Every category where a model named Gurucul for a mid-market B2B company. Share is first choices across the direct, paraphrase, budget and scale prompts; rank is within every product named in that category.

Category	Function	Share	Rank	Negative rate	Labels	Quadrant	Since September 2026
Insider risk management	Security operations	0%	26 of 84	18%	11	accepted challenger
SIEM platforms	Security operations	0%	29 of 61	0%	2	under 10 labels · led by Microsoft Sentinel at 38%	newNew since September 2026: not ranked then, 0% now.
Identity threat detection and response	Identity and access	0%	84 of 105	0%	1	under 10 labels · led by Huntress Managed ITDR at 51%

Movement

This is the first edition on this tier, so no move can be computed for Gurucul yet. From the next edition this section shows, per buyer segment and per category, whether its share moved by more than the measured noise floor.

By model

How each model treated Gurucul across every prompt where it was named for a mid-market B2B company. Fourteen models, six prompts per category.

ShowHide

Model	Alternative	Mention	Negative	Labels
Claude Haiku 4.5	0	1	0	1
GPT-5.4 mini	0	1	0	1
Gemini 3.5 Flash	0	1	0	1
Perplexity Sonar	0	0	0	0
Grok 4.1 Fast	0	1	0	1
Mistral Small	1	1	0	2
DeepSeek V4 Flash	0	0	2	2
Llama 4 Maverick	1	0	0	1
Qwen 3.7 Flash	0	0	0	0
Kimi K2	0	0	0	0
GLM 4.7 FlashX	0	0	0	0
MiniMax M2.5	0	0	0	0
GPT-6 Luna	0	0	0	0
Muse Glimmer 30B	1	4	0	5

By framing

Which of the six questions produced the naming. By model says how often; this says asked what. The first-choice count on the right carries the marks of the models that produced it.

FramingLabels by classFirst choices

Direct3 labelsNone

Paraphrase4 labelsNone

Comparative14 labelsNone

Budget-constrained2 labelsNone

Scale-constrained2 labelsNone

Negative5 labelsNone

First choiceAlternativeMentionNegative30 labels in all, every segment counted; 0 of the 0 first choices count toward share, since the comparative and negative framings do not. The bar is one segment per label class, to scale within the framing.

What the models said for it

Verbatim evidence the judge attached to positive labels.

“For broad anomaly detection, UEBA tools like Gurucul or Splunk are best.” Mistral Small · Insider risk · comparative prompt · alternative

“Other options to consider are Code42, DTEX, Securonix, and Gurucul.” Llama 4 Maverick · Insider risk · direct prompt · alternative

“Choose Securonix / Gurucul if you're already SIEM-centric” Muse Glimmer 30B · Insider risk · paraphrase prompt · alternative

And against it

Verbatim evidence attached to negative labels. A warning on a product with few labels is a warning; on a product with many, it is one voice among them.

“Built for large enterprises; overkill and overpriced for mid-sized teams” DeepSeek V4 Flash · Insider risk · paraphrase prompt · hard negative

“these deserve caution because: Cost: Enterprise UEBA platforms can cost six figures annually” DeepSeek V4 Flash · Insider risk · negative prompt · soft negative

Named alongside

The products named in the same answers as Gurucul, over the 30 answers that named it. Took the first choice instead counts the answers where the other product was the first choice and Gurucul was named but was not.

ShowHide

ProductSame answerTook the first choice insteadHead to head

Securonix UEBA17 of 300Not among the top eight

Code42 Incydr15 of 300Not among the top eight

Teramind15 of 300Not among the top eight

DTEX InTERCEPT13 of 301Not among the top eight

Proofpoint Insider Threat Management13 of 301Not among the top eight

Above Security12 of 306Not among the top eight

Microsoft Purview Insider Risk Management11 of 305Not among the top eight

DTEX Systems9 of 300Not among the top eight

Microsoft Purview9 of 300Not among the top eight

Coro8 of 300Not among the top eight

A head-to-head page exists where both products are among a category's top eight. The other rows are the same fact without a page behind them, so they link to the product instead.

What carried it into the answer

The sites and pages cited by the answers that named Gurucul. A fact about retrieval, not a lever on the model.

Citations exist only for the models that return a source list, five of the fourteen in this edition, so these counts come from 30 of the 30 answers that named Gurucul and are not a share of its labels.

Domains cited

insiderisk.io17

gartner.com15

nightfall.ai15

expertinsights.com13

riskpublishing.com13

breachsense.com12

guptadeepak.com12

dtex.ai10

livingsecurity.com9

worldmetrics.org9

No domain is on file for Gurucul, so its own site is not marked.

Pages cited

gartner.com/reviews/market/insider-risk-management-solutions13

insiderisk.io/research/insider-risk-management-vendor-comparison-202513

insiderisk.io/research/insider-threat-detection-solutions-technologies-202513

nightfall.ai/blog/top-10-insider-risk-management-products-of-202413

riskpublishing.com/best-insider-threat-management-software-compare13

insiderisk.io/research/best-insider-risk-management-tools-202611

breachsense.com/blog/insider-threat-detection-software10

expertinsights.com/data-security-and-privacy/the-top-insider-threat-detection-solutions10

Pages are listed as the models cited them.

Search and answers

Where Gurucul stands in Google search beside where it stands in the models' answers.

ShowHide

In search

Google, US estimates

Searches for its name, Google: 880 a month (“gurucul”)
AI search demand for its name, est.: 8 a month
Its own site: No site of its own on file, so no site figures

In answers

This edition

Share of first choices

rank 26 of 84 in insider risk

Segment leader

22%

Microsoft Purview Insider Risk Management

First choices: 0 across its categories
Named in: 30 answers
Its own site cited: No site on file to match

Search figures are US estimates from DataForSEO, read October 5, 2026; AI search demand is its modeled, directional estimate, not a count of queries to any assistant. The answers are this edition's. Two measurements side by side: neither is read as the cause of the other.

Follow Gurucul

An email the morning each edition publishes: where this product moved, where it held, and by how much against the noise floor. One address, confirmed by a click; a stop link in every email.

Already following? Everything you follow, with a stop for each.

Is this your product?

Claim this page

Claiming is free and changes nothing in the data. A claimed page shows a verified contact who is told when each edition publishes and when Gurucul's standing changes by more than the noise floor; the right to propose corrections to the vendor table, meaning names the judge wrote that should or should not read as Gurucul, applied by version and listed in the change log; and a one-line description supplied by the vendor and marked as such.

What a new claim receivesHide what a new claim receives

A new claim receives the current edition's vendor brief for Gurucul by email, built from the raw record of the edition. It shows:

where Gurucul is named, by buyer and by framing, and which cells hold its first choices;
the claims the models make when they name it, ranked, with the strongest and the weakest quoted;
its vocabulary against the segment leader's, and the pages the models cited;
who was chosen in the answers that did not name Gurucul, and every reason the record gives;
a battlecard for each top rival: the head-to-head split, why they win, and the reservation quoted against them;
one page of published figures cleared to show a buyer.