The most visible vulnerability scanners in Italy, October 2026

October 2026 · 15 questions asked from Italy in Italian and English · ChatGPT, Google AI Overviews, Gemini and Google AI Mode · 60 answers read

Most cited source

owasp.org

48citations

From Google AI Mode, Google AI Overviews and ChatGPT

Where engines disagree most

OWASP ZAP

1/4engines put it in their top three

Top three on ChatGPT, not on Google AI Mode, Gemini and Google AI Overviews

Brands

Rank Brand Rank change Heralded Score All AI Search Score trend Mentioned Recommended By engine Mentioned by Change
11 Acunetix MT New entry 3 , range 1–39 3#11 2= #12
3
  • : score 3 · #11
3% 0% None First reading
– Aikido Security BE Unranked Too few answers Not measured 2= #9
–
  • : Unranked
2% 0% First reading
– Aqua Security IL Unranked Too few answers Not measured 0= #17
–
  • : Unranked
0% 0% First reading
– AWS Inspector US Unranked Too few answers Not measured 0= #17
–
  • : Unranked
0% 0% First reading
– Balbix US Unranked Too few answers Not measured 21#6
–
  • : Unranked
3% 1% None First reading
– BeyondTrust Vulnerability Management US Unranked Too few answers Not measured 0= #17
–
  • : Unranked
1% 0% None First reading
– Clair US Unranked Too few answers Not measured 0= #17
–
  • : Unranked
2% 1% None First reading
– Detectify SE Unranked Too few answers Not measured 0= #17
–
  • : Unranked
0% 0% None First reading
– Greenbone OpenVAS DE Unranked Too few answers Not measured 48#3
–
  • : Unranked
4% 2% None First reading
– Holm Security SE Unranked Too few answers Not measured 0= #17
–
  • : Unranked
0% 0% None First reading

“=” marks brands whose score ranges overlap, so the test cannot separate them. Every brand named in at least three answers is ranked. AI and Search give each brand’s score and rank on that side alone. By engine has one dot per engine (ChatGPT, Google AI Overviews, Gemini and Google AI Mode), darker the more often it names the brand.

Most cited sources

Rank Source Type Cited in Engines Pages cited Brands its pages mention
1 owasp.org Reference 23.3% 3 of 4 27 5
2 github.com Vendor site 16.7% 1 of 4 15 8
3 nist.gov Regulator 11.7% 1 of 4 8 Not read
4 owasp.github.io Community 10.0% 1 of 4 9 Not read
5 reddit.com Community 10.0% 3 of 4 6 4
6 semgrep.dev Vendor site 8.3% 1 of 4 4 Not read
7 youtube.com Social 5.0% 1 of 4 6 Not read
8 defectdojo.com Vendor site 1.7% 1 of 4 5 Not read
9 fortinet.com Vendor site 6.7% 3 of 4 4 Not read
10 sonarsource.com Vendor site 5.0% 2 of 4 3 Not read

Questions asked

QuestionLanguageMost recommended
Quale scanner di vulnerabilità dovrebbe usare un team di sicurezza per individuare le falle nel software? Italian Trivy
Quale strumento può analizzare le nostre applicazioni alla ricerca di vulnerabilità? Italian OWASP ZAP
Come possono i piccoli team di sviluppo analizzare il codice per individuare vulnerabilità? Italian No brand recommended
Cosa può aiutare gli sviluppatori a individuare le vulnerabilità prima del rilascio? Italian No brand recommended
Come posso individuare le vulnerabilità in tutte le nostre applicazioni? Italian No brand recommended
Come possiamo individuare le falle di sicurezza nel codice prima della messa in produzione? Italian No brand recommended
Come può il mio team individuare e stabilire la priorità delle vulnerabilità software? Italian No brand recommended
Come faccio a verificare se il nostro software presenta vulnerabilità note? Italian Clair and Trivy, tied
Dovremmo analizzare il codice sorgente o le applicazioni in esecuzione per individuare vulnerabilità? Italian No brand recommended
Cosa funziona meglio per individuare le falle: revisioni manuali o scansioni automatiche? Italian No brand recommended

Each engine's top three

Google AI Mode

No brand named in at least three answers.

Google AI Overviews

  1. 1 Snyk

Method

Each leaderboard ranks brands on two sides. AI is how ChatGPT, Gemini, Google AI Overviews and Google AI Mode answer the board's buyer questions. Search is Google's top 10 results for the keywords behind those questions. All combines the two, where Search is measured.

For the AI side, each month Heralded asks every engine the same buyer questions, twice each, and reads every answer. An answer counts 0 for a brand it leaves out, 50 for a brand it names and 100 for a brand it recommends, and the Heralded Score is built from those. A brand named in at least three answers gets a score and a place.

How the leaderboards are measured