Every category where a model named Vectra AI for a mid-market B2B company. Share is first choices across the direct, paraphrase, budget and scale prompts; rank is within every product named in that category.

Category	Function	Share	Rank	Negative rate	Labels	Quadrant	Since September 2026
Network detection and response	Security operations	18%	2 of 102	14%	36	accepted challenger
AI security platforms	Security operations	0%	56 of 233	0%	3	under 10 labels · led by SentinelOne Singularity at 11%
Identity threat detection and response	Identity and access	0%	43 of 105	0%	2	under 10 labels · led by Huntress Managed ITDR at 51%
Managed detection and response	Security operations	0%	63 of 67	0%	1	under 10 labels · led by Arctic Wolf Managed Detection and Response at 37%	newNew since September 2026: not ranked then, 0% now.
Threat intelligence platforms	Security operations	0%	69 of 119	0%	1	under 10 labels · led by MISP at 12%	newNew since September 2026: not ranked then, 0% now.

Movement

This is the first edition on this tier, so no move can be computed for Vectra AI yet. From the next edition this section shows, per buyer segment and per category, whether its share moved by more than the measured noise floor.

By model

How each model treated Vectra AI across every prompt where it was named for a mid-market B2B company. Fourteen models, six prompts per category.

ShowHide

Model	First choice	Alternative	Mention	Negative	Labels
Claude Haiku 4.5	1	1	0	0	2
GPT-5.4 mini	1	0	1	1	3
Gemini 3.5 Flash	2	2	0	1	5
Perplexity Sonar	1	0	1	1	3
Grok 4.20	4	1	2	1	8
Mistral Small	0	1	0	0	1
DeepSeek V4 Flash	2	0	1	1	4
Llama 4 Maverick	0	1	0	0	1
Qwen 3.7 Flash	1	0	0	0	1
Kimi K2	1	2	2	0	5
GLM 4.7 FlashX	0	2	0	0	2
MiniMax M2.5	1	0	2	0	3
GPT-6 Luna	2	0	0	0	2
Muse Glimmer 30B	1	0	2	0	3

By framing

Which of the six questions produced the naming. By model says how often; this says asked what. The first-choice count on the right carries the marks of the models that produced it.

FramingLabels by classFirst choices

Direct31 labels14

Paraphrase4 labels1

Comparative45 labels14not counted in share

Budget-constrained27 labels2

Scale-constrained15 labels2

Negative27 labels2not counted in share

First choiceAlternativeMentionNegative149 labels in all, every segment counted; 19 of the 35 first choices count toward share, since the comparative and negative framings do not. The bar is one segment per label class, to scale within the framing.

What the models said for it

Verbatim evidence the judge attached to positive labels.

“If your primary concern is catching hackers, insider threats, and lateral movement across your network, Vectra AI is highly recommended.” Gemini 3.5 Flash · NDR · paraphrase prompt · first choice

“First choice: Vectra AI – It gives you the best "bang for the buck" regarding signal quality vs. analyst workload” DeepSeek V4 Flash · NDR · direct prompt · first choice

“Very strong on signal-to-noise ratio and hybrid/cloud coverage; integrates exceptionally well with existing EDRs.” Gemini 3.5 Flash · NDR · scale prompt · first choice

“Vectra AI if you have a small security team and want the platform to do more of the prioritization for you.” GPT-5.4 mini · NDR · direct prompt · first choice

And against it

Verbatim evidence attached to negative labels. A warning on a product with few labels is a warning; on a product with many, it is one voice among them.

“Options to Avoid on a Tight Budget - Darktrace, Vectra AI, ExtraHop” DeepSeek V4 Flash · NDR · budget prompt · hard negative

“No subscription fees, unlike commercial options like Vectra AI, Darktrace, or ExtraHop ($50K–$500K+/year)” Grok 4.20 · NDR · budget prompt · soft negative

“High-end NDR platforms (like Darktrace or Vectra AI) are notoriously expensive, complex” Gemini 3.5 Flash · NDR · budget prompt · soft negative

“tend to be stronger but typically more expensive and more enterprise-oriented” GPT-5.4 mini · NDR · budget prompt · soft negative

Named alongside

The products named in the same answers as Vectra AI, over the 149 answers that named it. Took the first choice instead counts the answers where the other product was the first choice and Vectra AI was named but was not.

ShowHide

ProductSame answerTook the first choice insteadHead to head

Darktrace116 of 1499Compare →

Corelight Open NDR83 of 1495Compare →

ExtraHop RevealX69 of 1494Compare →

Cisco Secure Network Analytics49 of 1492Not among the top eight

ExtraHop Reveal28 of 1493Compare →

Security Onion23 of 14916Not among the top eight

Fortinet FortiNDR21 of 1490Not among the top eight

Trellix NDR21 of 1490Not among the top eight

SentinelOne Singularity15 of 1491Not among the top eight

Trend Vision One15 of 1490Not among the top eight

A head-to-head page exists where both products are among a category's top eight. The other rows are the same fact without a page behind them, so they link to the product instead.

What carried it into the answer

The sites and pages cited by the answers that named Vectra AI. A fact about retrieval, not a lever on the model.

Citations exist only for the models that return a source list, five of the fourteen in this edition, so these counts come from 144 of the 149 answers that named Vectra AI and are not a share of its labels.

Domains cited

comparitech.com75

vectra.aiYour site69

g2.com64

cybersecuritynews.com60

gartner.com57

ciopages.com46

devopsschool.com45

guideflow.com44

myhospitalnow.com37

zenarmor.com37

465 of the 534 domain citations in answers naming Vectra AI came from somebody else's page.

Pages cited

comparitech.com/net-admin/network-detection-response-software75

cybersecuritynews.com/best-ndr-solutions51

ciopages.com/buyer-guides/network-detection-response46

gartner.com/reviews/market/network-detection-and-response41

g2.com/categories/network-detection-and-response-ndr37

guideflow.com/blog/network-detection-and-response-software37

zenarmor.com/docs/network-security-tutorials/best-10-network-detection-and-response-ndr-to37

dupple.com/blog/network-security-monitoring-tools28

Pages are listed as the models cited them.

Search and answers

vectra.ai ranks 4 on Google for the category's searches. In the answers, Vectra AI takes 18% of first choices and ManageEngine NetFlow Analyzer takes 21%.

ShowHide

In search

Google, US estimates

Position for “ndr platform”

Position for “ndr platforms”

–

not in the top ten

Searches for its name, Google: 1,900 a month (“vectra ai”)
AI search demand for its name, est.: 138 a month
Its company's site: vectra.ai shared with Vectra's other products; the figures are the site's
Organic visits to its site: about 56,480 a month
Searches its site ranks for: 5,225 · 300 in the top three
Sites linking to it: 5,506
Paid Google search: 1 searches its ads show for, about 4 clicks and $273 a month (estimate)

Ads on GoogleDetailLess

39 ads · 39 text · 3 shown in the last 30 days

First shown December 2024, as Vectra AI, Inc., verified. Ads started 2025-11 to 2026-10: 11 in the year, 28 before.

On Google's pages: 1 2 3 4

In answers

This edition

Share of first choices

18%

rank 2 of 102 in NDR

Segment leader

21%

ManageEngine NetFlow Analyzer

First choices: 19 across its categories
Named in: 149 answers
Its own site cited: in 144 of the answers that named it

Search figures are US estimates from DataForSEO, read October 5, 2026; AI search demand is its modeled, directional estimate, not a count of queries to any assistant. The answers are this edition's. Two measurements side by side: neither is read as the cause of the other.

Names read as Vectra AI

What the judge wrote, as written, with how often. The vendor table decides that these count as Vectra AI; a claim can dispute any of them.

Vectra 7Vectra AI (Cognito platform) 1Vectra AI (Vectra Cognito) 1

Follow Vectra AI

An email the morning each edition publishes: where this product moved, where it held, and by how much against the noise floor. One address, confirmed by a click; a stop link in every email.

Already following? Everything you follow, with a stop for each.

The company

Vectra is the company behind Vectra AI.

ShowHide

On record

Company records

Also from Vectra: Vectra AI Cognito, Vectra AI ITDR

In its own words

Stated by the vendor, not checked

Positioning: Calling all defenders!
vectra.ai/vectra-ai-cyber-cinema
For: defenders
vectra.ai/vectra-ai-cyber-cinema
Price stated: Vectra AI publishes its licensing model, not prices vectra.ai/topics/vectra-ai-competitors
Certifications: FedRAMP High authorization
Customers named: SFS Group
Not stated on the pages read: Starting price, free plan or trial, integrations, hosting

What Vectra AI's own pages state, read October 5, 2026: vectra.ai/vectra-ai-cyber-cinema, vectra.ai/topics/vectra-ai-competitors, vectra.ai/resources/vectra-ai-services, vectra.ai/resources/inside-vectra-ai-platform, vectra.ai/resources/understanding-vectra-ai-detections. A claimed page can correct any of them.

Is this your product?

Claim this page

Claiming is free and changes nothing in the data. A claimed page shows a verified contact who is told when each edition publishes and when Vectra AI's standing changes by more than the noise floor; the right to propose corrections to the vendor table, meaning names the judge wrote that should or should not read as Vectra AI, applied by version and listed in the change log; and a one-line description supplied by the vendor and marked as such.

What a new claim receivesHide what a new claim receives

A new claim receives the current edition's vendor brief for Vectra AI by email, built from the raw record of the edition. It shows:

where Vectra AI is named, by buyer and by framing, and which cells hold its first choices;
the claims the models make when they name it, ranked, with the strongest and the weakest quoted;
its vocabulary against the segment leader's, and the pages the models cited;
who was chosen in the answers that did not name Vectra AI, and every reason the record gives;
a battlecard for each top rival: the head-to-head split, why they win, and the reservation quoted against them;
one page of published figures cleared to show a buyer.

Badges

Wins only: a badge exists where Vectra AI is ranked in a category's top three this edition. Three sizes, one file each, light and dark; the code is under each.

ShowHide

Vectra AI is among the products AI models recommend first in Network detection and response this edition. Each badge says so in the buyer's words, names the edition, and links to the standing. The next edition issues a new badge; this one stays true as a record of October 2026.

Wide · 320 × 104 Website, beside other badges

Show the code

<a href="https://it-ai-index.com/security/network-detection-and-response/"><img src="https://it-ai-index.com/badges/2026-10/vectra-ai--network-detection-and-response-wide.svg" alt="Among AI models' top three in Network detection and response, October 2026 Edition, IT AI Recommendation Index" width="320" height="104"></a>

Copy the code as it is. The link is part of the badge: it points at the Network detection and response standing, where the claim can be checked.

Square · 240 × 240 LinkedIn, slides

Show the code

<a href="https://it-ai-index.com/security/network-detection-and-response/"><img src="https://it-ai-index.com/badges/2026-10/vectra-ai--network-detection-and-response-square.svg" alt="Among AI models' top three in Network detection and response, October 2026 Edition, IT AI Recommendation Index" width="240" height="240"></a>

Copy the code as it is. The link is part of the badge: it points at the Network detection and response standing, where the claim can be checked.

Compact · 200 × 56 Email signature, footer

Show the code

<a href="https://it-ai-index.com/security/network-detection-and-response/"><img src="https://it-ai-index.com/badges/2026-10/vectra-ai--network-detection-and-response-compact.svg" alt="Among AI models' top three in Network detection and response, October 2026 Edition, IT AI Recommendation Index" width="200" height="56"></a>

Copy the code as it is. The link is part of the badge: it points at the Network detection and response standing, where the claim can be checked.

Badges read on light and dark pages. Alt text carries the claim, the category, the edition and the index, so it stays a citation where the image does not load.