# Bandit: how AI models rank it, September 2026

IT AI Recommendation Index, September 2026 Edition. Named in 11 judge labels across 1 categories by 9 of 12 models. Page: https://it-ai-index.com/vendors/bandit/

## Standing by category

| Category | Share | Rank | Negative rate | Labels |
|---|---|---|---|---|
| Static application security testing | 0% | 13 | 18% | 11 |

## What the models said for it

- "Add language-specific tools (like Bandit for Python, gosec for Go, Brakeman for Ruby) as needed" (Kimi K2, SAST)
- "A language-specific linter (Bandit, gosec, Brakeman) for depth in your main stack" (DeepSeek V4 Flash, SAST)
- "For Python, Bandit is highly recommended for its zero-config setup and speed" (Mistral Small, SAST)
- "A language-specific scanner such as Bandit for Python" (Perplexity Sonar, SAST)

## And against it

- "Basic pattern-matching tools (like Bandit for Python...)... If you rely *only* on basic pattern-matchers, you will miss the critical logical or data-flow flaws" (Gemini 3.5 Flash, SAST)
- "Bandit is described as Python-focused and limited in detection scope" (Perplexity Sonar, SAST)

## Record

- Method: https://it-ai-index.com/methodology/
- Raw judge labels and full responses: https://it-ai-index.com/data/
- License: CC BY 4.0. Cite as IT AI Recommendation Index, September 2026 Edition, it-ai-index.com.