Leader
22%of answers name it
The most visible B2C vulnerability scanners, October 2026
Most cited source
66citations
From Google AI Mode, Google AI Overviews and ChatGPT
Where engines disagree most
1/4engines put it in their top three
Top three on Google AI Overviews, not on Google AI Mode, Gemini and ChatGPT
Brands
| Rank | Brand | Heralded Score | Mentioned | Recommended | By engine | Mentioned by | Change |
|---|---|---|---|---|---|---|---|
| 1#2 overall | | 32 , range 20–38 | 22% | 9% | | First reading | |
| 2#3 overall | | 27 , range 10–35 | 18% | 6% | | First reading | |
| 3#4 overall | | 24 , range 9–34 | 19% | 3% | | First reading | |
| 4#5 overall | | 13 , range 6–32 | 13% | 4% | | First reading | |
| 5#11 overall | | 3 , range 2–9 | 4% | 0% | | First reading | |
| 6#15 overall | | 2 , range 1–7 | 2% | 0% | | First reading | |
| – | | Too few answers | 1% | 0% | | First reading | |
| – | | Too few answers | 1% | 0% | | First reading |
“=” marks brands whose score ranges overlap, so the test cannot separate them. Every brand named in at least three answers is ranked. By engine has one dot per engine (ChatGPT, Google AI Overviews, Gemini and Google AI Mode), darker the more often it names the brand.
Most cited sources
| Rank | Source | Type | Cited in | Engines | Pages cited | Brands its pages mention |
|---|---|---|---|---|---|---|
| 1 | | Community | 21.7% | 3 of 4 | 32 | 5 |
| 2 | | Community | 9.2% | 2 of 4 | 10 | 4 |
| 3 | | Community | 3.3% | 1 of 4 | 8 | 0 |
| 4 | | Community | 4.2% | 1 of 4 | 5 | 0 |
| 5 | | Community | 3.3% | 1 of 4 | 3 | 0 |
| 6 | Withheld. Run a full Snapshot to see it. | |||||
| 7 | | Community | 1.7% | 1 of 4 | 2 | 0 |
| 8 | Withheld. Run a full Snapshot to see it. | |||||
| 9 | | Community | 0.8% | 1 of 4 | 1 | 0 |
| 10 | | Community | 0.8% | 1 of 4 | 1 | 0 |
The questions, and who wins each
| Question | Language | Wins it |
|---|---|---|
| how do application scans compare with dependency checks for finding vulnerabilities | English | No brand recommended |
| should developers or security teams own vulnerability scanning | English | No brand recommended |
| what can replace manual security checks before each software release | English | No brand recommended |
| how can we replace spreadsheets for tracking software vulnerabilities | English | |
| what can replace separate scanners for code and dependencies | English | No brand recommended |
Each engine's top three
Google AI Mode
- 1
OWASP ZAP
- 2
Trivy
- 3
Burp Suite
Gemini
- 1
- = 2
- = 2
Google AI Overviews
ChatGPT
- 1
- 2
- 3
Related leaderboards
Method
Each month Heralded asks every engine the same buyer questions, twice each, and reads every answer. An answer counts 0 for a brand it leaves out, 50 for a brand it names and 100 for a brand it recommends, and the Heralded Score is built from those. A brand named in at least three answers gets a score and a place.