IT AI Index
Index Vendors › Intruder · September 2026 Edition
3 categories · Ranked

Intruder

184Judge labels
87First choices
9Negative labels
12 of 12Models named it
3Categories
September 2026 Edition. Every number here is derived from the raw labels under vendor table vv2026-09.2, every buyer segment counted.
Best standing
59% in ASM for mid-market buyers
Rank 1 of 104 in the mid-market standingendorsed leader
9 of 12 models made it the first choice on the direct prompt; 3% of its 32 labels there were negative.
By buyer segmentA small-business product: leader at small business, not named at enterprise.
In asm · each standing computed within its segment · bars are 0 to 100 · the accent bar is the product's own best reading

Standing by category

Every category where a model named Intruder for a mid-market B2B company. Share is first choices across the direct, paraphrase, budget and scale prompts; rank is within every product named in that category.
CategoryFunctionShareRankNegative rateLabelsQuadrant
Attack surface managementSecurity operations59%1 of 1043%32endorsed leader
Vulnerability management platformsSecurity operations16%2 of 800%19accepted challenger
Penetration testing as a serviceSecurity operations0%21 of 7625%8under 10 labels · led by Cobalt at 44%

Movement

This is the first edition on this tier, so no move can be computed for Intruder yet. From the next edition this section shows, per buyer segment, whether its share moved by more than the measured noise floor.

By model

How each model treated Intruder across every prompt where it was named for a mid-market B2B company. Twelve models, six prompts per category.
ModelFirst choiceAlternativeMentionNegativeLabels
Claude Haiku 4.520002
GPT-5.4 mini10001
Gemini 3.5 Flash42006
Perplexity Sonar31116
Grok 4.1 Fast32005
Mistral Small43007
DeepSeek V4 Flash33118
Llama 4 Maverick30205
Qwen 3.7 Flash21014
Kimi K222105
GLM 4.7 FlashX31004
MiniMax M2.542006

By framing

Which of the six questions produced the naming. By model says how often; this says asked what. The first-choice count on the right carries the marks of the models that produced it.
FramingLabels by classFirst choices
Direct39 labels27
Paraphrase35 labels26
Comparative36 labels19not counted in share
Budget-constrained45 labels26
Scale-constrained8 labels8
Negative21 labels14not counted in share
First choiceAlternativeMentionNegative184 labels in all, every segment counted; 87 of the 120 first choices count toward share, since the comparative and negative framings do not. The bar is one segment per label class, to scale within the framing.

What the models said for it

Verbatim evidence the judge attached to positive labels.

“Best value paid option: Intruder is frequently recommended for SMBs due to transparent pricing, comprehensive features, and a free tier that actually works” MiniMax M2.5 · ASM · budget prompt · first choice
“The "Lean Security" Pick: Intruder ... Best for: Companies with small security/IT teams who need simple, automated, and continuous vulnerability scanning.” Gemini 3.5 Flash · Vuln management · paraphrase prompt · first choice
“Intruder is especially noted for its automation and suitability for the mid-market, making it a strong recommendation for most organizations in this category.” Mistral Small · ASM · paraphrase prompt · first choice
“Intruder is the safest all-around pick (transparent pricing, built for teams without dedicated security staff, strong SMB fit)” DeepSeek V4 Flash · ASM · budget prompt · first choice

And against it

Verbatim evidence attached to negative labels. A warning on a product with few labels is a warning; on a product with many, it is one voice among them.

“External tools (like Intruder or Detectify) focus on what the *internet* sees. Avoid using these if your primary goal is managing internal corporate network exposure” Qwen 3.7 Flash · ASM · negative prompt · soft negative
“Intruder-style PTaaS tools can be cheaper, but they are not a substitute for a full penetration test” Perplexity Sonar · PTaaS · budget prompt · soft negative
“Intruder does not offer remediation guidance” DeepSeek V4 Flash · PTaaS · comparative prompt · soft negative

Named alongside

The products named in the same answers as Intruder, over the 184 answers that named it. Took the first choice instead counts the answers where the other product was the first choice and Intruder was named but was not.
ProductSame answerTook the first choice insteadHead to head
CyCognito37 of 1840Not in the top three
OpenVAS36 of 1845Not in the top three
Cortex Xpanse33 of 1841Not in the top three
UpGuard BreachSight25 of 1841Not in the top three
Tenable23 of 1844Not in the top three
A head-to-head page exists where both products are in a category's top three. The other rows are the same fact without a page behind them, so they link to the product instead.

What carried it into the answer

The sites and pages cited by the answers that named Intruder. A fact about retrieval, not a lever on the model.

Citations exist only for the models that return a source list, four of the twelve in this edition, so these counts come from 165 of the 184 answers that named Intruder and are not a share of its labels.

Domains cited

upguard.com102
g2.com75
synack.com67
cyberbench.net62
axis-intelligence.com59
techrepublic.com58
attaxion.com47
gartner.com43
intruder.ioYour site43
expertinsights.com36

549 of the 592 domain citations in answers naming Intruder came from somebody else's page.

Pages cited

Pages are listed as the models cited them.

Names read as Intruder

What the judge wrote, as written, with how often. The vendor table decides that these count as Intruder; a claim can dispute any of them.
Intruder EASM 2Intruder.io 2Intruder.io's Free plan 1
Is this your product?

Claim this page

Claiming is free and changes nothing in the data. A claimed page shows a verified contact who is told when each edition publishes and when Intruder's standing changes by more than the noise floor; the right to propose corrections to the vendor table, meaning names the judge wrote that should or should not read as Intruder, applied by version and listed in the change log; and a one-line description supplied by the vendor and marked as such.

It does not get any change to labels, shares or verdicts, any preview, or any say over which quotes appear. A verification link goes to your work email; an address at intruder.io is approved on the spot, any other address is reviewed by hand.

Your name and company appear on the claimed page, or the company alone if you ask below. A title and a LinkedIn address appear there too if you give them, and are left off if you do not. Your email address is never published.

Subscribe to the pack