The most visible vulnerability scanners in Germany, October 2026

October 2026 · 15 questions asked from Germany in German and English · ChatGPT, Google AI Overviews, Gemini and Google AI Mode · 60 answers read

Leader

Snyk

30Heralded Score, range 21–58

Most cited source

computerweekly.com

3citations

From Google AI Mode and Google AI Overviews

Where engines disagree most

Burp Suite

1/4engines put it in their top three

Top three on Gemini, not on Google AI Mode, Google AI Overviews and ChatGPT

Brands

Rank Brand Rank change Heralded Score All AI Search Score trend Mentioned Recommended By engine Mentioned by Change
1 Snyk GB New entry 30 , range 21–58 40#1 13#5
30
  • : score 30 · #1
23% 10% First reading
2 OWASP ZAP US New entry 27 , range 20–57 39#2 6#13
27
  • : score 27 · #2
22% 8% None First reading
3 Trivy IL New entry 25 , range 19–56 36#3 6#14
25
  • : score 25 · #3
22% 5% None First reading
4 Greenbone OpenVAS DE New entry 23 , range 2–50 9#6 47#1
23
  • : score 23 · #4
9% 5% None First reading
5 Burp Suite GB New entry 23 , range 7–52 32#4 8= #11
23
  • : score 23 · #5
15% 4% None First reading
6 Tenable Nessus US New entry 20 , range 2–49 8#7 40#2
20
  • : score 20 · #6
9% 4% None First reading
7 Qualys US New entry 9 , range 1–41 3#12 19#3
9
  • : score 9 · #7
4% 1% None First reading
8 Tenable Vulnerability Management US New entry 8 , range 2–48 10#5 5#15
8
  • : score 8 · #8
6% 4% None First reading
9 Veracode US New entry 6 , range 1–45 5#9 8= #9
6
  • : score 6 · #9
4% 1% None First reading
10 Aqua Security IL New entry 4 , range 1–46 5#8 2#23
4
  • : score 4 · #10
4% 1% First reading

“=” marks brands whose score ranges overlap, so the test cannot separate them. Every brand named in at least three answers is ranked. AI and Search give each brand’s score and rank on that side alone. By engine has one dot per engine (ChatGPT, Google AI Overviews, Gemini and Google AI Mode), darker the more often it names the brand.

Most cited sources

Rank Source Type Cited in Engines Pages cited Brands its pages mention
1 computerweekly.com Media 5.0% 2 of 4 2 2
2 devops.com Media 1.7% 1 of 4 2 Not read
3 computerwoche.de Media 1.7% 1 of 4 1 Not read
4 helpnetsecurity.com Media 1.7% 1 of 4 1 Not read
5 it-daily.net Media 1.7% 1 of 4 1 Not read
6 kes-informationssicherheit.de Media 1.7% 1 of 4 1 Not read
7 netzpalaver.de Media 1.7% 1 of 4 1 Not read
8 security-insider.de Media 1.7% 1 of 4 1 Not read
9 techradar.com Media 1.7% 1 of 4 1 Not read
10 vulnerabilityinstitute.org Media 1.7% 1 of 4 1 Not read

Questions asked

QuestionLanguageMost recommended
Welchen Schwachstellenscanner sollte ein Sicherheitsteam nutzen, um Sicherheitslücken in Software zu finden? German Snyk and Trivy, tied
Welches Tool kann unsere Anwendungen auf Sicherheitslücken prüfen? German Burp Suite, OWASP ZAP and Snyk, tied
Wie können kleine Engineering-Teams ihren Code auf Sicherheitslücken prüfen? German OWASP ZAP
Was hilft Entwicklern, Sicherheitslücken vor dem Release zu finden? German No brand recommended
Wie kann ich Sicherheitslücken in unseren Anwendungen finden? German OWASP ZAP, Snyk and Trivy, tied
Wie erkennen wir Sicherheitslücken im Code vor dem Deployment? German No brand recommended
Wie kann mein Team Softwareschwachstellen finden und priorisieren? German Greenbone OpenVAS
Wie kann ich prüfen, ob unsere Software bekannte Sicherheitslücken enthält? German No brand recommended
Sollten wir den Quellcode oder laufende Anwendungen auf Sicherheitslücken scannen? German No brand recommended
Was eignet sich besser, um Sicherheitslücken zu finden: manuelle Reviews oder automatisierte Scans? German No brand recommended

Each engine's top three

Google AI Mode

No brand named in at least three answers.

Method

Each leaderboard ranks brands on two sides. AI is how ChatGPT, Gemini, Google AI Overviews and Google AI Mode answer the board's buyer questions. Search is Google's top 10 results for the keywords behind those questions. All combines the two, where Search is measured.

For the AI side, each month Heralded asks every engine the same buyer questions, twice each, and reads every answer. An answer counts 0 for a brand it leaves out, 50 for a brand it names and 100 for a brand it recommends, and the Heralded Score is built from those. A brand named in at least three answers gets a score and a place.

How the leaderboards are measured