Leader
22%of answers name it
The most visible B2C vulnerability scanners, October 2026
Most cited source
66citations
From Google AI Mode, Google AI Overviews and ChatGPT
Where engines disagree most
1/4engines put it in their top three
Top three on Google AI Overviews, not on Google AI Mode, Gemini and ChatGPT
Brands
| Rank | Brand | Heralded Score | Mentioned | Recommended | By engine | Mentioned by | Change |
|---|---|---|---|---|---|---|---|
| 1#2 overall | | 32 , range 20–38 | 22% | 9% | | First reading | |
| 2#3 overall | | 27 , range 10–35 | 18% | 6% | | First reading | |
| 3#4 overall | | 24 , range 9–34 | 19% | 3% | | First reading | |
| 4#5 overall | | 13 , range 6–32 | 13% | 4% | None | First reading | |
| 5#11 overall | | 3 , range 2–9 | 4% | 0% | None | First reading | |
| 6#15 overall | | 2 , range 1–7 | 2% | 0% | None | First reading | |
| – | | Too few answers | 1% | 0% | None | First reading | |
| – | | Too few answers | 1% | 0% | | First reading |
“=” marks brands whose score ranges overlap, so the test cannot separate them. Every brand named in at least three answers is ranked. By engine has one dot per engine (ChatGPT, Google AI Overviews, Gemini and Google AI Mode), darker the more often it names the brand.
Most cited sources
| Rank | Source | Type | Cited in | Engines | Pages cited | Brands its pages mention |
|---|---|---|---|---|---|---|
| 1 | | Brand site | 10.0% | 3 of 4 | 8 | 0 |
| 2 | | Brand site | 3.3% | 2 of 4 | 6 | 0 |
| 3 | Withheld. Run a full Snapshot to see it. | |||||
| 4 | | Brand site | 4.2% | 2 of 4 | 1 | 0 |
| 5 | Withheld. Run a full Snapshot to see it. | |||||
| 6 | Withheld. Run a full Snapshot to see it. | |||||
| 7 | Withheld. Run a full Snapshot to see it. | |||||
| 8 | Withheld. Run a full Snapshot to see it. | |||||
| 9 | Withheld. Run a full Snapshot to see it. | |||||
| 10 |  amazon.com | Brand site | 0.8% | 1 of 4 | 1 | 0 |
The questions, and who wins each
| Question | Language | Wins it |
|---|---|---|
| what vulnerability scanner should a security team use to find software flaws | English | |
| which tool can scan our applications for security vulnerabilities | English | |
| how do small engineering teams scan code for vulnerabilities | English | |
| what can help developers find vulnerabilities before release | English | No brand recommended |
| how can i find vulnerabilities across our applications | English | |
| how do we catch security flaws in code before deployment | English | |
| how can my team find and prioritize software vulnerabilities | English | No brand recommended |
| how do i check whether our software has known vulnerabilities | English | |
| should we scan source code or running applications for vulnerabilities | English | No brand recommended |
| what works better for finding flaws, manual reviews or automated scans | English | No brand recommended |
Each engine's top three
Google AI Mode
- 1
OWASP ZAP
- 2
Trivy
- 3
Burp Suite
Gemini
- 1
- = 2
- = 2
Google AI Overviews
ChatGPT
- 1
- 2
- 3
Related leaderboards
Method
Each month Heralded asks every engine the same buyer questions, twice each, and reads every answer. An answer counts 0 for a brand it leaves out, 50 for a brand it names and 100 for a brand it recommends, and the Heralded Score is built from those. A brand named in at least three answers gets a score and a place.