Scale constrained | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-10-04 23:21 | yes | 4 | 8 s |
| Scale constrained | Gemini 3.5 Flash | gemini-3.5-flash | 2026-10-05 01:51 | no | 0 | 19 s |
| Scale constrained | Perplexity Sonar | sonar | 2026-10-04 22:32 | yes | 20 | 9 s |
| Scale constrained | Grok 4.1 Fast | spacexai/grok-4.1-fast-non-reasoning via vertex | 2026-10-04 22:25 | yes | 20 | 11 s |
| Scale constrained | Mistral Small | mistral/mistral-small via mistral | 2026-10-04 23:55 | no | 0 | 8 s |
| Scale constrained | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-10-05 00:41 | yes | 22 | 89 s |
| Scale constrained | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-10-04 22:22 | yes | 5 | 3 s |
| Scale constrained | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-10-05 00:29 | yes | 20 | 50 s |
| Scale constrained | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-10-05 01:21 | yes | 25 | 38 s |
| Scale constrained | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-10-05 01:19 | yes | 23 | 40 s |
| Scale constrained | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-10-05 01:35 | no | 0 | 58 s |
| Scale constrained | GPT-6 Luna | gpt-6-luna | 2026-10-04 23:42 | yes | 5 | 24 s |
| Scale constrained | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-10-04 22:27 | yes | 25 | 34 s |
| Negative framing | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-10-05 01:49 | yes | 18 | 16 s |
| Negative framing | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-10-04 23:56 | yes | 5 | 7 s |
| Negative framing | Gemini 3.5 Flash | gemini-3.5-flash | 2026-10-04 23:34 | yes | 12 | 21 s |
| Negative framing | Perplexity Sonar | sonar | 2026-10-05 00:19 | yes | 29 | 5 s |
| Negative framing | Grok 4.1 Fast | spacexai/grok-4.1-fast-non-reasoning via vertex | 2026-10-05 00:22 | yes | 23 | 13 s |
| Negative framing | Mistral Small | mistral/mistral-small via mistral | 2026-10-05 00:59 | yes | 5 | 6 s |
| Negative framing | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-10-04 23:30 | yes | 22 | 90 s |
| Negative framing | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-10-05 00:25 | yes | 5 | 3 s |
| Negative framing | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-10-04 23:25 | yes | 23 | 41 s |
| Negative framing | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-10-05 01:28 | yes | 25 | 45 s |
| Negative framing | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-10-04 23:59 | yes | 14 | 86 s |
| Negative framing | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-10-05 00:33 | yes | 14 | 25 s |
| Negative framing | GPT-6 Luna | gpt-6-luna | 2026-10-05 00:19 | yes | 2 | 18 s |
| Negative framing | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-10-05 00:43 | yes | 20 | 27 s |
Normalization in this category
Every judgment call made between the raw labels and the numbers above, listed so it is visible and reversible.
ShowHide
Category-scoped readings
DTEX read as DTEX InTERCEPT
Forcepoint read as Forcepoint DLP
Forcepoint Data Loss Prevention read as Forcepoint DLP
Mimecast Incydr read as Code42 Incydr
Mimecast Incydr (formerly Code42) read as Code42 Incydr
Proofpoint Insider Threat read as Proofpoint Insider Threat Management
Proofpoint ObserveIT read as Proofpoint Insider Threat Management
Securonix read as Securonix UEBA
Varonis read as Varonis Data Security Platform
Unresolved, counted raw
DTEX Invisibly
DTEX Systems – DTEX InTERACT
Exabeam UEBA
Exabeam UEBA / security analytics
Exterro
Forcepoint Insider Threat Solution
Forcepoint Risk-Adaptive Protection
Go Cyberhaven
Gurucul Insider Risk Management
IBM QRadar UEBA
Island.io
Microsoft 365 Insider Risk Management
Microsoft Insider Risk Management
Netskope One Insider Risk / Behavior Analytics
Pathlock
PeerSpot
Proofpoint Insider Threat Management - ITM
Proofpoint Insider Threat Mgmt
Purview Insider Risk Management
Syteca
Varonis Platform
Discontinued, still offered
No shut-down product was recommended here.