Heralded
Start free trial
Heralded

The most visible vulnerability scanners, October 2026

October 2026 · 15 questions asked in English, worldwide · ChatGPT, Google AI Overviews, Gemini and Google AI Mode · 120 answers read

Leader

Snyk

38%of answers name it

Most cited source

owasp.org

66citations

From Google AI Mode, Google AI Overviews and ChatGPT

Where engines disagree most

Burp Suite

1/4engines put it in their top three

Top three on Gemini, not on Google AI Mode, Google AI Overviews and ChatGPT

Brands

Rank Brand Rank change Heralded Score Score trend Mentioned Recommended By engine Mentioned by Change
= 11 Greenbone OpenVAS DE New entry 3 , range 2–9
3
  • : score 3 · #11
 4% 0% None First reading
= 11 Pentest-Tools.com RO New entry 3 , range 2–9
3
  • : score 3 · #11
 4% 0% None First reading
13 Invicti GB New entry 3 , range 1–9
3
  • : score 3 · #13
 4% 0% None First reading
14 Orca Security IL New entry 2 , range 1–7
2
  • : score 2 · #14
 2% 1% First reading
15 Nuclei US New entry 2 , range 1–7
2
  • : score 2 · #15
 2% 0% None First reading
– Aqua Security IL Unranked Too few answers
–
  • : Unranked
 1% 0% First reading
– AWS Inspector US Unranked Too few answers
–
  • : Unranked
 1% 0% None First reading
– Clair US Unranked Too few answers
–
  • : Unranked
 1% 0% None First reading
– Detectify SE Unranked Too few answers
–
  • : Unranked
 0% 0% None First reading
– Holm Security SE Unranked Too few answers
–
  • : Unranked
 0% 0% None First reading

“=” marks brands whose score ranges overlap, so the test cannot separate them. Every brand named in at least three answers is ranked. By engine has one dot per engine (ChatGPT, Google AI Overviews, Gemini and Google AI Mode), darker the more often it names the brand.

This month's moves

First reading. No comparable previous month yet.

Biggest risers

No clear rise.

Biggest fallers

No clear fall.

Drop-outs

No drop-outs.

Most cited sources

Rank Source Type Cited in Engines Pages cited Brands its pages mention
11 owasp.github.io Community 3.3% 1 of 4 8 1
12Withheld. Run a full Snapshot to see it.
13Withheld. Run a full Snapshot to see it.
14 trivy.dev Brand site 3.3% 2 of 4 6 1
15Withheld. Run a full Snapshot to see it.
16Withheld. Run a full Snapshot to see it.
17Withheld. Run a full Snapshot to see it.
18Withheld. Run a full Snapshot to see it.
19Withheld. Run a full Snapshot to see it.
20Withheld. Run a full Snapshot to see it.

The questions, and who wins each

QuestionLanguageWins it
what vulnerability scanner should a security team use to find software flaws English Burp Suite, Snyk and Tenable Nessus, tied
which tool can scan our applications for security vulnerabilities English OWASP ZAP and Snyk, tied
how do small engineering teams scan code for vulnerabilities English Snyk and Trivy, tied
what can help developers find vulnerabilities before release English No brand recommended
how can i find vulnerabilities across our applications English OWASP ZAP
how do we catch security flaws in code before deployment English OWASP ZAP
how can my team find and prioritize software vulnerabilities English No brand recommended
how do i check whether our software has known vulnerabilities English Trivy
should we scan source code or running applications for vulnerabilities English No brand recommended
what works better for finding flaws, manual reviews or automated scans English No brand recommended

Each engine's top three

Method

Each month Heralded asks every engine the same buyer questions, twice each, and reads every answer. An answer counts 0 for a brand it leaves out, 50 for a brand it names and 100 for a brand it recommends, and the Heralded Score is built from those. A brand named in at least three answers gets a score and a place.

How the leaderboards are measured