# BreachLock vs UnderDefense: which do AI models recommend for ptaas, October 2026

IT AI Recommendation Index, October 2026 Edition, Penetration testing as a service. Five of fourteen models named BreachLock first on the direct prompt; two named UnderDefense. Page: https://it-ai-index.com/security/penetration-testing-as-a-service/breachlock-vs-underdefense/

| | First-choice share | Rank | Negative rate | Labels | Models naming it |
|---|---|---|---|---|---|
| BreachLock | 19% | #2 of 10 | 0% | 35 | 12 of 14 |
| UnderDefense | 4% | #5 of 10 | 0% | 11 | 7 of 14 |

## The direct prompt, model by model

- MiniMax M2.5: both first (first choices: BreachLock, UnderDefense) (alternatives: Raxis, Synack)
- Claude Haiku 4.5: breachlock first (first choices: BreachLock, Cobalt) (alternatives: Packetlabs, Raxis, Stingrai)
- Perplexity Sonar: breachlock first (first choices: BreachLock) (alternatives: Cobalt, Raxis, Stingrai)
- Grok 4.1 Fast: breachlock first (first choices: BreachLock) (alternatives: Bright Defense, NetSPI, Packetlabs, Prescient Security)
- Mistral Small: breachlock first (first choices: BreachLock, Cobalt) (alternatives: NetSPI, Stingrai, Synack)
- GLM 4.7 FlashX: underdefense first (first choices: Cobalt, UnderDefense) (alternatives: BreachLock, NetSPI, Packetlabs)
- Gemini 3.5 Flash: neither first, one named (first choices: Cobalt) (alternatives: BreachLock, NetSPI, UnderDefense)
- DeepSeek V4 Flash: neither first, one named (first choices: Cobalt, Raxis) (alternatives: BreachLock, Packetlabs, UnderDefense)
- Qwen 3.7 Flash: neither first, one named (first choices: Red Siege Security) (alternatives: Astra Security, BreachLock, Lumina.io, Netragard)
- Kimi K2: neither first, one named (first choices: Cobalt) (alternatives: BreachLock, Coalfire, Praetorian)
- Muse Glimmer 30B: neither first, one named (first choices: Cobalt) (alternatives: Astra Security, HackerOne, Netragard, Red Siege, UnderDefense)
- GPT-5.4 mini: neither named (first choices: Cobalt) (alternatives: Cognisys, Trava Security)
- Llama 4 Maverick: neither named
- GPT-6 Luna: neither named (first choices: Cobalt) (alternatives: Bishop Fox, NetSPI)

## What the models said about BreachLock

- "For compliance-driven mid-market: Cobalt, Packetlabs, or BreachLock are the most frequently recommended choices." (Claude Haiku 4.5, direct prompt, first choice)
- "with a slight edge to BreachLock if you want transparent, subscription-style pricing and compliance-ready reporting" (Muse Glimmer 30B, paraphrase prompt, first choice)
- "Cobalt.io and BreachLock are especially popular due to their PTaaS models and focus on mid-market needs" (Mistral Small, direct prompt, first choice)

## What the models said about UnderDefense

- "I'd recommend BreachLock or UnderDefense as they specifically target mid-market companies" (MiniMax M2.5, direct prompt, first choice)
- "UnderDefense or Cobalt offer the best balance of pricing, quality, and scalability" (GLM 4.7 FlashX, direct prompt, first choice)

Share is the count of first choices across the direct, paraphrase, budget and scale prompts over all fourteen models, for a mid-market B2B company; rank is within the category. Comparisons are drawn for the top eight products in each category. Published under CC BY 4.0; the output is the models' output, and nothing here is a recommendation by the index.