Two of fourteen models named UnderDefense first on the direct prompt; zero named HackerOne. UnderDefense was named by seven of the fourteen models and HackerOne by ten and UnderDefense carries 11 labels and HackerOne 14, so the shares are not directly comparable.
Named in four categories this edition.
Named in two categories this edition.
Share is the count of first choices across the direct, paraphrase, budget and scale prompts over all fourteen models, for a mid-market B2B company; rank is within the category; every quote names the model and the prompt it came from. Both figures come from the penetration testing as a service page.
| Model | Direct | Paraphrase | Comparative | Budget-constrained | Scale-constrained | Negative |
|---|---|---|---|---|---|---|
| Claude Haiku 4.5 | ||||||
| GPT-5.4 mini | ||||||
| Gemini 3.5 Flash | ||||||
| Perplexity Sonar | ||||||
| Grok 4.1 Fast | ||||||
| Mistral Small | ||||||
| DeepSeek V4 Flash | ||||||
| Llama 4 Maverick | ||||||
| Qwen 3.7 Flash | ||||||
| Kimi K2 | ||||||
| GLM 4.7 FlashX | ||||||
| MiniMax M2.5 | ||||||
| GPT-6 Luna | ||||||
| Muse Glimmer 30B |
Bold names in an answer are the products the judge labeled a first choice; a model naming several gives each of them that label. The full answer text for every row is in the record.
Every negative label with a quote, up to three, then the highest-weighted positives, up to three. Two of two in this category shown.
“I'd recommend BreachLock or UnderDefense as they specifically target mid-market companies” MiniMax M2.5 · direct prompt · first choice
“UnderDefense or Cobalt offer the best balance of pricing, quality, and scalability” GLM 4.7 FlashX · direct prompt · first choice
Every negative label with a quote, up to three, then the highest-weighted positives, up to three. Five of six in this category shown.
“crowdsourced like HackerOne/Cobalt work for speed but less for deep compliance” Grok 4.1 Fast · direct prompt · soft negative
“often more suited to larger enterprises or those with more complex needs” Mistral Small · paraphrase prompt · soft negative
“Platforms like HackerOne, Bugcrowd, or Open Bug Bounty allow you to set a budget and pay only for valid vulnerabilities found” MiniMax M2.5 · budget prompt · first choice
“Mid-Tier Specialist (e.g., Cobalt, HackerOne, Antisyphon) – Platform-based, often better balance of cost and quality.” Qwen 3.7 Flash · scale prompt · alternative
“HackerOne if you already run, or plan to run, a bug bounty / vulnerability disclosure program” GPT-5.4 mini · paraphrase prompt · alternative
Comparisons are drawn for the top eight products in each category, each against each. The output is the models' output; nothing here is a recommendation by the index.