IT AI Index
Index Vendors › Cisco Umbrella · September 2026 Edition
Cisco · 3 categories · Ranked

Cisco Umbrella

31Judge labels
5First choices
4Negative labels
11 of 12Models named it
3Categories
September 2026 Edition. Every number here is derived from the raw labels under vendor table vv2026-09.2, every buyer segment counted.
Best standing
7% in SASE for mid-market buyers
Rank 4 of 43 in the mid-market standingaccepted challenger
0 of 12 models made it the first choice on the direct prompt; 18% of its 17 labels there were negative.
By buyer segmentRead the same way at every buyer size.
In sase · each standing computed within its segment · bars are 0 to 100 · the accent bar is the product's own best reading

Standing by category

Every category where a model named Cisco Umbrella for a mid-market B2B company. Share is first choices across the direct, paraphrase, budget and scale prompts; rank is within every product named in that category.
CategoryFunctionShareRankNegative rateLabelsQuadrant
SASE platformsNetwork and edge7%4 of 4318%17accepted challenger
Multi-factor authenticationIdentity and access0%52 of 780%1under 10 labels · led by Cisco Duo at 42%
Threat intelligence platformsSecurity operations0%109 of 128100%1under 10 labels · led by NordStellar at 13%

Movement

This is the first edition on this tier, so no move can be computed for Cisco Umbrella yet. From the next edition this section shows, per buyer segment, whether its share moved by more than the measured noise floor.

By model

How each model treated Cisco Umbrella across every prompt where it was named for a mid-market B2B company. Twelve models, six prompts per category.
ModelFirst choiceAlternativeMentionNegativeLabels
Claude Haiku 4.500112
GPT-5.4 mini00000
Gemini 3.5 Flash00000
Perplexity Sonar00011
Grok 4.1 Fast01001
Mistral Small02002
DeepSeek V4 Flash00112
Llama 4 Maverick10102
Qwen 3.7 Flash11002
Kimi K201001
GLM 4.7 FlashX02103
MiniMax M2.511013

By framing

Which of the six questions produced the naming. By model says how often; this says asked what. The first-choice count on the right carries the marks of the models that produced it.
FramingLabels by classFirst choices
Direct9 labelsNone
Paraphrase4 labelsNone
Comparative0 labelsNone
Budget-constrained16 labels5
Scale-constrained0 labelsNone
Negative2 labelsNone
First choiceAlternativeMentionNegative31 labels in all, every segment counted; 5 of the 5 first choices count toward share, since the comparative and negative framings do not. The bar is one segment per label class, to scale within the framing.

What the models said for it

Verbatim evidence the judge attached to positive labels.

“Cisco Umbrella and Cloudflare generally offer the lowest barriers to entry” Qwen 3.7 Flash · SASE · budget prompt · first choice
“The best SASE platform for a company with a limited budget is Cisco Umbrella” Llama 4 Maverick · SASE · budget prompt · first choice
“Cisco Umbrella if you need basic security at the lowest cost” MiniMax M2.5 · SASE · budget prompt · first choice
“Cheapest paid tier, simple DNS/SWG focus, easy for mid-market | Less full SASE (add-ons for SD-WAN/ZTNA raise costs)” Grok 4.1 Fast · SASE · budget prompt · alternative

And against it

Verbatim evidence attached to negative labels. A warning on a product with few labels is a warning; on a product with many, it is one voice among them.

“integrates multiple products with no single centralized interface to track all of them conveniently, and there are reports of issues accessing customer services” Claude Haiku 4.5 · SASE · negative prompt · soft negative
“Not a full TIP – more of a security stack, but includes threat intelligence” MiniMax M2.5 · Threat intel · budget prompt · soft negative
“more of a lower-cost security layer than a full all-in-one SASE platform” Perplexity Sonar · SASE · budget prompt · soft negative
“it's more of an SSE/security tool than a full converged SASE platform” DeepSeek V4 Flash · SASE · budget prompt · soft negative

Named alongside

The products named in the same answers as Cisco Umbrella, over the 31 answers that named it. Took the first choice instead counts the answers where the other product was the first choice and Cisco Umbrella was named but was not.
ProductSame answerTook the first choice insteadHead to head
Cloudflare One21 of 3111Not in the top three
Zscaler Zero Trust Exchange14 of 310Not in the top three
Fortinet FortiSASE13 of 310Not in the top three
Cato SASE Cloud8 of 316Not in the top three
Palo Alto Networks Prisma SASE8 of 310Not in the top three
Cato Networks7 of 313Not in the top three
NordLayer6 of 311Not in the top three
Check Point Harmony SASE6 of 310Not in the top three
Netskope One6 of 310Not in the top three
Forcepoint ONE4 of 310Not in the top three
A head-to-head page exists where both products are in a category's top three. The other rows are the same fact without a page behind them, so they link to the product instead.

What carried it into the answer

The sites and pages cited by the answers that named Cisco Umbrella. A fact about retrieval, not a lever on the model.

Citations exist only for the models that return a source list, four of the twelve in this edition, so these counts come from 25 of the 31 answers that named Cisco Umbrella and are not a share of its labels.

Domains cited

costbench.com23
pickmysoft.com16
techrepublic.com13
blog.openvpn.net12
viewpointanalysis.com12
cybervendorguide.com11
esecurityplanet.com10
gartner.com10
sase.cloud9
jimber.io8

124 of the 124 domain citations in answers naming Cisco Umbrella came from somebody else's page.

Pages cited

Pages are listed as the models cited them.

Names read as Cisco Umbrella

What the judge wrote, as written, with how often. The vendor table decides that these count as Cisco Umbrella; a claim can dispute any of them.
Cisco Umbrella (Free Demo) 1
Is this your product?

Claim this page

Claiming is free and changes nothing in the data. A claimed page shows a verified contact who is told when each edition publishes and when Cisco Umbrella's standing changes by more than the noise floor; the right to propose corrections to the vendor table, meaning names the judge wrote that should or should not read as Cisco Umbrella, applied by version and listed in the change log; and a one-line description supplied by the vendor and marked as such.

It does not get any change to labels, shares or verdicts, any preview, or any say over which quotes appear. A verification link goes to your work email; an address at cisco.com is approved on the spot, any other address is reviewed by hand.

Your name and company appear on the claimed page, or the company alone if you ask below. A title and a LinkedIn address appear there too if you give them, and are left off if you do not. Your email address is never published.

Subscribe to the pack