The most visible vulnerability scanners in France, October 2026

October 2026 · 15 questions asked from France in French and English · ChatGPT, Google AI Overviews, Gemini and Google AI Mode · 60 answers read

Leader

OWASP ZAP

39Heralded Score, range 33–49

Most cited source

owasp.org

29citations

From Google AI Overviews and ChatGPT

Where engines disagree most

Aikido Security

1/4engines put it in their top three

Top three on Google AI Overviews, not on Google AI Mode, Gemini and ChatGPT

Brands

Search is not measured for this board yet, so it ranks on AI answers.

Rank Brand Rank change Heralded Score All AI Score trend Mentioned Recommended By engine Mentioned by Change
– Fluid Attacks CO Unranked Too few answers Not measured
–
  • : Unranked
2% 0% None First reading
– Holm Security SE Unranked Too few answers Not measured
–
  • : Unranked
0% 0% None First reading
– Intruder GB Unranked Too few answers Not measured
–
  • : Unranked
0% 0% None First reading
– Invicti GB Unranked Too few answers Not measured
–
  • : Unranked
1% 0% None First reading
– MobSF IN Unranked Too few answers Not measured
–
  • : Unranked
2% 2% None First reading
– Nikto US Unranked Too few answers Not measured
–
  • : Unranked
2% 2% First reading
– Nmap US Unranked Too few answers Not measured
–
  • : Unranked
4% 2% First reading
– Nuclei US Unranked Too few answers Not measured
–
  • : Unranked
3% 1% First reading
– Orca Security IL Unranked Too few answers Not measured
–
  • : Unranked
1% 0% First reading
– Pentest-Tools.com RO Unranked Too few answers Not measured
–
  • : Unranked
0% 0% None First reading

“=” marks brands whose score ranges overlap, so the test cannot separate them. Every brand named in at least three answers is ranked. AI gives each brand’s score and rank from the engines’ answers; Search is not measured for this board yet. By engine has one dot per engine (ChatGPT, Google AI Overviews, Gemini and Google AI Mode), darker the more often it names the brand.

Most cited sources

Rank Source Type Cited in Engines Pages cited Brands its pages mention
1 owasp.org Reference 18.3% 2 of 4 23 Not read
2 nist.gov Regulator 11.7% 1 of 4 13 Not read
3 owasp.github.io Community 11.7% 1 of 4 13 2
4 youtube.com Social 13.3% 2 of 4 12 Not read
5 fortinet.com Vendor site 11.7% 2 of 4 4 1
6 reddit.com Community 10.0% 3 of 4 6 Not read
7 tuxcare.com Vendor site 8.3% 3 of 4 3 8
8 defectdojo.com Vendor site 1.7% 1 of 4 5 Not read
9 first.org Community 1.7% 1 of 4 5 Not read
10 semgrep.dev Vendor site 6.7% 1 of 4 4 Not read

Questions asked

QuestionLanguageMost recommended
Quel scanner de vulnérabilités une équipe de sécurité devrait-elle utiliser pour détecter les failles logicielles ? French Greenbone OpenVAS
Quel outil peut analyser nos applications pour détecter les vulnérabilités ? French OWASP ZAP and Snyk, tied
Comment les petites équipes d’ingénierie peuvent-elles analyser leur code pour y détecter des vulnérabilités ? French OWASP ZAP
Qu’est-ce qui peut aider les développeurs à détecter les vulnérabilités avant la mise en production ? French No brand recommended
Comment détecter les vulnérabilités dans l’ensemble de nos applications ? French No brand recommended
Comment détecter les failles de sécurité dans le code avant le déploiement ? French No brand recommended
Comment mon équipe peut-elle détecter et prioriser les vulnérabilités logicielles ? French No brand recommended
Comment vérifier si notre logiciel présente des vulnérabilités connues ? French Nikto, Nmap, OWASP ZAP and Trivy, tied
Faut-il analyser le code source ou les applications en cours d’exécution pour détecter les vulnérabilités ? French No brand recommended
Qu’est-ce qui fonctionne le mieux pour détecter les failles : les revues manuelles ou les analyses automatisées ? French No brand recommended

Each engine's top three

Google AI Mode

No brand named in at least three answers.

Method

Each leaderboard ranks brands on two sides. AI is how ChatGPT, Gemini, Google AI Overviews and Google AI Mode answer the board's buyer questions. Search is Google's top 10 results for the keywords behind those questions. All combines the two, where Search is measured.

For the AI side, each month Heralded asks every engine the same buyer questions, twice each, and reads every answer. An answer counts 0 for a brand it leaves out, 50 for a brand it names and 100 for a brand it recommends, and the Heralded Score is built from those. A brand named in at least three answers gets a score and a place.

How the leaderboards are measured