# Security Onion: how AI models rank it, September 2026

IT AI Recommendation Index, September 2026 Edition. Named in 4 judge labels across 1 categories by 4 of 12 models. Page: https://it-ai-index.com/vendors/security-onion/

## Standing by category

| Category | Share | Rank | Negative rate | Labels |
|---|---|---|---|---|
| SIEM platforms | 0% | 18 | 25% | 4 |

## What the models said for it

- "Threat hunting, network monitoring, Suricata/Zeek integration | Free (open-source)" (Grok 4.1 Fast, SIEM)
- "Free | Network-focused SOCs (built on Elastic, includes Suricata/Zeek)" (DeepSeek V4 Flash, SIEM)

## And against it

- "Very heavy resource use; high operational overhead" (GLM 4.7 FlashX, SIEM)

## Record

- Method: https://it-ai-index.com/methodology/
- Raw judge labels and full responses: https://it-ai-index.com/data/
- License: CC BY 4.0. Cite as IT AI Recommendation Index, September 2026 Edition, it-ai-index.com.