| Category | Function | Share | Rank | Negative rate | Labels | Quadrant |
|---|---|---|---|---|---|---|
| Next-generation firewalls | Network and edge | 0% | 22 of 100 | 0% | 7 | under 10 labels · led by Fortinet FortiGate at 61% |
| Extended detection and response | Security operations | 0% | 61 of 61 | 67% | 6 | under 10 labels · led by Microsoft Defender XDR at 63% |
| Zero trust network access | Network and edge | 0% | 69 of 71 | 67% | 3 | under 10 labels · led by Cloudflare One at 35% |
| Endpoint protection | IT operations and endpoint | 0% | 64 of 99 | 50% | 2 | under 10 labels · led by Microsoft Defender for Cloud at 22% |
| Attack surface management | Security operations | 0% | 80 of 104 | 0% | 1 | under 10 labels · led by Intruder at 59% |
| SOAR platforms | Security operations | 0% | 40 of 49 | 0% | 1 | under 10 labels · led by Tines at 47% |
| Model | First choice | Alternative | Mention | Negative | Labels |
|---|---|---|---|---|---|
| Claude Haiku 4.5 | 0 | 0 | 0 | 0 | 0 |
| GPT-5.4 mini | 0 | 0 | 1 | 0 | 1 |
| Gemini 3.5 Flash | 0 | 0 | 1 | 0 | 1 |
| Perplexity Sonar | 0 | 0 | 0 | 1 | 1 |
| Grok 4.1 Fast | 0 | 0 | 3 | 2 | 5 |
| Mistral Small | 0 | 0 | 1 | 1 | 2 |
| DeepSeek V4 Flash | 0 | 1 | 1 | 0 | 2 |
| Llama 4 Maverick | 0 | 0 | 0 | 0 | 0 |
| Qwen 3.7 Flash | 0 | 0 | 3 | 1 | 4 |
| Kimi K2 | 0 | 0 | 0 | 2 | 2 |
| GLM 4.7 FlashX | 0 | 0 | 2 | 0 | 2 |
| MiniMax M2.5 | 0 | 0 | 0 | 0 | 0 |
Verbatim evidence the judge attached to positive labels.
“look elsewhere (Palo Alto, Check Point, or Juniper have better security track records in the near-term)” DeepSeek V4 Flash · Firewalls · negative prompt · alternative
Verbatim evidence attached to negative labels. A warning on a product with few labels is a warning; on a product with many, it is one voice among them.
“Enterprise-heavy like Zscaler/Palo Alto? Avoid—custom pricing often $15+/user, no free tiers.” Grok 4.1 Fast · ZTNA · budget prompt · hard negative
“buying a native XDR platform (such as those from CrowdStrike, Palo Alto, Microsoft, ...) and then trying to feed it third-party logs through generic connectors” Mistral Small · XDR · negative prompt · soft negative
“Full enterprise suites (like Palo Alto or Zscaler) are often prohibitively expensive and complex for smaller organizations.” Qwen 3.7 Flash · ZTNA · budget prompt · soft negative
“Palo Alto and CrowdStrike are strongest in their own ecosystems; outside those contexts, fit can be much weaker.” Perplexity Sonar · XDR · negative prompt · soft negative
Citations exist only for the models that return a source list, four of the twelve in this edition, so these counts come from 48 of the 56 answers that named Palo Alto and are not a share of its labels.
153 of the 153 domain citations in answers naming Palo Alto came from somebody else's page.
Pages are listed as the models cited them.
Claiming is free and changes nothing in the data. A claimed page shows a verified contact who is told when each edition publishes and when Palo Alto's standing changes by more than the noise floor; the right to propose corrections to the vendor table, meaning names the judge wrote that should or should not read as Palo Alto, applied by version and listed in the change log; and a one-line description supplied by the vendor and marked as such.
It does not get any change to labels, shares or verdicts, any preview, or any say over which quotes appear. A verification link goes to your work email; an address at paloalto.com is approved on the spot, any other address is reviewed by hand.
Your name and company appear on the claimed page, or the company alone if you ask below. A title and a LinkedIn address appear there too if you give them, and are left off if you do not. Your email address is never published.