# Grype + Syft: how AI models rank it, September 2026

IT AI Recommendation Index, September 2026 Edition. Named in 3 judge labels across 2 categories by 2 of 12 models. Page: https://it-ai-index.com/vendors/grype-syft/

## Standing by category

| Category | Share | Rank | Negative rate | Labels |
|---|---|---|---|---|
| Software composition analysis | 0% | 25 | 0% | 2 |
| Container and Kubernetes security | 0% | 35 | 0% | 1 |

## What the models said for it

- "Syft generates Software Bills of Materials (SBOMs); Grype scans them for vulnerabilities" (Kimi K2, Container security)
- "These two tools are designed to work together to secure your software supply chain." (Gemini 3.5 Flash, SCA)
- "with Grype + Syft as a strong alternative depending on your stack" (Kimi K2, SCA)

## Record

- Method: https://it-ai-index.com/methodology/
- Raw judge labels and full responses: https://it-ai-index.com/data/
- License: CC BY 4.0. Cite as IT AI Recommendation Index, September 2026 Edition, it-ai-index.com.